imagemagick:ping_pict_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5087317020901376 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingpictfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

opus:opus_decode_fuzzer_fixed: Use-of-uninitialized-value in silk_decode_core

Project: https://gitlab.xiph.org/xiph/opus.git Detailed Report: https://oss-fuzz.com/testcase?key=5753048566857728 Project: opus Fuzzing Engine: libFuzzer Fuzz Target: opusdecodefuzzerfixed Job Type: libfuzzermsanopus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

imagemagick:encoder_pict_fuzzer: Use-of-uninitialized-value in ScaleQuantumToChar

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5648722328551424 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpictfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in load_truetype_glyph

Detailed Report: https://oss-fuzz.com/testcase?key=5668538569457664 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: loadtruetypeglyph TTLoadGlyph...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in clip

Detailed Report: https://oss-fuzz.com/testcase?key=5758254161592320 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clip...

libssh:ssh_server_fuzzer: Use-of-uninitialized-value in BN_ucmp

Detailed Report: https://oss-fuzz.com/testcase?key=5152650317529088 Project: libssh Fuzzing Engine: libFuzzer Fuzz Target: sshserverfuzzer Job Type: libfuzzermsanlibssh Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: BNucmp BNnistmod384 ecGFpnistfieldsqr...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in put_weighted_pred_8_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=5633401861439488 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: putweightedpred8fallback...

openvswitch:odp_target: Use-of-uninitialized-value in tun_key_to_attr

Detailed Report: https://oss-fuzz.com/testcase?key=5715581933453312 Project: openvswitch Fuzzing Engine: libFuzzer Fuzz Target: odptarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: tunkeytoattr odpflowkeyfromflow...

oniguruma:fuzzer: Use-of-uninitialized-value in gbNUMBER_mbc_enc_len

Detailed Report: https://oss-fuzz.com/testcase?key=5674954193633280 Project: oniguruma Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanoniguruma Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gbNUMBERmbcenclen onigencmb4codetombc parseex...

The vulnerability of the SyncImageSettings function in the console-based ImageMagick graphics editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SyncImageSettings function MagickCore/image.c in the ImageMagick console-based graphics editor involves the use of an uninitialized value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protecte...

CVE-2020-11828

CVE-2020-11828 concerns ColorOS (Android-based OS by OPPO) where RGB is defined on the stack in surfaceflinger.CPP and remains uninitialized. The screenShot RGB assignment may return uninitialized values, causing stack information leakage and enabling a bypass of address space layout randomizatio...

cryptofuzz:cryptofuzz-nss: Use-of-uninitialized-value in selftest_basic_128

Detailed Report: https://oss-fuzz.com/testcase?key=5749776827285504 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-nss Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: selftestbasic128 selftest dosetkey...

kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in fetchARGB32ToRGBA64PM_avx2

Detailed Report: https://oss-fuzz.com/testcase?key=5700723099828224 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: fetchARGB32ToRGBA64PMavx2...

imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in PerceptibleReciprocal

Detailed Report: https://oss-fuzz.com/testcase?key=5671531362910208 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: PerceptibleReciprocal...

cryptofuzz:cryptofuzz-nss: Use-of-uninitialized-value in _gcry_camellia_encrypt128

Detailed Report: https://oss-fuzz.com/testcase?key=5190522215071744 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-nss Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gcrycamelliaencrypt128...

cryptofuzz:cryptofuzz-boringssl-noasm: Use-of-uninitialized-value in selftest

Detailed Report: https://oss-fuzz.com/testcase?key=5666948349427712 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: selftest dessetkey...

kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in XCFImageFormat::mergeRGBToRGB

Detailed Report: https://oss-fuzz.com/testcase?key=5752637241950208 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: XCFImageFormat::mergeRGBToRG...

keystone:fuzz_asm_x86_64: Use-of-uninitialized-value in llvm_ks::APFloat::isFinite

Detailed Report: https://oss-fuzz.com/testcase?key=5649484475531264 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmx8664 Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: llvmks::APFloat::isFinite...

imagemagick:encoder_xcf_fuzzer: Use-of-uninitialized-value in PerceptibleReciprocal

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5632675526475776 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderxcffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server

Summary There are multiple vulnerabilities in the IBM HTTP Server used by WebSphere Application Server. This has been addressed. Vulnerability Details CVEID: CVE-2020-1927 DESCRIPTION: Apache HTTP Server could allow a remote attacker to conduct phishing attacks, caused by an open redirect...