ffmpeg:ffmpeg_AV_CODEC_ID_XMA2_fuzzer: Heap-buffer-overflow in xma_decode_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4678745030524928 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDXMA2fuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

PT-2021-27802

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: state VLC dec::load bytes, state VLC dec::state VLC dec,...

CVE-2021-39527

An issue was discovered in libredwg through v0.10.1.3751. appinfoprivate in decode.c has a heap-based buffer overflow...

CVE-2021-39527

An issue was discovered in libredwg through v0.10.1.3751. appinfoprivate in decode.c has a heap-based buffer overflow...

libredwg code-related vulnerabilities

LibreDWG is a free C library for reading and writing DWG files. a null pointer dereference vulnerability exists in the checkPOLYLINEhandles function in decode.c in LibreDWG version 0.10.1.3751. An attacker could exploit this vulnerability to cause a denial of service...

ALPINE-CVE-2020-21596

libde265 v1.0.4 contains a global buffer overflow in the decodeCABACbit function, which can be exploited via a crafted a file...

DEBIAN-CVE-2020-21596

libde265 v1.0.4 contains a global buffer overflow in the decodeCABACbit function, which can be exploited via a crafted a file...

UBUNTU-CVE-2020-21596

libde265 v1.0.4 contains a global buffer overflow in the decodeCABACbit function, which can be exploited via a crafted a file...

Libde265 buffer error vulnerability

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a global buffer overflow vulnerability in the decodeCABACbit function. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

vlc:vlc-demux-dec-libfuzzer: Heap-buffer-overflow in Decode

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6255696815980544 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 3 Crash Address:...

wolfmqtt:wolfmqtt-fuzzer: Segv on unknown address in MqttProps_Free

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=6212643300442112 Project: wolfmqtt Fuzzing Engine: honggfuzz Fuzz Target: wolfmqtt-fuzzer Job Type: honggfuzzasanwolfmqtt Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

PT-2021-27768

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the functions ih264d parse decode slice, ih264d parse...

PT-2021-27755

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a global buffer overflow read. The crash involves the functions fr is base16 nstd, fr base16 decode nstd, and f...

freeradius:fuzzer_tacacs: Global-buffer-overflow in fr_is_base16_nstd

Detailed Report: https://oss-fuzz.com/testcase?key=5166028758319104 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzertacacs Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x7f26334095ff Crash State: frisbase16nstd...

PT-2021-27741

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the H5O linfo decode function, which is called by H5O msg read oh and H5O msg read. Recommendations: At the moment,...

wolfmqtt:wolfmqtt-fuzzer: Crash in MqttProps_Free

Detailed Report: https://oss-fuzz.com/testcase?key=6438505648095232 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasanwolfmqtt Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x13fd00000008 Crash State: MqttPropsFree MqttClientDecodePacket...

PT-2021-4488

Name of the Vulnerable Software and Affected Versions libjpeg-turbo affected versions not specified Description The issue is related to errors in resource management in the decode mcu function of the libjpeg-turbo image processing library. Exploitation of this issue may allow a remote attacker to...

PT-2021-4487

Name of the Vulnerable Software and Affected Versions libjpeg-turbo affected versions not specified Description The issue is caused by a buffer overflow in the decode mcu and decode mcu fast functions of the libjpeg-turbo library, which is used for image processing. This can be exploited by a...

CVE-2020-18773

An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service DOS via a crafted tif file...

Unexpected panic in multihash

In versions prior 0.11.3 it's possible to make fromslice panic by feeding it certain malformed input. It's never documented that fromslice and frombytes which wraps it can panic, and its' return type Result suggests otherwise. In practice, fromslice/frombytes is frequently used in networking code...