trafficserver:fuzz_yamlcpp: Use-of-uninitialized-value in YAML::Stream::Stream

Project: https://github.com/apache/trafficserver.git Detailed Report: https://oss-fuzz.com/testcase?key=5689205717008384 Project: trafficserver Fuzzing Engine: libFuzzer Fuzz Target: fuzzyamlcpp Job Type: libfuzzermsantrafficserver Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

ghostscript:gstoraster_fuzzer_all_colors: Crash in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5471616942276608 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzerallcolors Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000045e066 Crash State: chunkfreeobject...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::CodeStreamDecompress::decompressTiles

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5203011566632960 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

xz:fuzz_encode_stream: Use-of-uninitialized-value in crc32_arch_optimized

Project: https://github.com/tukaani-project/xz.git Detailed Report: https://oss-fuzz.com/testcase?key=5159600966926336 Project: xz Fuzzing Engine: libFuzzer Fuzz Target: fuzzencodestream Job Type: libfuzzermsanxz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...

kernel: Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work"

A regression was found in the Linux kernel's Bluetooth btsdio driver. A previous commit 1e9ac114c442 intended to fix a use-after-free bug introduced a potential NULL pointer dereference problem. This commit reverts that change since the original issue was properly fixed by a separate commit...

jackson-dataformat-xml:XmlDeserializerFuzzer: Security exception in com.sun.xml.stream.xerces.util.XMLStringBuffer.append

Project: https://github.com/FasterXML/jackson-dataformat-xml.git Detailed Report: https://oss-fuzz.com/testcase?key=5099042146156544 Project: jackson-dataformat-xml Fuzzing Engine: libFuzzer Fuzz Target: XmlDeserializerFuzzer Job Type: libfuzzerasanjackson-dataformat-xml Platform Id: linux Crash...

pcre2:pcre2_fuzzer_16_4l: Use-of-uninitialized-value in do_callout_jit

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed Report: https://oss-fuzz.com/testcase?key=6165376946733056 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer164l Job Type: libfuzzermsanpcre2 Platform Id: linux Crash Type:...

Fedora 37 : kernel / kernel-headers / kernel-tools (2023-f4f9182dc8)

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-f4f9182dc8 advisory. The 6.1.5 stable kernel rebase contains new features, enhanced hardware support, and a number of important fixes across the tree. Tenable has...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII

Detailed Report: https://oss-fuzz.com/testcase?key=6514983753023488 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5F_addr_encode

Detailed Report: https://oss-fuzz.com/testcase?key=6305131340562432 Project: hdf5 Fuzzing Engine: afl Fuzz Target: h5extendedfuzzer Job Type: aflasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x612000027178 Crash State: H5Faddrencode H5Ofsinfoencode H5Omsgflus...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5977567329845248 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in readParsedPacket

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4757167128248320 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Addres...

freerdp:TestFuzzCodecs: Heap-buffer-overflow in FreeRDPReadColor

Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=6156779722440704 Project: freerdp Fuzzing Engine: libFuzzer Fuzz Target: TestFuzzCodecs Job Type: libfuzzerasanfreerdp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=6498124295110656 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerubsancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

CVE-2024-26918

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix active state requirement in PME polling The commit noted in fixes added a bogus requirement that runtime PM managed devices need to be in the RPMACTIVE state for PME polling. In fact, only devices in low power states...

CVE-2024-26910

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix performance regression in swap operation The patch "netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test", commit 28628fa9 fixes a race condition. But the synchronizercu add...

CVE-2024-26910

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix performance regression in swap operation The patch "netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test", commit 28628fa9 fixes a race condition. But the synchronizercu add...

CVE-2024-26918

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix active state requirement in PME polling The commit noted in fixes added a bogus requirement that runtime PM managed devices need to be in the RPMACTIVE state for PME polling. In fact, only devices in low power states...

CVE-2024-26910

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix performance regression in swap operation The patch "netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test", commit 28628fa9 fixes a race condition. But the synchronizercu add...

CVE-2024-26918 PCI: Fix active state requirement in PME polling

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix active state requirement in PME polling The commit noted in fixes added a bogus requirement that runtime PM managed devices need to be in the RPMACTIVE state for PME polling. In fact, only devices in low power states...