skia:image_decode: Use-of-uninitialized-value in format_message

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=4980167071039488 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: imagedecode Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libultrahdr:ultrahdr_dec_fuzzer: Use-of-uninitialized-value in format_message

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5926544905142272 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrdecfuzzer Job Type: libfuzzermsanlibultrahdr Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

ninja:fuzzer: Use-of-uninitialized-value in Lexer::Error

Project: https://github.com/ninja-build/ninja.git Detailed Report: https://oss-fuzz.com/testcase?key=5745482170171392 Project: ninja Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanninja Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

CVE-2023-42124

CVE-2023-42124 concerns Avast Premium Security. The flaw is in the sandbox feature’s implementation, caused by incorrect authorization, allowing a local attacker who can run low-privileged code to escalate privileges and execute arbitrary code outside the sandbox, at medium integrity and high imp...

WordPress EAN for WooCommerce Plugin <= 4.8.9 is vulnerable to Privilege Escalation

Software EAN for WooCommerce Type Plugin Vulnerable versions = 4.8.9 Fixed in 4.9.0 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-34370 Patch priority Medium CVSS severity Medium 7.2 Developer Claim ownership PSID 628e44782b40 Credits...

proton-bridge:fuzz_decode_charset: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5628607660621824 Project: proton-bridge Fuzzing Engine: libFuzzer Fuzz Target: fuzzdecodecharset Job Type: libfuzzerasanproton-bridge Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: addre...

smt:fuzz_basic_op: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5091399218298880 Project: smt Fuzzing Engine: libFuzzer Fuzz Target: fuzzbasicop Job Type: libfuzzerasansmt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommended Securi...

imagemagick:encoder_dng_fuzzer: Heap-buffer-overflow in LibRaw::process_Sony_ADDRESS

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4971655282622464 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

boringssl:ssl_ctx_api: Use-of-uninitialized-value in ssl_ctx_make_profiles

Project: https://boringssl.googlesource.com/boringssl Detailed Report: https://oss-fuzz.com/testcase?key=6263849463382016 Project: boringssl Fuzzing Engine: libFuzzer Fuzz Target: sslctxapi Job Type: libfuzzermsanboringssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

mongo-go-driver:fuzz_decode: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6108034653814784 Project: mongo-go-driver Fuzzing Engine: libFuzzer Fuzz Target: fuzzdecode Job Type: libfuzzerasanmongo-go-driver Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address...

skia-ftz:image_decode_incremental: Use-of-uninitialized-value in format_message

Detailed Report: https://oss-fuzz.com/testcase?key=5517438365007872 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: imagedecodeincremental Job Type: libfuzzermsanskia-ftz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: formatmessage...

s2geometry:s2_fuzzer: Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char>>& std::__1::__put_char

Project: https://github.com/google/s2geometry.git Detailed Report: https://oss-fuzz.com/testcase?key=5149098832363520 Project: s2geometry Fuzzing Engine: libFuzzer Fuzz Target: s2fuzzer Job Type: libfuzzermsans2geometry Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

uint256:uint256Fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5077709748240384 Project: uint256 Fuzzing Engine: libFuzzer Fuzz Target: uint256Fuzz Job Type: libfuzzerasanuint256 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommende...

USN-6718-1: curl vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description Dan Fandrich discovered that curl would incorrectly use the default set of protocols when a parameter option disabled all protocols without adding any, contrary to expectations. This issue only affected...

USN-6697-1: Bash vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that Bash incorrectly handled certain memory operations when processing commands. If a user or automated system were tricked into running a specially crafted bash file, a remote attacker...

PT-2024-25563 · Unknown · Illid Share This Image

Name of the Vulnerable Software and Affected Versions: ILLID Share This Image versions 1.97 and earlier Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability poses a medium risk. There is no information provide...

simdjson:fuzz_dump: Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char>>& std::__1::__put_char

Detailed Report: https://oss-fuzz.com/testcase?key=6564074019160064 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzdump Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::basicostream& std::1::putchar printjs...

boringssl:ssl_ctx_api: Use-of-uninitialized-value in ssl_str_to_group_ids

Project: https://boringssl.googlesource.com/boringssl Detailed Report: https://oss-fuzz.com/testcase?key=6200632705875968 Project: boringssl Fuzzing Engine: libFuzzer Fuzz Target: sslctxapi Job Type: libfuzzermsanboringssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

gosnmp:fuzz_unmarshal: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6121067329421312 Project: gosnmp Fuzzing Engine: libFuzzer Fuzz Target: fuzzunmarshal Job Type: libfuzzerasangosnmp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommende...

go-ldap:fuzz_parse_dn: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5123564268224512 Project: go-ldap Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsedn Job Type: libfuzzerasango-ldap Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommende...