OSV-2025-627 Null-dereference READ in ProcessRows

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438295348 Crash type: Null-dereference READ Crash state: ProcessRows DecodeImageData VP8LDecodeImage...

PT-2025-34543

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438295348 Crash type: Null-dereference READ Crash state: ProcessRows DecodeImageData VP8LDecodeImage...

PT-2025-34544

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438294033 Crash type: Null-dereference READ Crash state: ubsan GetStackTrace...

EulerOS 2.0 SP11 : libsoup (EulerOS-SA-2025-1934)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsoup. The libsoup appendparamquoted function may contain an overflow bug resulting in a buffer under-read.CVE-2025-32050 A...

libwebp:[email protected]: Null-dereference READ in [email protected]

Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=6357972512210944 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibwebp Platform Id: linux Crash Type: Null-dereference READ Crash...

libwebp:[email protected]: Null-dereference READ in [email protected]

Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=4787105202241536 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibwebp Platform Id: linux Crash Type:...

libwebp:[email protected]: Null-dereference READ in ubsan_GetStackTrace

Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=5830241760378880 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerubsanlibwebp Platform Id: linux Crash Type: Null-dereferen...

libwebp:[email protected]: Null-dereference READ in ProcessRows

Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=5736321361707008 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type: Null-dereference READ...

graphicsmagick:coder_TIFF_fuzzer: Null-dereference READ in ProcessRows

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5564282822787072 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderTIFFfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Null-dereference READ Crash...

libvips:radsave_buffer_fuzzer: Null-dereference READ in ProcessRows

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5108128707575808 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: radsavebufferfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

imagemagick:encoder_webp_fuzzer: Null-dereference READ in ProcessRows

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5081898805428224 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderwebpfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Null-dereference READ Crash...

leptonica:pix_rotate_shear_fuzzer: Null-dereference READ in ProcessRows

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=4656449008762880 Project: leptonica Fuzzing Engine: afl Fuzz Target: pixrotateshearfuzzer Job Type: aflasanleptonica Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

Linux Distros Unpatched Vulnerability : CVE-2025-38143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - backlight: pm8941: Add NULL check in wledconfigure devmkasprintf returns NULL when memory allocation fails. Currently, wledconfigure does not check for this cas...

Linux Distros Unpatched Vulnerability : CVE-2022-48908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: arcnet: com20020: Fix null-ptr-deref in com20020pciprobe During driver initialization, the pointer of card info, i.e. the variable 'ci' is required. Howeve...

Linux Distros Unpatched Vulnerability : CVE-2017-16914

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The stubsendretsubmit function drivers/usb/usbip/stubtx.c in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107 allows attackers to cause a...

Linux Distros Unpatched Vulnerability : CVE-2019-15098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor...

Linux Distros Unpatched Vulnerability : CVE-2022-48970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: afunix: Get userns from inskb in unixdiaggetexact. Wei Chen reported a NULL deref in skusern...

Linux Distros Unpatched Vulnerability : CVE-2025-22066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: imx-card: Add NULL check in imxcardprobe devmkasprintf returns NULL when memory...

Linux Distros Unpatched Vulnerability : CVE-2024-45002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rtla/osnoise: Prevent NULL dereference in error handling If the tool-data allocation fails...

Linux Distros Unpatched Vulnerability : CVE-2024-0078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user in a guest can cause a NULL-pointer dereference ...