507 matches found
ruzzy
Ruzzy 一个基于覆盖率引导的模糊测试工具，用于纯 Ruby 代码和 Ruby C 扩展。 Ruzzy 深受 Google 的 Atheris（一个 Python 模糊测试器）启发。Ruzzy 使用 libFuzzer（或 LibAFL）作为其覆盖率检测和模糊测试引擎。在对 C 扩展进行模糊测试时，Ruzzy 还支持 AddressSanitizer 和 UndefinedBehaviorSanitizer。如果您想了解更多关于 Ruzzy 背后的灵感，请参阅我们的论文：Design and Implementation of a Coverage-Guided Ruby Fuzzer...
CVE-2025-6554
CVE-2025-6554 复现漏洞 root@kitploit: macOS 环境： brew intsall ninja git clone https://chromium.googlesource.com/chromium/tools/depottools.git export PATH=/path/to/depottools:$PATH fetch v8 cd v8 git checkout 13.8.500258 gclient sync -D sh v8asan.sh autoninja -C out/arm64.asan d8...
CVE-2023-4863
CVE-2023-4863 root@kitploit: 签出 webp git clone https://chromium.googlesource.com/webm/libwebp/ webptest cd webptest/ 签出存在漏洞的版本 git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 启用 AddressSanitizer sed -i 's/^EXTRAFLAGS=./& -fsanitize=address/' makefile.unix 构建 webp make -f makefile.unix cd...
libtheora-CVE-2024-56431-PoC
编译应用程序源代码 CFLAGS="-fsanitize=address -fsanitize=undefined -g -O1" CXXFLAGS="-fsanitize=address -fsanitize=undefined -g -O1" LDFLAGS="-fsanitize=address" ./configure make 编译PoC源代码 g++ fuzzer.cpp -o poc -I include/ lib/.libs/libtheora.a -fsanitize=address -fsanitize=undefined 执行PoC...
bunch-of-fuzzers-developed-using-libfuzzer-and-asan
bunch-of-fuzzers-developed-using-libfuzzer-and-asan...
llvm:llvm-special-case-list-fuzzer: Crash in p_ere
Detailed Report: https://oss-fuzz.com/testcase?key=6388532688781312 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7b6587ce1ff0 Crash State: pere pere pere Sanitizer: addre...
CVE-2026-30754
A memory corruption vulnerability in FFmpeg before 8.1 occurs in the nal_send function within libavformat/rtpenc_h264_hevc.c . When transmitting H.264/HEVC streams via RTP, a crafted input file causes a negative size parameter (size=-3) to be passed to memcpy , leading to memory corruption. The i...
lucene:QueryParserFuzzer: Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray
Detailed Report: https://oss-fuzz.com/testcase?key=6593902333984768 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.lucene.util.ArrayUtil.copyOfSubArray...
EUVD-2026-35353
A remote, unauthenticated BLE peer can trigger a 2-byte out-of-bounds write in the Bluetooth host during L2CAP LE CoC SDU reassembly. When the application enables segmentation via chanops.allocbuf and the chosen RX pool has a userdatasize smaller than 2 bytes, the segmentation counter stored in t...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng (UTSA-2026-015468)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-015468 advisory. Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer ASan, the program...
CVE-2026-34555
Technical specifics (affected products/versions/vector details) are not publicly provided in the supplied documents. The entry notes a stack-buffer-overflow in iccDEV CIccTagFixedNum::GetValues() prior to 2.3.1.6 and a patch in 2.3.1.6.
EUVD-2026-17719
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a heap-buffer-overflow HBO in CIccApplyCmmSearch::costFunc can be triggered via malformed JSON configuration input to the iccApplySearch tool. AddressSanitizer reports an...
CVE-2026-34539 iccDEV: HBO in CTiffImg::WriteLine()
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile and TIFF input can trigger a heap-buffer-overflow HBO in CTiffImg::WriteLine. The issue is observable under AddressSanitizer as an out-of-bounds heap read...
JLSEC-2026-9 Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of...
Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer ASan, the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive...
PT-2026-24697
NanoMQ MQTT Broker NanoMQ is an all-around Edge Messaging Platform. MQTT v5 Variable Byte Integer parsing out-of-bounds: get var integer accepts 5-byte varints without bounds checks; reliably triggers OOB read / crash when built with ASan. This affects 0.24.6 and earlier...
📄 OpenBabel 3.1.1 Parsing Issues
This Metasploit auxiliary module generates specially crafted proof of concept files targeting potential parsing vulnerabilities in OpenBabel version 3.1.1 such as NULL pointer dereference and out-of-bounds read conditions...
SUSE CVE-2025-28162
Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer ASan, the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive...
CVE-2025-28162
Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer ASan, the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive...