16338 matches found
OSV-2026-144 Use-of-uninitialized-value in initFilter
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=478301104 Crash type: Use-of-uninitialized-value Crash state: initFilter ffswsinitsinglecontext mpswsreinit...
PT-2026-6536
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=478301104 Crash type: Use-of-uninitialized-value Crash state: initFilter ff sws init single context mp sws reinit...
ROS-20260126-73-0053
A vulnerability in the virtiofs component of the Linux operating system kernel is related to improper validation of a function's return value. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
pcapplusplus:FuzzTargetNg: Use-of-uninitialized-value in pcpp::computeChecksum
Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4952771974725632 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
pcapplusplus:FuzzTargetNg: Use-of-uninitialized-value in pcpp::computeChecksum
Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4890292978515968 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
mpv:fuzzer_set_property_MPV_FORMAT_STRING_1: Use-of-uninitialized-value in initFilter
Project: https://github.com/mpv-player/mpv.git Detailed Report: https://oss-fuzz.com/testcase?key=5053287094353920 Project: mpv Fuzzing Engine: libFuzzer Fuzz Target: fuzzersetpropertyMPVFORMATSTRING1 Job Type: libfuzzermsanmpv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
Linux Kernel Security Vulnerabilities
The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper handling of VLAN encapsulation, potentially leading to uninitialized value errors...
CVE-2024-11976
The The BuddyPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 14.3.3. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...
CVE-2026-0633
MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor (WordPress)
CVE-2026-0633 MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 4.1.0 - Unauthenticated Form Submission Exposure via Forgeable Cookie Value
The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.1.0. This is due to the use of a forgeable cookie value derived only from the entry ID and current user ID without...
systemd:fuzz-lldp-rx: Use-of-uninitialized-value in sd_event_wait
Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=5461323751424000 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-lldp-rx Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
CVE-2025-9290
An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication...
SUSE CVE-2025-71149
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
OSV-2026-122 Use-of-uninitialized-value in rtcm2_unpack
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=477971098 Crash type: Use-of-uninitialized-value Crash state: rtcm2unpack rtcm104v2analyze gpsdpoll...
OSV-2026-121 Use-of-uninitialized-value in trySubset
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=477657796 Crash type: Use-of-uninitialized-value Crash state: trySubset hb-subset-fuzzer.cc...
PT-2026-5753
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=477971098 Crash type: Use-of-uninitialized-value Crash state: rtcm2 unpack rtcm104v2 analyze gpsd poll...
PT-2026-5752
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=477657796 Crash type: Use-of-uninitialized-value Crash state: trySubset hb-subset-fuzzer.cc...
AlmaLinux 10 : java-21-openjdk (ALSA-2026:0928)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:0928 advisory. JDK: Improve JMX connections CVE-2026-21925 JDK: Improve HttpServer Request handling CVE-2026-21933 JDK: Enhance Certificate Checking CVE-2026-21945...
AZL-75147 CVE-2025-71149 affecting package kernel for versions less than 6.6.121.1-1
In the Linux kernel, the following vulnerability has been resolved: iouring/poll: correctly handle iopolladd return value on update When the core of iouring was updated to handle completions consistently and with fixed return codes, the POLLREMOVE opcode with updates got slightly broken. If a...