Tackling Video Piracy Head-On

We are clearly in a "new" golden age of TV. Audiences around the world have never had so many viewing options available. This has led to a creative surge in new groundbreaking storytelling and entertainment as both broadcasters and digital giants try to maintain the loyalty of their viewers. This...

libsndfile:sndfile_fuzzer: Use-of-uninitialized-value in endswap_int64_t_array

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=5632785497456640 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libsndfile:sndfile_fuzzer: Use-of-uninitialized-value in psf_log_printf

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=4907258079870976 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

JITSploitation I: A JIT Bug

By Samuel Groß, Project Zero This three-part series highlights the technical challenges involved in finding and exploiting JavaScript engine vulnerabilities in modern web browsers and evaluates current exploit mitigation technologies. The exploited vulnerability, CVE-2020-9802, was fixed in iOS...

OSV-2020-1680 Use-of-uninitialized-value in LibRaw::ljpeg_diff

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25291 Crash type: Use-of-uninitialized-value Crash state: LibRaw::ljpegdiff LibRaw::pentaxloadraw LibRaw::unpack...

OSV-2020-1679 Use-of-uninitialized-value in ClampPixel

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25298 Crash type: Use-of-uninitialized-value Crash state: ClampPixel CompositeOverImage CompositeImage...

openSUSE Security Update : apache2 (openSUSE-2020-1285)

This update for apache2 fixes the following issues : - CVE-2020-9490: Fixed a crash caused by a specially crafted value for the 'Cache-Digest' header in a HTTP/2 request bsc1175071. - CVE-2020-11984: Fixed an information disclosure bug in modproxyuwsgi bsc1175074. - CVE-2020-11993: When trace/deb...

imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in ClampPixel

Detailed Report: https://oss-fuzz.com/testcase?key=4950960420683776 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ClampPixel CompositeOverImage...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::ljpeg_diff

Detailed Report: https://oss-fuzz.com/testcase?key=5663580178087936 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::ljpegdiff...

API: The Unsung Hero of the DevOps Revolution

Watch this session to dive into the capabilities of APIs, as well as how organizations have used APIs to solve problems and add security to their value stream...

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in std::__1::vector<unsigned int, std::__1::allocator<unsigned int> >::reserve

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5762452447559680 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

The vulnerability of the parameter PL_regkind[OP(n)] == NOTHING in the Perl programming language allows a hacker to execute arbitrary code.

The vulnerability of the parameter PLregkindOPn == NOTHING in the Perl programming language is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2020-14500

Secomea GateManager all versions prior to 9.2c, An attacker can send a negative value and overwrite arbitrary data...

decimal-place-value-chart.com Cross Site Scripting vulnerability OBB-1275189

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

OSV-2020-1661 Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25181 Crash type: Use-of-uninitialized-value Crash state: fuzzing::memory::memorytestmsan cryptofuzz::ExecutorBase::postp cryptofuzz::ExecutorBase::Run...

OSV-2020-1659 Use-of-uninitialized-value in LibRaw::parse_sinar_ia

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25188 Crash type: Use-of-uninitialized-value Crash state: LibRaw::parsesinaria LibRaw::identify LibRaw::opendatastream...

imagemagick:ping_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parse_sinar_ia

Detailed Report: https://oss-fuzz.com/testcase?key=4967658163011584 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::parsesinaria...

open62541:fuzz_binary_decode: Use-of-uninitialized-value in DiagnosticInfo_clear

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=4959778072428544 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzbinarydecode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

OSV-2020-1645 Use-of-uninitialized-value in std::__1::char_traits<char>::length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25076 Crash type: Use-of-uninitialized-value Crash state: std::1::chartraits::length std::1::basicstring, std::1::allocatorch Magick::formatExceptionMessage...

leptonica:pix4_fuzzer: Use-of-uninitialized-value in pixGetCmapHistogramInRect

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=4713657823657984 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: pix4fuzzer Job Type: libfuzzermsanleptonica Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...