PT-2020-11833

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a heap buffer overflow in the decode packed entry number function of codebook.c, which could lead to a possible out of bounds read. This might result in remote information...

pillow:fuzz_pillow: Heap-buffer-overflow in read4B

Project: https://github.com/python-pillow/Pillow.git Detailed Report: https://oss-fuzz.com/testcase?key=5730089102868480 Project: pillow Fuzzing Engine: libFuzzer Fuzz Target: fuzzpillow Job Type: libfuzzerasanpillow Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Prototype Pollution

Overview conf-cfg-ini is an encode and decode ini,conf,cfg files Affected versions of this package are vulnerable to Prototype Pollution. If an attacker submits a malicious INI file to an application that parses it with decode, they will pollute the prototype on the application. This can be...

Moddable SDK OS Security Vulnerability

Moddable SDK is a set of software development kits SDKs for IoT embedded software development from Moddable, Inc. in the United States. A security vulnerability exists in Moddable SDK versions prior to OS200908, which originates in the moddable/xs/sources/xsCommon.c:916 fxUTF8Decode function...

OSV-2020-2216 Heap-buffer-overflow in ojph::local::ojph_decode_codeblock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28103 Crash type: Heap-buffer-overflow WRITE 4 Crash state: ojph::local::ojphdecodecodeblock grk::t1ht::T1HT::decompress grk::DecompressBlockExec::open...

serenity:FuzzPNGLoader: Heap-buffer-overflow in decode

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5636989654925312 Project: serenity Fuzzing Engine: afl Fuzz Target: FuzzPNGLoader Job Type: aflasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6060000001...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in ojph::local::ojph_decode_codeblock

Detailed Report: https://oss-fuzz.com/testcase?key=6043228666855424 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x61d00177e480 Crash State: ojph::local::ojphdecodecodeblock...

PT-2020-22159

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the crash type being a Heap-buffer-overflow WRITE 4. The...

PT-2020-22156

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a WRITE 2 crash type. The crash occurs in the decode NXAST RAW ENCAP function, which is...

PT-2020-22154

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE crash occurred, involving the functions ih264d parse pslice, ih264d parse decode slice, and ih264d parse nal unit...

OSV-2020-2167 Heap-buffer-overflow in ojph::local::ojph_decode_codeblock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27533 Crash type: Heap-buffer-overflow WRITE 4 Crash state: ojph::local::ojphdecodecodeblock grk::t1ht::T1HT::decompress grk::DecompressBlockExec::open...

Fedora 33 : chromium (2020-4e8e48da22)

Update to 86.0.4240.183. Fixes the following security issues: CVE-2020-16004 CVE-2020-16005 CVE-2020-16006 CVE-2020-16008 CVE-2020-16009 Also disables the very verbose output going to stdout. ---- Update to Chromium 86. A few big things here : 1. Upstream has made hardware accelerated video suppo...

libsndfile:sndfile_fuzzer: Heap-buffer-overflow in copyPredictorTo24

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=5092501698117632 Project: libsndfile Fuzzing Engine: honggfuzz Fuzz Target: sndfilefuzzer Job Type: honggfuzzasanlibsndfile Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

opensc: Out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c...

opensc: Out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c

OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry in libopensc/asn1.c...

SDL: heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MSADPCMdecode in audio/SDLwave.c...

PT-2020-22103

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the functions decode chars, decode font, and process text. ...

EulerOS Virtualization 3.0.2.2 : python-pillow (EulerOS-SA-2020-2227)

According to the version of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.CVE-2020-5312 Note that Tenable Network Securit...

PT-2020-6180

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.3.1 Description The issue is related to the decode frame function in the libavcodec/exr.c component, which has an out-of-bounds write due to errors in calculations. This can be exploited by a remote attacker to cause a denial ...

Simple DirectMediaLayer MS_ADPCMDecode Heap Buffer Overflow

The vulnerability of the MSADPCMDecode function audio/SDLwave.c in the Simple DirectMediaLayer library is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...