58 matches found
Palimpsest
CVE-2026-74945 · Uninitialized heap disclosure through a crafted web font This directory holds an honest reproduction package for an uninitialized-memory disclosure in Firefox font handling. A crafted @font-face font walks the OTS output stream into an uninitialized-heap gap, and ordinary content...
[SECURITY] Fedora 45 Update: ots-0.5.0-38.fc45
The open text summarizer is an open source tool for summarizing texts. The program reads a text and decides which sentences are important and which are not...
Malicious code in sonic-ots-uyaidoagib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e762cd9d8c7694d79e9970d1697694085059e2df3bb8b57c31be5949b37ca5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2024-47543
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2024-6444
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - No proper validation of the length of user input in olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c. CVE-2024-6444 Note that Nessus relies on...
CVE-2024-8798
No proper validation of the length of user input in olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c...
CVE-2024-6444 Bluetooth: ots: missing buffer length check
No proper validation of the length of user input in olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c...
CVE-2024-6444 Bluetooth: ots: missing buffer length check
No proper validation of the length of user input in olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c...
CVE-2024-6444
CVE-2024-6444 affects Zephyr’s Bluetooth OTS client: olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c handles input length poorly, enabling potential buffer overflow. Existing connected sources confirm the exact vulnerable component and root cause (missing input length valida...
CVE-2024-6444
No proper validation of the length of user input in olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c...
Zephyr 安全漏洞
Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr that stems from olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c that does not properly validate the length of user input...
ots:ots-fuzzer: Use-of-uninitialized-value in ots::OpenTypeGLAT_v3::GlyphAttrs::OctaboxMetrics::SubboxEntry::SerializePart
Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=5105074668896256 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzermsanots Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
ots:ots-fuzzer: Use-of-uninitialized-value in ProcessGeneric
Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=6402542306131968 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzermsanots Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
SUSE CVE-2015-0823
Multiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before 36.0, might allow remote attackers to trigger problematic Developer Console information or possibly have unspecified other impact by leveraging incorrect macro expansion, related to the...
HIMA Paul Hildebrandt X-OPC 、X-OTS 代码问题漏洞
HIMA Paul Hildebrandt X-OPC and HIMA Paul Hildebrandt X-OTS are both products of HIMA Paul Hildebrandt, Inc.HIMA Paul Hildebrandt X-OPC is an intelligent security platform.HIMA Paul Hildebrandt X-OTS is a security simulator. -OTS is a safety simulator. A code issue vulnerability exists in HIMA Pa...
ots:ots-fuzzer: Use-of-uninitialized-value in ots::OpenTypeNAME::Serialize
Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=5968064106070016 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzermsanots Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
ots:ots-fuzzer: Use-of-uninitialized-value in std::__1::__vector_base<ots::NameRecord, std::__1::allocator<ots::NameRecord> >:
Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=4827757436076032 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzermsanots Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
ots:ots-fuzzer: Stack-use-after-scope in std::__1::__tree_const_iterator<std::__1::__value_type<unsigned int, ots::Table*
Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=5123437222821888 Project: ots Fuzzing Engine: afl Fuzz Target: ots-fuzzer Job Type: aflasanots Platform Id: linux Crash Type: Stack-use-after-scope WRITE 8 Crash Address: 0x7ffdd2cd5ca0 Crash State:...
ots:ots-fuzzer: Dynamic-stack-buffer-overflow in std::__1::__wrap_iter<std::__1::pair<unsigned int, unsigned char>*>::__wrap_iter
Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=6141674190405632 Project: ots Fuzzing Engine: afl Fuzz Target: ots-fuzzer Job Type: aflasanots Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 8 Crash Address: 0x7fff8031fa80 Cras...