ndpi:fuzz_ndpi_reader_nalloc: Use-of-uninitialized-value in processHandshakeTLSBlock

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5685346470526976 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireadernalloc Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

json:parse_bson_fuzzer: Use-of-uninitialized-value in nlohmann::json_abi_v3_12_0::detail::binary_reader<nlohmann::json_abi_v3_12_0::ba

Project: https://github.com/nlohmann/json.git Detailed Report: https://oss-fuzz.com/testcase?key=5520518678380544 Project: json Fuzzing Engine: libFuzzer Fuzz Target: parsebsonfuzzer Job Type: libfuzzermsanjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Linux Distros Unpatched Vulnerability : CVE-2026-109828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing...

Use of Uninitialized Resource

Overview Affected versions of this package are vulnerable to Use of Uninitialized Resource via the TIFF strip and tile decoder in src/libImaging/TiffDecode.c, when decoding TIFF images using codecs such as JPEG or Group 4 that successfully decode fewer rows than the declared strip or tile length...

Use of Uninitialized Variable

Overview Affected versions of this package are vulnerable to Use of Uninitialized Variable in the topalette function in src/libImaging/Convert.c when quantize is called with an empty palette. An attacker can trigger an unhandled error condition by supplying a palette with zero entries, causing th...

curl:curl_fuzzer_proto_multi: Use-of-uninitialized-value in cf_socket_send

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5434019412770816 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerprotomulti Job Type: libfuzzermsancurl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

CVE-2026-110143

An use of uninitialized variable flaw was found in the ThirdParty lmzasdk component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/554531101...

CVE-2026-110143

A use of uninitialized variable flaw in the ThirdParty lmza_sdk component of Google Chrome (prior to version 155.0.8059.79 ) allows a remote attacker to potentially read memory inside the sandbox by providing a crafted file. The vulnerability was reported by Google and is addressed in the stable ...

DEBIAN-CVE-2026-109828

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...

AZL-108036 CVE-2026-109828 affecting package libsndfile 1.2.2-5

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...

UBUNTU-CVE-2026-109828

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-109828

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-109828: Use of Uninitialized Variable

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...

Use of Uninitialized Resource

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

Use of Uninitialized Resource

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

Use of Uninitialized Resource

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Use of Uninitialized Resource

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Use of Uninitialized Resource

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Use of Uninitialized Resource

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Use of Uninitialized Resource

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...