PT-2021-27972

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the pop3...

curl:curl_fuzzer: Heap-buffer-overflow in Curl_sasl_decode_mech

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6642157950205952 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzer Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address: 0x6030008f1892 Crash State:...

CVE-2021-28237

LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decodepreR13...

Libredwg buffer error vulnerability

Libredwg is a free C library from the Free Software Foundation, USA. It is used to read and write Dwg files. LibreDWG suffers from a buffer overflow vulnerability, which stems from the inclusion of a heap buffer overflow in decodepreR13. No detailed vulnerability details are currently available...

PT-2021-17828

Name of the Vulnerable Software and Affected Versions: LibreDWG version 0.12.3 Description: The issue is related to a heap-buffer overflow that can occur via the decode preR13 function. This is a general information about the problem, and no specific details about the estimated number of...

PT-2023-12472

Name of the Vulnerable Software and Affected Versions lldpd versions prior to 1.0.13 Description The issue arises when decoding SONMP packets in the sonmp decode function, allowing for an out-of-bounds heap read via short SONMP packets. Recommendations For versions prior to 1.0.13, update to...

DEBIAN-CVE-2021-21707

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexmlloadfile, URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the...

CVE-2021-21707

In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexmlloadfile, URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the...

PT-2021-26795

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: The issue is related to an exposure in the nfsd4 decode bitmap function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2021-30790

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.5 Description The issue is related to an exposure in the nfsd4 decode bitmap function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

wolfmqtt:wolfmqtt-fuzzer: Heap-buffer-overflow in MqttDecode_Props

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=4632913572921344 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasani386wolfmqtt Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

PT-2021-27916

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap buffer overflow read. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the smtp parse...

curl:curl_fuzzer: Heap-buffer-overflow in Curl_sasl_decode_mech

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6358065000087552 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzer Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address: 0x60e00002bbff Crash State:...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_utf8_decode

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=6355911919140864 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

stb:stbi_read_fuzzer: Heap-buffer-overflow in stbi__jpeg_huff_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5566868505624576 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x629000129661 Crash State: stbijpeghuffdecode stbijpegdecodeblockprogac...

PT-2021-27890

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow crash. Technical details include a crash type of Heap-buffer-overflow WRITE 4, and the crash state involves...

jasper: Heap-based buffer over-read in jp2_decode() in jp2_dec.c

jp2decode in jp2/jp2dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components...

python-pillow: Negative-offset memcpy in TIFF image reader

A flaw was found in python-pillow. In TiffDecode.c, there is a negative-offset memcpy with an invalid size which could lead to a system crash...

PT-2021-27887

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the pn buffer append, pni data intern node, and pni...

PT-2021-27886

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: consume list, pn amqp decode DqEoQBIoIe, and pn message...