152 matches found
Use of Uninitialized Variable
Overview Affected versions of this package are vulnerable to Use of Uninitialized Variable in the cdxldecodeham8 or cdxldecodeham6 functions when processing type-0 CDXL files with HAM pixels that select uninitialized newpalette entries. An attacker can expose stack memory contents, including...
Use of Uninitialized Variable
Overview Affected versions of this package are vulnerable to Use of Uninitialized Variable via the kempfrestorebuf process. An attacker can access sensitive stack memory contents by crafting a G2M3/G2M4 stream with a short Kempf palette, causing out-of-range palette indices to copy uninitialized...
CVE-2026-120246
FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries. Attackers can craft a type-0 CDXL file whose HAM pixels select unfilled newpalette entries in cdxldecodeham8 or...
DEBIAN-CVE-2026-120243
FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette indices. Attackers can craft a G2M3/G2M4 stream with a short Kempf palette so kempfrestorebuf copies uninitialized stac...
CVE-2026-120243
FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette indices. Attackers can craft a G2M3/G2M4 stream with a short Kempf palette so kempfrestorebuf copies uninitialized stac...
CVE-2026-120243
FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette indices. Attackers can craft a G2M3/G2M4 stream with a short Kempf palette so kempfrestorebuf copies uninitialized stac...
EUVD-2026-114743
FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries. Attackers can craft a type-0 CDXL file whose HAM pixels select unfilled newpalette entries in cdxldecodeham8 or...
CVE-2026-120246: FFmpeg: FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack…
FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries. Attackers can craft a type-0 CDXL file whose HAM pixels select unfilled newpalette entries in cdxldecodeham8 or...
CVE-2026-120243: FFmpeg: FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows…
FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette indices. Attackers can craft a G2M3/G2M4 stream with a short Kempf palette so kempfrestorebuf copies uninitialized stac...
PT-2026-134684
FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette indices. Attackers can craft a G2M3/G2M4 stream with a short Kempf palette so kempf restore buf copies uninitialized...
CLEANSTART-2024-DK19181 vim is vulnerable to Use of Uninitialized Variable
Security vulnerability affects the vim package. vim is vulnerable to Use of Uninitialized Variable...
Linux Distros Unpatched Vulnerability : CVE-2026-109828
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing...
Use of Uninitialized Variable
Overview Affected versions of this package are vulnerable to Use of Uninitialized Variable in the topalette function in src/libImaging/Convert.c when quantize is called with an empty palette. An attacker can trigger an unhandled error condition by supplying a palette with zero entries, causing th...
SUSE CVE-2026-109828
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...
CVE-2026-110143
An use of uninitialized variable flaw was found in the ThirdParty lmzasdk component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/554531101...
CVE-2026-110143
A use of uninitialized variable flaw in the ThirdParty lmza_sdk component of Google Chrome (prior to version 155.0.8059.79 ) allows a remote attacker to potentially read memory inside the sandbox by providing a crafted file. The vulnerability was reported by Google and is addressed in the stable ...
CVE-2026-109828
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...
AZL-108036 CVE-2026-109828 affecting package libsndfile 1.2.2-7
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...
DEBIAN-CVE-2026-109828
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...
CVE-2026-109828
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...