OSV-2020-79 Use-of-uninitialized-value in check_exif

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22714 Crash type: Use-of-uninitialized-value Crash state: checkexif readnonidatchunks readchunks...

OSV-2020-95 Use-of-uninitialized-value in jbig2_arith_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20493 Crash type: Use-of-uninitialized-value Crash state: jbig2arithdecode jbig2decodegenerictemplate0TPGDON jbig2immediategenericregion...

OSV-2020-97 Use-of-uninitialized-value in file_vprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20702 Crash type: Use-of-uninitialized-value Crash state: filevprintf fileprintf mget...

OSV-2020-77 Use-of-uninitialized-value in jbig2_text_region

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21571 Crash type: Use-of-uninitialized-value Crash state: jbig2textregion jbig2parsesegment jbig2completepage...

OSV-2020-72 Use-of-uninitialized-value in print_crl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21153 Crash type: Use-of-uninitialized-value Crash state: printcrl gnutlsx509crlprint gnutlsx509crlparserfuzzer.c...

OSV-2020-12 Use-of-uninitialized-value in ndpi_parse_packet_line_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23058 Crash type: Use-of-uninitialized-value Crash state: ndpiparsepacketlineinfo ndpicheckhttptcp ndpisearchhttptcp...

OSV-2020-4 Use-of-uninitialized-value in ndpi_check_dga_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23524 Crash type: Use-of-uninitialized-value Crash state: ndpicheckdganame ndpisearchdns checkndpiudpflowfunc...

OSV-2020-1 Use-of-uninitialized-value in numaCrossingsByThreshold

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22764 Crash type: Use-of-uninitialized-value Crash state: numaCrossingsByThreshold numaSelectCrossingThreshold pixExtractBarcodeCrossings...

unicorn:fuzz_emu_arm64_arm: Use-of-uninitialized-value in float64_to_float32_aarch64

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5113167238922240 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarm64arm Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

CVE-2020-14983

The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled numplayers value, leading to a buffer overflow. A malicious user can overwrite the server's stack...

UBUNTU-CVE-2020-14983

The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled numplayers value, leading to a buffer overflow. A malicious user can overwrite the server's stack...

The Fear of Vendor Lock-in Leads to Cloud Failures

Vendor lock-in has been an often-quoted risk since the mid-1990’s. Fear that by investing too much with one vendor, an organization reduces their options in the future. Was this a valid concern? Is it still today? The Risk Organizations walk a fine line with their technology vendors. Ideally, you...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in load_truetype_glyph

Detailed Report: https://oss-fuzz.com/testcase?key=6276535945527296 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: loadtruetypeglyph TTLoadGlyph...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=4861157222645760 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void intrapredictionangular vo...

opus:opus_decode_fuzzer_fixed: Use-of-uninitialized-value in celt_decode_lost

Project: https://gitlab.xiph.org/xiph/opus.git Detailed Report: https://oss-fuzz.com/testcase?key=6387771504852992 Project: opus Fuzzing Engine: libFuzzer Fuzz Target: opusdecodefuzzerfixed Job Type: libfuzzermsanopus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

CVE-2020-14942

Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py. Recent assessments: kevthehermit at June 21, 2020 7:03pm UTC reported: Outline Untrusted data from the client side is used to create a python pickled object. This can lead to full RCE and compromise of the host...

KoreaShow Number Error Vulnerability

KoreaShow is a system for cryptocurrency trading. An integer overflow vulnerability exists in the 'transferMulti' function in the smart contract implementation of KoreaShow. The vulnerability can be exploited by an attacker to increase digital assets with the help of the 'value' parameter...

unicorn:fuzz_emu_arm64_armbe: Use-of-uninitialized-value in helper_wfi_aarch64eb

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5962797644251136 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarm64armbe Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

CVE-2019-15942

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645parse because allocrbspbuffer in libavcodec/h2645parse.c mishandles rbspbuffer...

Design/Logic Flaw

Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm. This leads to a predictable CONVOSLOCALSECRET value, affecting password resets and invitations...