LastPass Credential Leak From Previous Site Vulnerability

LastPass suffers from an issue where bypassing dopopupregister leaks credentials from the previous site. lastpass: bypassing dopopupregister leaks credentials from previous site I noticed that you can create a popup without calling dopopupregister by iframing popupfilltab.html i.e. via...

LastPass Credential Leak From Previous Site

lastpass: bypassing dopopupregister leaks credentials from previous site I noticed that you can create a popup without calling dopopupregister by iframing popupfilltab.html i.e. via moz-extension, ms-browser-extension, chrome-extension, etc. It's a valid webaccessibleresource. Because...

libhevc:hevc_dec_fuzzer: Heap-buffer-overflow in ihevcd_mv_merge

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5747011424354304 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Heap-buffer-overflow READ...

irssi:server-fuzz: Bad-free in sig_destroyed

Project: https://github.com/irssi/irssi.git Detailed Report: https://oss-fuzz.com/testcase?key=5716112825647104 Project: irssi Fuzzing Engine: afl Fuzz Target: server-fuzz Job Type: aflasanirssi Platform Id: linux Crash Type: Bad-free Crash Address: 0x6190000016e0 Crash State: sigdestroyed...

flac:fuzzer_encoder: Crash in FLAC__bitwriter_free

Detailed Report: https://oss-fuzz.com/testcase?key=5648926757093376 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerencoder Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x553c57f0 Crash State: FLACbitwriterfree FLACstreamencoderfinish...

libhevc:hevc_dec_fuzzer: Heap-buffer-overflow in ihevcd_parse_slice_data

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5753353983754240 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Heap-buffer-overflow WRIT...

unicorn:fuzz_emu_arm64_armbe: Use-of-uninitialized-value in float64_squash_input_denormal_aarch64eb

Detailed Report: https://oss-fuzz.com/testcase?key=5638957731151872 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarm64armbe Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: float64squashinputdenormalaarch64eb...

libhevc:hevc_dec_fuzzer: Stack-buffer-overflow in ihevcd_ref_list

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5637475766108160 Project: libhevc Fuzzing Engine: afl Fuzz Target: hevcdecfuzzer Job Type: aflasanlibhevc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash...

cryptofuzz:cryptofuzz-openssl: Heap-buffer-overflow in cipher_hw_desx_cbc_initkey

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5678733813350400 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl Job Type: libfuzzerasani386cryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ ...

graphicsmagick:coder_TIFF_fuzzer: Use-of-uninitialized-value in GammaToLinear

Detailed Report: https://oss-fuzz.com/testcase?key=5159931526774784 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: GammaToLinear AccumulateRG...

grpc:ssl_server_fuzzer: Heap-buffer-overflow in grpc_core::HandshakerArgs::HandshakerArgs

Detailed Report: https://oss-fuzz.com/testcase?key=5765765789122560 Project: grpc Fuzzing Engine: afl Fuzz Target: sslserverfuzzer Job Type: aflasangrpc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x615000000268 Crash State: grpccore::HandshakerArgs::HandshakerArgs...

libhevc:hevc_dec_fuzzer: Heap-use-after-free in ihevcd_jobq_lock

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5659433673162752 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasanlibhevc Platform Id: linux Crash Type: Heap-use-after-free READ 8...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_values_hash_test

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5638785819213824 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x62500000c100 Crash...

libvips:jpegsave_file_fuzzer: Crash in colr_color

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5662041322291200 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavefilefuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x7f22a2c12000 Crash...

libspng:spng_read_fuzzer: Heap-buffer-overflow in spng_decode_image

Project: https://gitlab.com/randy408/libspng.git https://github.com/randy408/libspng.git Detailed Report: https://oss-fuzz.com/testcase?key=5750326069559296 Project: libspng Fuzzing Engine: libFuzzer Fuzz Target: spngreadfuzzer Job Type: libfuzzerasanlibspng Platform Id: linux Crash Type:...

libssh2:ssh2_client_fuzzer: Crash in _libssh2_ntohu32

Project: https://github.com/cmeister2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5705819873607680 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerasanlibssh2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60200a000116...

libssh2:ssh2_client_fuzzer: Heap-buffer-overflow in _libssh2_ntohu32

Project: https://github.com/cmeister2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5651535966502912 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerasanlibssh2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBVORBIS_fuzzer: Heap-buffer-overflow in oggpack_read

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5637490098044928 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBVORBISfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

opensc:fuzz_asn1_print: Heap-buffer-overflow in decode_bit_string

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5115715492773888 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzasn1print Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libavc:avc_dec_fuzzer: Heap-buffer-overflow in ih264d_cavlc_parse4x4coeff_n8

Project: https://android.googlesource.com/platform/external/libavc Detailed Report: https://oss-fuzz.com/testcase?key=5721165355548672 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...