libaom/av1_dec_fuzzer: Index-out-of-bounds in read_uncompressed_header

Detailed report: https://oss-fuzz.com/testcase?key=5682574110752768 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: libfuzzerubsanlibaom Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: readuncompressedheader...

dav1d/dav1d_fuzzer_mt: Use-of-uninitialized-value in apply_to_row_y

Detailed report: https://oss-fuzz.com/testcase?key=5652400153559040 Project: dav1d Fuzzer: libFuzzerdav1dfuzzermt Fuzz target binary: dav1dfuzzermt Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: applytorowy dav1dapplygrain8bpc...

openvswitch/ofctl_parse_target: Use-of-uninitialized-value in json_string_unescape

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5701233931714560 Project: openvswitch Fuzzer: libFuzzeropenvswitchofctlparsetarget Fuzz target binary: ofctlparsetarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type:...

Reflected XSS Vulnerability in Security Analytics Web UI

SUMMARY The Symantec Security Analytics SA Web UI is susceptible to a reflected cross-site scripting XSS vulnerability. A remote attacker with knowledge of the SA web UI hostname or IP address can craft a malicious URL for the SA web UI and target SA web UI users with phishing attacks or other...

dav1d/dav1d_fuzzer: Use-of-uninitialized-value in imin

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5703985730682880 Project: dav1d Fuzzer: libFuzzerdav1dfuzzer Fuzz target binary: dav1dfuzzer Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...

dav1d/dav1d_fuzzer_mt: Use-of-uninitialized-value in iclip

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5749155129982976 Project: dav1d Fuzzer: libFuzzerdav1dfuzzermt Fuzz target binary: dav1dfuzzermt Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

minizip/unzip_fuzzer: Index-out-of-bounds in BZ2_decompress

Project: https://github.com/nmoinvaz/minizip.git Detailed report: https://oss-fuzz.com/testcase?key=5714988497371136 Project: minizip Fuzzer: libFuzzerminizipunzipfuzzer Fuzz target binary: unzipfuzzer Job Type: libfuzzerubsanminizip Platform Id: linux Crash Type: Index-out-of-bounds Crash Addres...

dav1d/dav1d_fuzzer: Use-of-uninitialized-value in iclip

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5671919538405376 Project: dav1d Fuzzer: libFuzzerdav1dfuzzer Fuzz target binary: dav1dfuzzer Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...

dav1d/dav1d_fuzzer: Use-of-uninitialized-value in iclip

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5730334348410880 Project: dav1d Fuzzer: libFuzzerdav1dfuzzer Fuzz target binary: dav1dfuzzer Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...

dav1d/dav1d_fuzzer_mt: Use-of-uninitialized-value in cdef_find_dir_c

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5673813048557568 Project: dav1d Fuzzer: libFuzzerdav1dfuzzermt Fuzz target binary: dav1dfuzzermt Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

imagemagick/encoder_mvg_fuzzer: Use-of-uninitialized-value in GetNextToken

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5648871435272192 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

skia/api_raster_n32_canvas: Use-of-uninitialized-value in SkDashPath::InternalFilter

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5666366246354944 Project: skia Fuzzer: libFuzzerskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...

openvswitch/ofctl_parse_target: Use-of-uninitialized-value in flow_union_with_miniflow_subset

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5713500089876480 Project: openvswitch Fuzzer: libFuzzeropenvswitchofctlparsetarget Fuzz target binary: ofctlparsetarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type:...

dav1d/dav1d_fuzzer_mt: Heap-buffer-overflow in emu_edge_c

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5089954858795008 Project: dav1d Fuzzer: libFuzzerdav1dfuzzermt Fuzz target binary: dav1dfuzzermt Job Type: libfuzzerasandav1d Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

libgit2/objects_fuzzer: Heap-buffer-overflow in git__strntol64

Project: https://github.com/libgit2/libgit2.git Detailed report: https://oss-fuzz.com/testcase?key=5667317078294528 Project: libgit2 Fuzzer: libFuzzerlibgit2objectsfuzzer Fuzz target binary: objectsfuzzer Job Type: libfuzzerasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

openthread/radio-receive-done-fuzzer: Heap-buffer-overflow in ot::MeshForwarder::GetFramePriority

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5629815537795072 Project: openthread Fuzzer: aflopenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type:...

Synaptics Touchpad Driver Leaks Kernel Memory Pointers - Lenovo Support US

No description provided...

Synaptics Touchpad Driver Leaks Kernel Memory Pointers - US

Lenovo Security Advisory: LEN-23156 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-15532 Summary Description: Synaptics has informed Lenovo of a vulnerability in the Synaptics TouchPad driver. The driver can reveal freed kernel memo...

WP Master Slider v3.5.1 - Cross Site Scripting Vulnerability

Document Title: =============== WP Master Slider v3.5.1 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2158 Reference: https://wordpress.org/support/?posttype=topic&p=10874555...

harfbuzz/hb-shape-fuzzer: Crash in BEInt<short, 2>::operator short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5754863779053568 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash...