containerd:fuzz_filters_parse: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4959321254395904 Project: containerd Fuzzing Engine: libFuzzer Fuzz Target: fuzzfiltersparse Job Type: libfuzzerasancontainerd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff8 Crash State: NULL Sanitizer: address ASAN...

GHSA-C38G-469G-CMGX Improper Neutralization of Special Elements in Output in helm.sh/helm/v3

Since Helm 2 was released, a well-documented aspect of Helm is that the Helm chart's version number MUST follow the SemVer2 specification. In the past, Helm would not permit charts with malformed versions. At some point, a patch was merged that changed this - On a version parse error, the version...

pcl:ply_reader_fuzzer: Container-overflow in std::__1::__function::__func<std::__1::tuple<std::__1::function<void

Detailed Report: https://oss-fuzz.com/testcase?key=6556750571503616 Project: pcl Fuzzing Engine: afl Fuzz Target: plyreaderfuzzer Job Type: aflasanpcl Platform Id: linux Crash Type: Container-overflow WRITE 4 Crash Address: 0x616000000d38 Crash State: std::1::function::func Sanitizer: address ASA...

Denial Of Service (DoS)

htmldoc is vulnerable to denial of service. The vulnerability exists due to a stack buffer overflow in parsetable in ps-pdf.cxx...

minify:parse-css-token: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5465987431399424 Project: minify Fuzzing Engine: libFuzzer Fuzz Target: parse-css-token Job Type: libfuzzerasanminify Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002430000 Crash State: NULL Sanitizer: address ASAN Recommended...

CVE-2021-25385

An improper input validation vulnerability in sdfffdparsechunkPROP in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process...

CVE-2021-25682

It was discovered that the getpidinfo function in data/apport did not properly parse the /proc/pid/status file from the kernel...

PT-2021-16576 · Unknown · Libsdffextractor

Name of the Vulnerable Software and Affected Versions: libsdffextractor library versions prior to SMR MAY-2021 Release 1 Description: The issue is related to an improper input validation vulnerability in the sdfffd parse chunk PROP function. This vulnerability allows attackers to execute arbitrar...

Samsung SMR 缓冲区错误漏洞

The Samsung libsdffextractor library is a component for Samsung Samsung mobile devices. The Samsung libsdffextractor library suffers from an input validation error vulnerability that stems from faulty input validation logic in sdfffdparsechunkFVER in the libsapeextractor library, which can be...

SAMSUNG Mobile devices 缓冲区错误漏洞

The Samsung libsdffextractor library is a component for Samsung Samsung mobile devices. The Samsung libsdffextractor library suffers from an input validation error vulnerability that stems from improper input validation logic in the presence of a sample rate chunk in sdfffdparsechunkPROP in the...

CVE-2021-26195

An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...

UBUNTU-CVE-2021-26195

An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...

CVE-2021-26195

An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...

CVE-2020-23323

There is a heap-buffer-overflow at re-parser.c in reparsecharescape in JerryScript 2.2.0...

JerryScript 代码问题漏洞

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in JerryScript version 2.2.0 in js-parser.c:2185 in parserparsesource. No details of the vulnerability are provided at this time...

JerryScript 缓冲区错误漏洞

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in JerryScript 2.4.0, which stems from a heap buffer overflow in lexerparsenumber in the js-lexer.c file. No details of the vulnerability are provided at this time...

JerryScript 缓冲区错误漏洞

JerryScript is a lightweight JavaScript engine . A heap buffer overflow vulnerability exists in reparsecharescape in re-parser.c in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...

HTMLDOC 缓冲区错误漏洞

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. HTMLDOC suffers from a buffer error vulnerability caused by a boundary error when processing table attributes in the parsetable function in ps-pdf.cxx. An unauthenticated,...

CVE-2021-27626: Out-of-bounds Write

SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CMiniXMLParser::Parse which will...

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...