A stack-use-after-return vulnerability has been identified in the check_buffer function of radare2, as reported by OSS-Fuzz. This issue involves reading memory after the stack frame has been returned, which can lead to undefined behavior. The vulnerability affects multiple specific versions of radare2 from 5.8.0 through 6.2.0 and a commit identified by hash 67ead854ea3736384f6d13a56ce9e5fa14c9478c. There is no CVSS score available, and no known exploits in the wild have been reported. The severity is assessed as medium based on the nature of the vulnerability and available information. No patch or remediation details are provided in the source data.
A use-after-poison vulnerability was identified in the rx_ip function of the Mongoose library, reported by OSS-Fuzz. This issue involves accessing memory after it has been invalidated, which can lead to undefined behavior or crashes. The vulnerability affects multiple specific versions of Mongoose from 7.9 through 7.23. No official patch or remediation information is provided in the available data, and there are no known exploits in the wild.
A use-of-uninitialized-value vulnerability was reported in Hunspell affecting versions 1.7.2 through 1.7.6. The issue occurs in the SfxEntry::test_condition function and was discovered via OSS-Fuzz. No CVSS score or detailed impact information is provided.
A heap-buffer-overflow vulnerability exists in Wireshark's get_utf_8_string function, as reported by OSS-Fuzz. The issue causes a read overflow during processing of URL-encoded form data. Multiple specific Wireshark versions are affected. No CVSS score is assigned, and no known exploits are reported in the wild.
A stack-buffer-overflow vulnerability exists in the wc_Shake256_Final function of wolfSSL, as reported by OSS-Fuzz. The issue occurs during the execution of cryptographic signing functions related to Ed448. Multiple stable versions of wolfSSL are affected.
A heap-use-after-free vulnerability exists in Fluent Bit's mk_event_timeout_destroy function. This flaw involves writing to memory after it has been freed, which can cause undefined behavior or crashes. It affects multiple specific versions from 2.0.0 through 5.1.5, including some development builds. No CVSS score or known exploits are reported.
A heap-buffer-overflow vulnerability was identified in osquery during execution of sqlite3VdbeExec, as reported by OSS-Fuzz. The issue causes a read overflow on the heap, potentially leading to memory corruption or crashes. Multiple specific versions of osquery are affected.
A heap-buffer-overflow vulnerability exists in the libjxl library within the jxl::N_EMU128::WriteToU8Stage::ProcessRow function. This issue was reported by OSS-Fuzz and involves an out-of-bounds write on the heap during image processing. Multiple versions of libjxl up to and including 0.12.0 are affected. No official patch or remediation information is provided in the available data.
A heap-buffer-overflow vulnerability exists in the udiv function of mruby, as reported by OSS-Fuzz. This vulnerability involves a write overflow of 4 bytes on the heap. Multiple release candidate and stable versions of mruby from 3.2.0-rc through 4.1.0-rc are affected. No CVSS score or detailed impact analysis is provided, and no known exploits in the wild have been reported.
A heap-buffer-overflow vulnerability exists in the RDKit library within the function ParseV3000AtomProps, as reported by OSS-Fuzz. The issue involves an out-of-bounds read leading to a crash. This vulnerability affects versions of RDKit starting from commit fbbddc6035d74f12edde15bf1a93fa70a3fe6fd1. No official patch or fix information is provided in the available data.
A use-of-uninitialized-value vulnerability has been reported in the mruby project, specifically in the udiv function. The issue was identified by OSS-Fuzz and involves uninitialized memory usage during integer division operations. Multiple release candidate and stable versions of mruby are affected. No CVSS score or vendor patch information is currently available.
A memory safety issue was identified in ClamAV related to an UNKNOWN READ in the function fp_cmp_mag, reported by OSS-Fuzz. This vulnerability may cause crashes during certain operations involving the trust list management. No CVSS score is available, but the issue is assessed as medium severity based on the description.
A heap-use-after-free vulnerability exists in the libjxl library within the function jxl::WriteToPixelCallbackStage::ProcessRow. This issue was reported by OSS-Fuzz and involves a read operation on freed heap memory, which can lead to undefined behavior or crashes when processing image data.
A use-of-uninitialized-value vulnerability was reported in mruby, identified by OSS-Fuzz. The issue occurs in the function mrb_bint_as_int and related call stack functions. Multiple release candidate and stable versions of mruby are affected. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches.
A heap-buffer-overflow vulnerability was identified in QEMU's megasas_map_sgl function, reported by OSS-Fuzz. The issue involves a read overflow of 4 bytes on the heap, potentially leading to memory corruption. The vulnerability affects many specific QEMU versions from 6.2.0 through 11.1.0-rc2 and later commits. No CVSS score or vendor patch information is provided. The severity is assessed as medium based on the nature of the overflow and lack of known exploits.