imagemagick:ping_pict_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5087317020901376 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingpictfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

opus:opus_decode_fuzzer_fixed: Use-of-uninitialized-value in silk_decode_core

Project: https://gitlab.xiph.org/xiph/opus.git Detailed Report: https://oss-fuzz.com/testcase?key=5753048566857728 Project: opus Fuzzing Engine: libFuzzer Fuzz Target: opusdecodefuzzerfixed Job Type: libfuzzermsanopus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

CVE-2020-5574

HTML attribute value injection vulnerability in Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and...

CVE-2020-5574

HTML attribute value injection vulnerability in Movable Type series Movable Type 7 r.4606 7.2.1 and earlier Movable Type 7, Movable Type Advanced 7 r.4606 7.2.1 and earlier Movable Type Advanced 7, Movable Type for AWS 7 r.4606 7.2.1 and earlier Movable Type for AWS 7, Movable Type 6.5.3 and...

CVE-2020-5574

CVE-2020-5574 affects Movable Type and related products across multiple versions (e.g., Movable Type 7.x up to 7.2.1, Movable Type Advanced, Movable Type for AWS, and various 6.x/Premium variants). The root issue is an HTML attribute value injection vulnerability that could allow a remote attacke...

imagemagick:encoder_pict_fuzzer: Use-of-uninitialized-value in ScaleQuantumToChar

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5648722328551424 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpictfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in load_truetype_glyph

Detailed Report: https://oss-fuzz.com/testcase?key=5668538569457664 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: loadtruetypeglyph TTLoadGlyph...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in clip

Detailed Report: https://oss-fuzz.com/testcase?key=5758254161592320 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clip...

Libexif Digit Error Vulnerability

libexif is a library of functions written in the C language. It is mainly used to read and write EXIF meta-information from graphics files. A numeric error vulnerability exists in the exifentrygetvalue file in exif-entry.c in libexif version 0.6.21. The vulnerability arises from a network system ...

UBUNTU-CVE-2020-12767

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

libssh:ssh_server_fuzzer: Use-of-uninitialized-value in BN_ucmp

Detailed Report: https://oss-fuzz.com/testcase?key=5152650317529088 Project: libssh Fuzzing Engine: libFuzzer Fuzz Target: sshserverfuzzer Job Type: libfuzzermsanlibssh Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: BNucmp BNnistmod384 ecGFpnistfieldsqr...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in put_weighted_pred_8_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=5633401861439488 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: putweightedpred8fallback...

Snapchat: CreatorID leaked from public content posted to SnapMaps

TL;DR - the Snap Map media responses unnecessarily return a creatorId. The creator's Snap username cannot be immediately derived from creatorId, but users can use the creatorId to correlate multiple public snaps with that creator. The impact is limited by the fact that all Our Story Snaps that...

GZS Token Number Error Vulnerability

GZS Token GZS is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of GZS. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

FreeCoin Digital Error Vulnerability

An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of FreeCoin FREE, an ethereum-based digital currency. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

YiTongCoin Digital Error Vulnerability

YiTongCoin YTC is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of YTC. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Jitech Digital Error Vulnerability

Jitech JTH is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'mintToken' function of JTH's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

openvswitch:odp_target: Use-of-uninitialized-value in tun_key_to_attr

Detailed Report: https://oss-fuzz.com/testcase?key=5715581933453312 Project: openvswitch Fuzzing Engine: libFuzzer Fuzz Target: odptarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: tunkeytoattr odpflowkeyfromflow...

gnutls: DTLS client hello contains a random value of all zeroes

A cryptographic weakness was found in the way DLTS implementation of GnuTLS, used zeros in place of random numbers. This flaw can break the security guarantee of the DTLS protocol...

oniguruma:fuzzer: Use-of-uninitialized-value in gbNUMBER_mbc_enc_len

Detailed Report: https://oss-fuzz.com/testcase?key=5674954193633280 Project: oniguruma Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanoniguruma Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gbNUMBERmbcenclen onigencmb4codetombc parseex...