OSV-2020-1431 Use-of-uninitialized-value in RoundToUnity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19955 Crash type: Use-of-uninitialized-value Crash state: RoundToUnity CompositeImage MergeImageLayers...

OSV-2020-1427 Use-of-uninitialized-value in TextEndsWithNewline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13191 Crash type: Use-of-uninitialized-value Crash state: TextEndsWithNewline PPrintText PPrintScriptStyle...

OSV-2020-1423 Use-of-uninitialized-value in txt2sd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22219 Crash type: Use-of-uninitialized-value Crash state: txt2sd fuzzmdnsxht.cc txt2sd...

OSV-2020-1425 Use-of-uninitialized-value in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Use-of-uninitialized-value Crash state: dotnetparsecom dotnetload yrmodulesload...

OSV-2020-1410 Use-of-uninitialized-value in float64_squash_input_denormal_aarch64eb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17032 Crash type: Use-of-uninitialized-value Crash state: float64squashinputdenormalaarch64eb float64tofloat32aarch64eb helpervfpfcvtsdaarch64eb...

OSV-2020-1401 Use-of-uninitialized-value in LibRaw::parse_makernote_ADDRESS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16377 Crash type: Use-of-uninitialized-value Crash state: LibRaw::parsemakernoteADDRESS LibRaw::parsemakernoteADDRESS LibRaw::parsetiffifd...

OSV-2020-1404 Use-of-uninitialized-value in LosslessReduceDepthOK

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22581 Crash type: Use-of-uninitialized-value Crash state: LosslessReduceDepthOK ReadOneMNGImage ReadMNGImage...

OSV-2020-1407 Use-of-uninitialized-value in QPDFWriter::unparseObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18633 Crash type: Use-of-uninitialized-value Crash state: QPDFWriter::unparseObject QPDFWriter::writeObject QPDFWriter::writeStandard...

OSV-2020-1406 Use-of-uninitialized-value in LibRaw::parse_fuji_compressed_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21671 Crash type: Use-of-uninitialized-value Crash state: LibRaw::parsefujicompressedheader LibRaw::opendatastream LibRaw::openfile...

OSV-2020-1403 Use-of-uninitialized-value in put_weighted_pred_8_fallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22101 Crash type: Use-of-uninitialized-value Crash state: putweightedpred8fallback accelerationfunctions::putweightedpred generateinterpredictionsamples...

OSV-2020-1390 Use-of-uninitialized-value in LibRaw::panasonic_load_raw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21256 Crash type: Use-of-uninitialized-value Crash state: LibRaw::panasonicloadraw LibRaw::unpack librawunpack...

OSV-2020-1380 Use-of-uninitialized-value in stbi__jpeg_decode_block_prog_ac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22589 Crash type: Use-of-uninitialized-value Crash state: stbijpegdecodeblockprogac stbiparseentropycodeddata stbidecodejpegimage...

OSV-2020-1375 Use-of-uninitialized-value in WriteBlob

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12473 Crash type: Use-of-uninitialized-value Crash state: WriteBlob WriteEPTImage WriteImage...

OSV-2020-1374 Use-of-uninitialized-value in void edge_filtering_luma_internal<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22895 Crash type: Use-of-uninitialized-value Crash state: void edgefilteringlumainternal edgefilteringluma threadtaskdeblockCTBRow::work...

OSV-2020-1367 Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23615 Crash type: Use-of-uninitialized-value Crash state: void intrapredictionangular void decodeintrapredictioninternal decodeintraprediction...

OSV-2020-1362 Use-of-uninitialized-value in LibRaw::init_fuji_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24016 Crash type: Use-of-uninitialized-value Crash state: LibRaw::initfujiblock LibRaw::fujidecodestrip LibRaw::fujidecodeloop...

skia:image_decode: Use-of-uninitialized-value in sse2::blit_row_s32a_opaque

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5136172884688896 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: imagedecode Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Prototype Pollution

typeorm is vulnerable to prototype pollution. The mergeDeep function of OrmUtils.ts fails to validate the Object key value ...sources parameter, allowing an attacker to perform prototype pollution attacks by providing built-in properties such as proto...

OSV-2020-1340 Use-of-uninitialized-value in Gfx::fillPatch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15395 Crash type: Use-of-uninitialized-value Crash state: Gfx::fillPatch Gfx::doPatchMeshShFill Gfx::doShadingPatternFill...

OSV-2020-1319 Use-of-uninitialized-value in Interpreter::evaluate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15843 Crash type: Use-of-uninitialized-value Crash state: Interpreter::evaluate jsonnetvmexecute jsonnetevaluatesnippetaux...