OSV-2020-1547 Heap-use-after-free in destroy_op_array

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24436 Crash type: Heap-use-after-free READ 4 Crash state: destroyoparray fuzzerdorequest fuzzerdorequestfrombuffer...

OSV-2020-1386 Heap-buffer-overflow in parse_relocation_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24400 Crash type: Heap-buffer-overflow READ 4 Crash state: parserelocationinfo getrelocs64 relocs...

Kali-Linux-Tools-Interface - Graphical Web Interface Developed To Facilitate The Use Of Security Information Tools

A graphical interface to use information security tools by the browser. Getting Started Kali Linux Tools Interface is a graphical interface to use information security tools by the browser. The project uses the Kali Linux tools as a reference because it is the distribution that has the largest...

OSV-2020-1246 Stack-buffer-overflow in void apply_sao_internal<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13643 Crash type: Stack-buffer-overflow READ 4 Crash state: void applysaointernal void applysao threadtasksao::work...

OSV-2020-1185 Global-buffer-overflow in kencodingprober::nsCodingStateMachine::NextState

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12919 Crash type: Global-buffer-overflow READ 4 Crash state: kencodingprober::nsCodingStateMachine::NextState kencodingprober::nsEscCharSetProber::HandleData kencodingprober::nsUniversalDetector::HandleData...

OSV-2020-1171 Heap-use-after-free in JS_ReadObjectRec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21532 Crash type: Heap-use-after-free READ 4 Crash state: JSReadObjectRec JSReadObject fuzzcompile.c...

[SECURITY] Fedora 32 Update: mingw-LibRaw-0.19.5-4.fc32

MinGW Windows LibRaw library...

PT-2020-21767

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported, with the crash state involving the helper ret stb mmu mips function. No information is available abo...

PT-2020-21761

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a READ 4 crash type. The crash occurs in the following functions:...

QEMU 4.x < 5.0.0 Authentication Bypass Vulnerability

QEMU is prone to an authentication bypass vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

PT-2020-21671

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a READ 4 crash type. The crash occurs in the following functions:...

PT-2020-21770

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a READ 4 crash type. The crash occurs in the WelsDec functions, including...

Security Bulletin: Libxml2 vulnerabilities affect IBM SmartCloud Entry (CVE-2015-1819)

Summary IBM SmartCloud Entry is vulnerable to several libxml2 vulnerabilities. Remote attackers can exploit them to consume all available memory resources. Vulnerability Details CVEID: CVE-2015-1819 DESCRIPTION: Libxml is vulnerable to a denial of service, caused by an XML External Entity Injecti...

CVE-2020-15117 Denial of Service in Synergy

In Synergy before version 1.12.0, a Synergy server can be crashed by receiving a kMsgHelloBack packet with a client name length set to 0xffffffff 4294967295 if the servers memory is less than 4 GB. It was verified that this issue does not cause a crash through the exception handler if the availab...

Apple Security Update: watchOS 5.3.8

Apple recommends to install security update watchOS 5.3.8 on devices Apple Watch Series 1, 2, 3, and 4...

Apple Security Update: watchOS 5.3.8

Apple recommends to install security update watchOS 5.3.8 on devices Apple Watch Series 1, 2, 3, and 4...

OSV-2020-867 Heap-buffer-overflow in icu_64::CollationIterator::appendCEsFromCE32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15613 Crash type: Heap-buffer-overflow READ 4 Crash state: icu64::CollationIterator::appendCEsFromCE32 icu64::DataBuilderCollationIterator::fetchCEs icu64::CollationDataBuilder::getCEs...

OSV-2020-789 Heap-use-after-free in llvm_ks::X86Operand::getToken

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22850 Crash type: Heap-use-after-free READ 4 Crash state: llvmks::X86Operand::getToken X86AsmParser::MatchAndEmitATTInstruction X86AsmParser::MatchAndEmitInstruction...

OSV-2020-772 Heap-buffer-overflow in __libcpp_strstr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23601 Crash type: Heap-buffer-overflow READ 4 Crash state: libcppstrstr strstr pcpp::SipRequestFirstLine::parseVersion...

Sony Playstation 4 (PS4) < 7.02 / FreeBSD 9 / FreeBSD 12 - Kernel Local Privilege Escalation

Sony Playstation 4 PS4 include include include include include include include define KERNEL include undef KERNEL define WANTFILE include include include include include define WANTSOCKET include include define WANTINPCB include include include // define FBSD12 define ELFMAGIC 0x464c457f define...