skia/api_image_filter: Use-of-uninitialized-value in SkTHashTable<SkGlyph, SkPackedGlyphID, SkGlyph::HashTraits>::find

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5766692521639936 Project: skia Fuzzer: libFuzzerskiaapiimagefilter Fuzz target binary: apiimagefilter Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

imagemagick/ping_icon_fuzzer: Use-of-uninitialized-value in crc32_little

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5706734912405504 Project: imagemagick Fuzzer: libFuzzerimagemagickpingiconfuzzer Fuzz target binary: pingiconfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

libaom/av1_dec_fuzzer: Index-out-of-bounds in read_uncompressed_header

Detailed report: https://oss-fuzz.com/testcase?key=5682574110752768 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: libfuzzerubsanlibaom Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: readuncompressedheader...

dav1d/dav1d_fuzzer_mt: Use-of-uninitialized-value in apply_to_row_y

Detailed report: https://oss-fuzz.com/testcase?key=5652400153559040 Project: dav1d Fuzzer: libFuzzerdav1dfuzzermt Fuzz target binary: dav1dfuzzermt Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: applytorowy dav1dapplygrain8bpc...

openvswitch/ofctl_parse_target: Use-of-uninitialized-value in json_string_unescape

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5701233931714560 Project: openvswitch Fuzzer: libFuzzeropenvswitchofctlparsetarget Fuzz target binary: ofctlparsetarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type:...

Reflected XSS Vulnerability in Security Analytics Web UI

SUMMARY The Symantec Security Analytics SA Web UI is susceptible to a reflected cross-site scripting XSS vulnerability. A remote attacker with knowledge of the SA web UI hostname or IP address can craft a malicious URL for the SA web UI and target SA web UI users with phishing attacks or other...

dav1d/dav1d_fuzzer: Use-of-uninitialized-value in imin

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5703985730682880 Project: dav1d Fuzzer: libFuzzerdav1dfuzzer Fuzz target binary: dav1dfuzzer Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...

dav1d/dav1d_fuzzer_mt: Use-of-uninitialized-value in iclip

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5749155129982976 Project: dav1d Fuzzer: libFuzzerdav1dfuzzermt Fuzz target binary: dav1dfuzzermt Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

minizip/unzip_fuzzer: Index-out-of-bounds in BZ2_decompress

Project: https://github.com/nmoinvaz/minizip.git Detailed report: https://oss-fuzz.com/testcase?key=5714988497371136 Project: minizip Fuzzer: libFuzzerminizipunzipfuzzer Fuzz target binary: unzipfuzzer Job Type: libfuzzerubsanminizip Platform Id: linux Crash Type: Index-out-of-bounds Crash Addres...

dav1d/dav1d_fuzzer: Use-of-uninitialized-value in iclip

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5671919538405376 Project: dav1d Fuzzer: libFuzzerdav1dfuzzer Fuzz target binary: dav1dfuzzer Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...

dav1d/dav1d_fuzzer: Use-of-uninitialized-value in iclip

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5730334348410880 Project: dav1d Fuzzer: libFuzzerdav1dfuzzer Fuzz target binary: dav1dfuzzer Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...

imagemagick/encoder_mvg_fuzzer: Use-of-uninitialized-value in GetNextToken

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5648871435272192 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

openvswitch/ofctl_parse_target: Use-of-uninitialized-value in flow_union_with_miniflow_subset

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5713500089876480 Project: openvswitch Fuzzer: libFuzzeropenvswitchofctlparsetarget Fuzz target binary: ofctlparsetarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type:...

Synaptics Touchpad Driver Leaks Kernel Memory Pointers - US

Lenovo Security Advisory: LEN-23156 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-15532 Summary Description: Synaptics has informed Lenovo of a vulnerability in the Synaptics TouchPad driver. The driver can reveal freed kernel memo...

Lenovo Smart Assistant Factory Test Mode - Lenovo Support US

No description provided...

zlib/example_dict_fuzzer: Use-of-uninitialized-value in slide_hash

Detailed report: https://oss-fuzz.com/testcase?key=5725547573805056 Project: zlib Fuzzer: libFuzzerzlibexampledictfuzzer Fuzz target binary: exampledictfuzzer Job Type: libfuzzermsanzlib Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: slidehash fillwindow...

keystone/fuzz_asm_mips64be: Use-of-uninitialized-value in MipsAsmParser::isPicAndNotNxxAbi

Detailed report: https://oss-fuzz.com/testcase?key=5670109310353408 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmmips64be Fuzz target binary: fuzzasmmips64be Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

systemd/fuzz-network-parser: Use-of-uninitialized-value in internal_hashmap_free_free

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5649975879401472 Project: systemd Fuzzer: libFuzzersystemdfuzz-network-parser Fuzz target binary: fuzz-network-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type:...

harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in hb_array_t<OT::IntType<short, 2u> const>::operator

Detailed report: https://oss-fuzz.com/testcase?key=5689920685867008 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: hbarrayt...

systemd/fuzz-network-parser: Crash in netdev_get

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5695165612687360 Project: systemd Fuzzer: aflsystemdfuzz-network-parser Fuzz target binary: fuzz-network-parser Job Type: aflasansystemd Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...