PHP 7.3.x < 7.3.16 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 7.3.x prior to 7.3.16. It is, therefore, affected by the following vulnerabilities: - An out of bounds read resulting in the use of an uninitialized value in exif. CVE-2020-7064 - A stack buffer overflow in mbstrtolow...

imagemagick:enhance_fuzzer: Use-of-uninitialized-value in EnhanceImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5633720850841600 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

binutils:fuzz_disassemble: Use-of-uninitialized-value in suffix

Detailed Report: https://oss-fuzz.com/testcase?key=5643443172016128 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: suffix printinsnz80buf printinsnz80...

binutils:fuzz_bfd: Use-of-uninitialized-value in bfd_bread

Detailed Report: https://oss-fuzz.com/testcase?key=5762172392308736 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzbfd Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bfdbread msdosobjectp bfdcheckformatmatches...

binutils:fuzz_bfd: Use-of-uninitialized-value in msdos_object_p

Detailed Report: https://oss-fuzz.com/testcase?key=5161982455185408 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzbfd Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: msdosobjectp bfdcheckformatmatches...

binutils:fuzz_bfd: Use-of-uninitialized-value in xcoff64_slurp_armap

Detailed Report: https://oss-fuzz.com/testcase?key=5702017852112896 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzbfd Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: xcoff64slurparmap xcoff64archivep...

binutils:fuzz_disassemble: Use-of-uninitialized-value in print_insn_ns32k

Detailed Report: https://oss-fuzz.com/testcase?key=5740150585032704 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: printinsnns32k fuzzdisassemble.c...

binutils:fuzz_disassemble: Use-of-uninitialized-value in loop_prim_n_bytes

Detailed Report: https://oss-fuzz.com/testcase?key=5652986874560512 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: loopprimnbytes decodes12z printinsns12...

PHP < 7.2.29 Multiple Vulnerabilities (Mar 2020) - Windows

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

PHP < 7.2.29 Multiple Vulnerabilities (Mar 2020) - Linux

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

libfdk-aac:aacDecoder_ConfigRaw: Use-of-uninitialized-value in _skipEqInstructions

Detailed Report: https://oss-fuzz.com/testcase?key=5144868184915968 Project: libfdk-aac Fuzzing Engine: libFuzzer Fuzz Target: aacDecoderConfigRaw Job Type: libfuzzermsanlibfdk-aac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: skipEqInstructions...

libspectre:spectre_read_fuzzer: Use-of-uninitialized-value in psscan

Project: https://gitlab.freedesktop.org/libspectre/libspectre.git Detailed Report: https://oss-fuzz.com/testcase?key=5741466287865856 Project: libspectre Fuzzing Engine: libFuzzer Fuzz Target: spectrereadfuzzer Job Type: libfuzzermsanlibspectre Platform Id: linux Crash Type:...

libspectre:spectre_read_fuzzer: Use-of-uninitialized-value in ps_read_doseps

Project: https://gitlab.freedesktop.org/libspectre/libspectre.git Detailed Report: https://oss-fuzz.com/testcase?key=5710259223265280 Project: libspectre Fuzzing Engine: libFuzzer Fuzz Target: spectrereadfuzzer Job Type: libfuzzermsanlibspectre Platform Id: linux Crash Type:...

binutils:fuzz_disassemble: Use-of-uninitialized-value in print_insn_metag

Detailed Report: https://oss-fuzz.com/testcase?key=5696334771519488 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: printinsnmetag fuzzdisassemble.c...

binutils:fuzz_disassemble: Use-of-uninitialized-value in htab_find_with_hash

Detailed Report: https://oss-fuzz.com/testcase?key=5189041990664192 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: htabfindwithhash printinsn32...

stb:stb_png_read_fuzzer: Use-of-uninitialized-value in stbi__paeth

Detailed Report: https://oss-fuzz.com/testcase?key=5762719665094656 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbpngreadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: stbipaeth stbicreatepngimageraw...

imagemagick:crop_fuzzer: Use-of-uninitialized-value in LibRaw::panasonic_load_raw

Detailed Report: https://oss-fuzz.com/testcase?key=5199241358344192 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::panasonicloadraw LibRaw::unpa...

libsass:data_context_fuzzer: Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::Extension, std::__1::allocator<Sass::Ext

Detailed Report: https://oss-fuzz.com/testcase?key=5682028378062848 Project: libsass Fuzzing Engine: libFuzzer Fuzz Target: datacontextfuzzer Job Type: libfuzzermsanlibsass Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick:ping_ptif_fuzzer: Use-of-uninitialized-value in ConstantString

Detailed Report: https://oss-fuzz.com/testcase?key=5175716879794176 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingptiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ConstantString SetImageProperty...

systemd:fuzz-journal-remote: Use-of-uninitialized-value in strjoin_real

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=5730988035670016 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-journal-remote Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...