A use-of-uninitialized-value vulnerability exists in the openjph library within the function ojph::local::tile::pull. This issue was identified by OSS-Fuzz and affects multiple versions of openjph from 0.27.0 through 0.28.1. The vulnerability has been fixed in a later commit.
A heap-buffer-overflow vulnerability exists in the Mat_VarGetCellsLinear function of the matio library, as reported by OSS-Fuzz. This flaw causes an out-of-bounds read of 8 bytes on the heap, potentially leading to memory corruption or crashes. A fix has been committed to address this issue.
A use-of-uninitialized-value vulnerability was reported in libjxl affecting versions 0.12-snapshot and 0.12.0. The issue occurs in the function jxl::PerformMulBlending and related blending processing code, as identified by OSS-Fuzz. No CVSS score or detailed impact information is provided.
A vulnerability in the openjph library versions 0.27.0 through 0.28.1 causes an unknown write error during the parsing of precinct data. This issue was identified by OSS-Fuzz and results in a crash in the parsing functions related to precinct and tile headers.
A global buffer overflow vulnerability was identified in the txt2sd component of the open62541 project. The issue was discovered through OSS-Fuzz and involves a read overflow. A fix has been committed to the project repository.
A heap-use-after-free vulnerability has been identified in QuickJS within the js_atomics_op function. The issue was reported by OSS-Fuzz and involves a write operation to freed heap memory, which can lead to undefined behavior or potential memory corruption. A fix has been committed to address this vulnerability.
A use-of-uninitialized-value vulnerability was identified in the Mat_VarGetSize function of the matio library, reported via OSS-Fuzz. This flaw can lead to undefined behavior or crashes when processing certain inputs. A fix has been implemented in a specific commit to address this issue.
A use-of-uninitialized-value vulnerability was identified in the JXRHandler::read function of the kimageformats library. This issue was discovered through OSS-Fuzz and can lead to a crash when processing certain inputs. A fix for this vulnerability has been committed.
A vulnerability in ndpi was identified by OSS-Fuzz involving an unknown write error in the function ___interceptor_strncpy, leading to a crash. The issue was observed during SSH TCP search processing. Fixes have been applied in specific commits.
A heap-use-after-free vulnerability has been reported in the Lua programming language, specifically in the insertkey function. The issue was identified through OSS-Fuzz and involves a read operation after memory has been freed, which can lead to undefined behavior or crashes.
A heap-buffer-overflow vulnerability exists in the DwaCompressor_uncompress function of OpenEXR, as reported by OSS-Fuzz. This flaw can lead to out-of-bounds memory writes during decompression operations. A patch has been made available to address this issue.
A heap-buffer-overflow vulnerability was identified in the ndpi project within the function ___interceptor_strncpy, as reported by OSS-Fuzz. This flaw can lead to out-of-bounds writes on the heap during string operations. The issue has been fixed in a specific commit identified by the hash da372c59cc0a3d83e500742953d96e7d15c01491.
A heap-buffer-overflow vulnerability exists in the generic_unpack function of OpenEXR, as reported by OSS-Fuzz. This issue involves a read overflow during image decoding operations. A patch has been made available to address this flaw.
A security exception vulnerability was identified in Flyway related to the RegexInjection sanitizer's hookInternal method. The issue was reported by OSS-Fuzz and involves a crash in the patternHook during location parsing. A fix has been implemented in a specific commit.
A use-of-uninitialized-value vulnerability was identified in the kimageformats library within the PKFormatConverter_InitializeConvert function. This issue was reported by OSS-Fuzz and affects versions 6.26.0-rc1 and 6.26.0. The vulnerability has been fixed in a later commit. No CVSS score is available, and no known exploits in the wild have been reported.
A use-of-uninitialized-value vulnerability exists in kimageformats in the JXRHandlerPrivate::readTextMeta function. This issue was reported by OSS-Fuzz and affects versions 6.26.0-rc1 and 6.26.0. A fix has been committed to address this flaw.
A memory copy parameter overlap vulnerability was identified in HAProxy's htx_replace_blk_value function, reported by OSS-Fuzz. This flaw involves overlapping parameters in a memcpy operation, which can lead to a crash. The issue affects development versions 3.4-dev9 and 3.4-dev10 of HAProxy. A fix has been committed to the codebase.
A heap-buffer-overflow vulnerability exists in the DwaCompressor_uncompress function of OpenEXR. This issue was identified by OSS-Fuzz and involves a write overflow during decompression. Multiple versions of OpenEXR 3.3.x are affected. A fix has been implemented in later versions.
A vulnerability in the Poppler PDF rendering library involves an UNKNOWN READ error in the XRef::parseEntry function, as reported by OSS-Fuzz. The issue occurs during parsing of PDF cross-reference entries, potentially leading to a crash. No specific affected versions or patches are currently identified. There is no evidence of exploitation in the wild. The vulnerability's impact and exploitability remain unclear due to limited technical details.