serenity:FuzzPDF: Bad-cast to AK::Array<AK::TypeErasedParameter, 0>PDF::DocumentParser::initialize in PDF::Document::create

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=6208902101598208 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzPDF Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffd5deafff8 Crash...

assimp:assimp_fuzzer: Bad-cast to Assimp::BaseImporter from invalid vptr in Assimp::DeleteImporterInstanceList

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5295586047033344 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000003912f50 Crash State:...

Mozilla: Invalid downcast in Worklets

The Mozilla Foundation Security Advisory describes this flaw as: While implementing AudioWorklets, some code may have cast one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash...

Mozilla: Invalid downcast in Worklets

The Mozilla Foundation Security Advisory describes this flaw as: While implementing AudioWorklets, some code may have cast one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash...

Unsafe cast

Lines of code Vulnerability details Impact In AccountCodeStorage.sol we have function getCodeHash and getCodeSize Due to an insecure cast, it is possible to get an integer overflow. Solidity version 0.8.0 provide SafeMath, but casting operations are not safe and can overflow. Proof of Concept As...

CVE-2023-28162

The Mozilla Foundation Security Advisory describes this flaw as: While implementing AudioWorklets, some code may have cast one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash...

SUSE CVE-2023-28162

While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash. This vulnerability affects Firefox 111, Firefox ESR 102.9, and Thunderbird 102.9...

UBUNTU-CVE-2023-28162

While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash. This vulnerability affects Firefox 111, Firefox ESR 102.9, and Thunderbird 102.9...

serenity:FuzzJPEGLoader: Bad-cast to AK::Array<AK::TypeErasedParameter, 0>Gfx::handle_color_transform in Gfx::decode_jpeg

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=6414214651838464 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzJPEGLoader Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffc0b58ecc8...

CVE-2022-40531

Memory corruption in WLAN due to incorrect type cast while sending WMISCANSCHPRIOTBLCMDID message...

Memory corruption

Memory corruption in WLAN due to incorrect type cast while sending WMISCANSCHPRIOTBLCMDID message...

assimp:assimp_fuzzer: Bad-cast to Assimp::BaseProcess from invalid vptr in Assimp::Importer::~Importer

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4741682932613120 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002702f20 Crash State:...

CVE-2022-40531

CVE-2022-40531: Memory corruption in WLAN due to an incorrect type cast when sending WMI_SCAN_SCH_PRIO_TBL_CMDID. Documented CVSSv3.1 base score 7.8 (NVD) / 8.4 (Qualcomm bulletin) with Local, Low-Privilege, No-User-Interaction access and High impact to confidentiality, integrity, and availabilit...

assimp:assimp_fuzzer: Bad-cast to Assimp::BaseImporter from invalid vptr in Assimp::DeleteImporterInstanceList

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5060726323806208 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002a32f80 Crash State:...

CVE-2022-40531: Incorrect Type Conversion or Cast

Memory corruption in WLAN due to incorrect type cast while sending WMISCANSCHPRIOTBLCMDID message...

PT-2023-13815 · Qualcomm · Snapdragon +256

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption in WLAN due to an incorrect type cast while sending the WMI SCAN SCH PRIO TBL CMDID message. Recommendations: ...

libreoffice:htmlfuzzer: Bad-cast to const SvxRightMarginItem from SvxTextLeftMarginItem in SvxRightMarginItem::operator==

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4561109077327872 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address:...

UBUNTU-CVE-2019-25104

A vulnerability has been found in rtcwcoop 1.0.2 and classified as problematic. Affected by this vulnerability is the function AICastScriptLoad of the file code/game/aicastscript.c of the component Team Command Handler. The manipulation leads to denial of service. The identifier of the patch is...

serenity:FuzzJPEGLoader: Bad-cast to AK::Array<AK::TypeErasedParameter, 0>Gfx::read_start_of_scan in Gfx::parse_header

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=4911477174960128 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzJPEGLoader Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffcef172f88...

rtcwcoop 安全漏洞

rtcwcoop is an application of rtcwcoop open source. Provides a benchmark RTCW that can be used for further development and entertainment. A security vulnerability exists in rtcwcoop version 1.0.2, which stems from a problem with the function AICastScriptLoad in the file code/game/aicastscript.c i...