sqlite3/ossfuzz: Use-of-uninitialized-value in corruptSchema

Detailed report: https://oss-fuzz.com/testcase?key=5153397250981888 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: corruptSchema sqlite3InitCallback...

DEBIAN-CVE-2018-16643

The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick 7.0.8-4 do not check the return value of the fputc function, which allows remote attackers to cause a denial of service via a crafted image...

CVE-2018-16459

An unescaped payload in exceljs v1.6 allows a possible XSS via cell value when worksheet is displayed in browser...

CVE-2018-16459

An unescaped payload in exceljs v1.6 allows a possible XSS via cell value when worksheet is displayed in browser...

UBUNTU-CVE-2018-16643

The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick 7.0.8-4 do not check the return value of the fputc function, which allows remote attackers to cause a denial of service via a crafted image...

CVE-2018-16146

The web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality accessible by an authenticated administrator to test notifications that are triggered under certain configurable events. The value parameter is not properly sanitized, leading to arbitrary command injection wi...

DEBIAN-CVE-2016-1000030

Pidgin version 2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutlsx509crtinit and gnutlsx509crtimport that can result in code execution. This attack appear to be exploitable via custom X.509 certificate from another client...

UBUNTU-CVE-2018-10911

A flaw was found in the way dicunserialize function of glusterfs does not handle negative key length values. An attacker could use this flaw to read memory from other locations into the stored dict value...

CVE-2018-12384

When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead. This results in full malleability of the ClientHello for SSLv2 used for TLS 1.2 in all versions prior to NSS 3.39. This does not impact TLS 1.3...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_sample_filtering<unsigned char>

Detailed report: https://oss-fuzz.com/testcase?key=5712367019622400 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: voi...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in put_unweighted_pred_16_fallback

Detailed report: https://oss-fuzz.com/testcase?key=5652950542712832 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

boringssl/read_pem: Use-of-uninitialized-value in PEM_read_bio

Project: https://boringssl.googlesource.com/boringssl Detailed report: https://oss-fuzz.com/testcase?key=5632355033677824 Project: boringssl Fuzzer: libFuzzerboringsslreadpem Fuzz target binary: readpem Job Type: libfuzzermsanboringssl Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

libxml2/libxml2_xml_read_memory_fuzzer: Use-of-uninitialized-value in xmlParseCharEncoding

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=6287294328209408 Project: libxml2 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Fuzz target binary: libxml2xmlreadmemoryfuzzer Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type:...

dlplibs/docfuzzer: Use-of-uninitialized-value in WPSHeader::constructHeader

Detailed report: https://oss-fuzz.com/testcase?key=5691444556201984 Project: dlplibs Fuzzer: libFuzzerdlplibsdocfuzzer Fuzz target binary: docfuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: WPSHeader::constructHeader...

dlplibs/vdxfuzzer: Use-of-uninitialized-value in xmlParseCharEncoding

Detailed report: https://oss-fuzz.com/testcase?key=5660715172495360 Project: dlplibs Fuzzer: libFuzzerdlplibsvdxfuzzer Fuzz target binary: vdxfuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: xmlParseCharEncoding...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in load_cid_font

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5651564811780096 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

poppler/pdf_fuzzer: Use-of-uninitialized-value in CMap::parse2

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5083353053659136 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

boringssl/ssl_ctx_api: Use-of-uninitialized-value in parse_sigalgs_list

Project: https://boringssl.googlesource.com/boringssl Detailed report: https://oss-fuzz.com/testcase?key=5714757638684672 Project: boringssl Fuzzer: libFuzzerboringsslsslctxapi Fuzz target binary: sslctxapi Job Type: libfuzzermsanboringssl Platform Id: linux Crash Type: Use-of-uninitialized-value...

libxml2/libxml2_xml_read_memory_fuzzer: Use-of-uninitialized-value in xmlParseCharEncoding

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=5101274207354880 Project: libxml2 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Fuzz target binary: libxml2xmlreadmemoryfuzzer Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in CharCodeToUnicode::parseCMap1

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4806206615453696 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...