Mozilla: Memory corruption due to missing sign-extension for ValueTags on ARM64

The Mozilla Foundation Security Advisory describes this flaw as: Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitable crash...

OSV-2020-910 Use-of-uninitialized-value in zmq::stream_engine_base_t::out_event

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24200 Crash type: Use-of-uninitialized-value Crash state: zmq::streamenginebaset::outevent zmq::epollt::loop zmq::workerpollerbaset::workerroutine...

Remote Code Execution (RCE)

apache-airflow is vulnerable to remote code execution RCE. The vulnerability exists as the example DAGs does not properly sanitize the value of dagrun.conf"message". The vulnerability exists if examples are enabled when the loadexamples=True is present in the config...

ots:ots-fuzzer: Use-of-uninitialized-value in ots::ParseVariationData

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=6277842237915136 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzermsanots Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libzmq:test_connect_ws_fuzzer: Use-of-uninitialized-value in zmq::stream_engine_base_t::out_event

Detailed Report: https://oss-fuzz.com/testcase?key=6326324676001792 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testconnectwsfuzzer Job Type: libfuzzermsanlibzmq Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: zmq::streamenginebaset::outevent...

Enterprise Data Security: It’s Time to Flip the Established Approach

There’s an old saying when it comes to big undertakings: Don’t boil the ocean. Well, there’s hardly any bigger project in information security than trying to protect corporate data. But the reality is that too many organizations today are, in fact, “boiling the ocean” when it comes to their...

CVE-2020-4316

IBM Publishing Engine 6.0.6, 6.0.6.1, and 7.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecu...

ots:ots-fuzzer: Use-of-uninitialized-value in ots::ParseConditionTable

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=5640715984699392 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzermsanots Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libevt:file_fuzzer: Use-of-uninitialized-value in libevt_io_handle_end_of_file_record_scan

Detailed Report: https://oss-fuzz.com/testcase?key=5688082737922048 Project: libevt Fuzzing Engine: libFuzzer Fuzz Target: filefuzzer Job Type: libfuzzermsanlibevt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: libevtiohandleendoffilerecordscan...

OSV-2020-879 Use-of-uninitialized-value in jumpOverRec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20112 Crash type: Use-of-uninitialized-value Crash state: jumpOverRec jumpOverRec jumpOverRec...

OSV-2020-877 Use-of-uninitialized-value in Mat_VarReadNumeric5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17112 Crash type: Use-of-uninitialized-value Crash state: MatVarReadNumeric5 MatVarRead5 ReadData...

OSV-2020-875 Use-of-uninitialized-value in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22475 Crash type: Use-of-uninitialized-value Crash state: ndpistrdup processClientServerHello processTLSBlock...

OSV-2020-863 Use-of-uninitialized-value in QPDFTokenizer::isSpace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20391 Crash type: Use-of-uninitialized-value Crash state: QPDFTokenizer::isSpace QPDFTokenizer::presentCharacter QPDFTokenizer::readToken...

OSV-2020-860 Use-of-uninitialized-value in printUInt32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14912 Crash type: Use-of-uninitialized-value Crash state: printUInt32 printU1ImmOperand printInstruction...

OSV-2020-862 Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::Extension, std::__1::allocator<Sass::Ext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21223 Crash type: Use-of-uninitialized-value Crash state: std::1::vectorstd::1::vectorSass::Extension, std::1::allocatorSass::Ext Sass::Extender::extendCompound Sass::Extender::extendComplex...

OSV-2020-856 Use-of-uninitialized-value in deflate_slow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18745 Crash type: Use-of-uninitialized-value Crash state: deflateslow deflate PlFlate::handleData...

OSV-2020-855 Use-of-uninitialized-value in read_uleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Use-of-uninitialized-value Crash state: readuleb128 dexparse dexload...

OSV-2020-852 Use-of-uninitialized-value in H5MM_xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21457 Crash type: Use-of-uninitialized-value Crash state: H5MMxstrdup H5Epushstack H5Eprintfstack...

OSV-2020-847 Use-of-uninitialized-value in ycck_cmyk_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18732 Crash type: Use-of-uninitialized-value Crash state: ycckcmykconvert sepupsample processdatasimplemain...

OSV-2020-845 Use-of-uninitialized-value in isMatchAtCPBoundary

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19497 Crash type: Use-of-uninitialized-value Crash state: isMatchAtCPBoundary ustrFindFirst66 icu66::UnicodeString::indexOf...