PT-2024-11298 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an uninitialized value in the caif seqpkt sendmsg function, which is defined in sys sendmsg. When nr segs equals zero in iovec from user, the object msg-msg...

OSV-2021-948 Use-of-uninitialized-value in residual_coding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35950 Crash type: Use-of-uninitialized-value Crash state: residualcoding readtransformunit readtransformtree...

OSV-2021-916 Use-of-uninitialized-value in jxl::ModularFrameDecoder::DecodeAcMetadata

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35778 Crash type: Use-of-uninitialized-value Crash state: jxl::ModularFrameDecoder::DecodeAcMetadata jxl::FrameDecoder::ProcessDCGroup jxl::ThreadPool::RunCallStatejxl::Status...

OSV-2021-858 Use-of-uninitialized-value in jxl::N_SCALAR::Epf0Row

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35234 Crash type: Use-of-uninitialized-value Crash state: jxl::NSCALAR::Epf0Row jxl::FilterPipeline::ApplyFiltersRow jxl::FinalizeImageRect...

CentOS: Security Advisory for qt5-qtimageformats (CESA-2021:2328)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS 7 : qt5-qtimageformats (RHSA-2021:2328)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2328 advisory. - A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16. CVE-2018-25011 - A use of uninitialized value was found in...

RHEL 7 : qt5-qtimageformats (RHSA-2021:2328)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2328 advisory. The Qt Image Formats in an add-on module for the core Qt Gui library that provides support for additional image formats including MNG, TGA,...

Important: Red Hat Security Advisory: qt5-qtimageformats security update

An update for qt5-qtimageformats is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().

...

CVE-2018-25014

CVE-2018-25014 affects the libwebp library: a use of an uninitialized value is present in ReadSymbol() in versions before 1.0.1. The issue is documented across multiple advisories (e.g., ALAS2/AlmaLinux notices) and is associated with libwebp data integrity/confidentiality/availability risks. A f...

CVE-2018-25014

A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol...

OSV-2021-757 Use-of-uninitialized-value in nn_check_initialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34156 Crash type: Use-of-uninitialized-value Crash state: nncheckinitialized nnzero ecgdsasignraw...

OSV-2021-735 Use-of-uninitialized-value in decode_CABAC_FL_bypass

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34047 Crash type: Use-of-uninitialized-value Crash state: decodeCABACFLbypass decodecoeffabslevelremaining residualcoding...

PT-2021-21280 · Signalwire +1 · Freeswitch +1

Name of the Vulnerable Software and Affected Versions: SignalWire freeswitch versions prior to 1.10.6 Description: An issue was discovered in the function sofia handle sip i notify in sofia.c, which may allow attackers to view sensitive information due to an uninitialized value. Recommendations:...

OSV-2021-615 Use-of-uninitialized-value in DES_set_key_unchecked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33023 Crash type: Use-of-uninitialized-value Crash state: DESsetkeyunchecked osslcipherhwtdesede3initkey tdesinit...

OSV-2021-586 Use-of-uninitialized-value in void intra_prediction_angular<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32682 Crash type: Use-of-uninitialized-value Crash state: void intrapredictionangular void decodeintrapredictioninternal decodeintraprediction...

OSV-2021-525 Use-of-uninitialized-value in void edge_filtering_chroma_internal<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32059 Crash type: Use-of-uninitialized-value Crash state: void edgefilteringchromainternal edgefilteringchroma threadtaskdeblockCTBRow::work...

OSV-2021-448 Use-of-uninitialized-value in std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31365 Crash type: Use-of-uninitialized-value Crash state: std::1::packagedtaskfuncstd::1::bindgrk::mct::decompressirrev std::1::packagedtaskint ThreadPool::ThreadPool...

OSV-2021-426 Use-of-uninitialized-value in std::__1::__packaged_task_func<std::__1::__bind<grk::mct::decompress_irrev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31180 Crash type: Use-of-uninitialized-value Crash state: std::1::packagedtaskfuncstd::1::bindgrk::mct::decompressirrev std::1::packagedtaskint ThreadPool::ThreadPool...

OSV-2021-285 Use-of-uninitialized-value in grk::FileFormat::apply_palette_clr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30273 Crash type: Use-of-uninitialized-value Crash state: grk::FileFormat::applypaletteclr grk::FileFormat::decompress grkdecompress...