A use-of-uninitialized-value vulnerability was reported in libhevc affecting multiple versions. The issue was identified by OSS-Fuzz and involves the function ihevce_enc_frm_proc_slave_thrd, potentially leading to undefined behavior or crashes.
A heap-buffer-overflow vulnerability exists in the H5G__node_cmp3 function of the hdf5 library, as reported by OSS-Fuzz. The issue causes a read overflow on the heap, potentially leading to memory corruption or crashes. Multiple specific versions of hdf5 are affected. No CVSS score or known exploits in the wild have been reported.
A global buffer overflow vulnerability has been identified in the p11-kit project within the function base_C_MessageEncryptInit. The issue was discovered through OSS-Fuzz and involves an out-of-bounds read of 8 bytes. No CVSS score is available, and no known exploits have been reported in the wild. The affected versions include the commit identified by hash 7fe7e5d95d9197e7f52aab314468d424acc6ac88 and later. No patch or remediation information is provided in the available data.
A heap-buffer-overflow vulnerability exists in the H5L__extern_traverse function of the hdf5 library. This issue was identified by OSS-Fuzz and results in a read overflow on the heap. Multiple specific versions of hdf5 are affected, including 1.14.1 and several 2.x pre-release and release versions. No CVSS score or vendor patch information is currently available.
A heap-buffer-overflow vulnerability exists in the DecodeBasicOcspResponse function of wolfSSL, as reported by OSS-Fuzz. This issue involves an out-of-bounds read during the decoding of OCSP responses.
A heap-buffer-overflow vulnerability exists in the load_buffer function of radare2, as reported by OSS-Fuzz. This issue causes an out-of-bounds read of 8 bytes, potentially leading to memory corruption or crashes. Multiple specific versions of radare2 are affected. No CVSS score is available, and no known exploits in the wild have been reported.
A heap-buffer-overflow vulnerability exists in the H5O__mtime_new_encode function of the hdf5 library, as reported by OSS-Fuzz. This vulnerability causes a write overflow on the heap, potentially leading to memory corruption. Multiple specific versions of hdf5 are affected. No CVSS score or vendor patch information is currently available.
A heap-buffer-overflow vulnerability exists in the libucl library within the function ucl_object_dtor_unref_single, as reported by OSS-Fuzz. The issue causes an out-of-bounds read of 8 bytes during object destruction and hash cleanup operations.
A heap-buffer-overflow vulnerability exists in the H5SM_delete function of the hdf5 library. This issue was reported by OSS-Fuzz and involves a read overflow of 4 bytes in heap memory during message deletion operations. The affected versions include 1.14.1, 2.0.0, 2.1.0-pre1test, 2.1.0, 2.1.1, 2.2.0-rc1, and 2.2.0. No public exploits or CVSS score are currently available.
A heap-buffer-overflow vulnerability exists in the parse_classes_64 function of radare2, as reported by OSS-Fuzz. This issue causes a read overflow of 4 bytes on the heap during parsing operations. Multiple specific versions of radare2 are affected. No known exploits in the wild have been reported, and no official patch information is provided in the available data.
A heap-buffer-overflow vulnerability exists in the _rrparse function of the open62541 library, as reported by OSS-Fuzz. This issue involves an out-of-bounds read of 16 bytes during message parsing in fuzz_mdns_message.cc. Multiple versions of open62541 are affected, and patches have been committed to fix the flaw.
A heap-buffer-overflow vulnerability exists in the io_memory_read function of radare2, as reported by OSS-Fuzz. This issue causes a write overflow on the heap during memory read operations. Multiple specific versions of radare2 are affected. No CVSS score is provided, and no known exploits in the wild have been reported.
A heap-buffer-overflow vulnerability exists in the ndlz8_decompress function of the c-blosc2 compression library. This issue was reported by OSS-Fuzz and involves an out-of-bounds read on the heap during decompression operations.
A memory safety issue was identified in ClamAV related to an UNKNOWN READ crash occurring in the function fp_cmp_mag, as reported by OSS-Fuzz. This crash involves the functions fp_cmp_mag, crtmgr_trust_list_lookup, and crtmgr_add. The vulnerability affects versions of ClamAV starting from commit 375ecf678c714623e6fb5c0119d1bec98dc700dd. No CVSS score or detailed impact analysis is available, and there is no information about active exploitation or an official patch.