assimp:assimp_fuzzer: Bad-cast to Assimp::BaseImporterAssimp::Importer::ReadFile in Assimp::BatchLoader::LoadAll

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5086163820216320 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000003e7e880 Crash State:...

AZL-11544 CVE-2022-41911 affecting package tensorflow for versions less than 2.11.0-1

TensorFlow is an open source platform for machine learning. When printing a tensor, we get it's data as a const char array since that's the underlying storage and then we typecast it to the element type. However, conversions from char to bool are undefined if the char is not 0 or 1, so...

CVE-2022-40225

A vulnerability has been identified in SIPLUS TIM 1531 IRC 6AG1543-1MX00-7XE0 All versions V2.4.8, TIM 1531 IRC 6GK7543-1MX00-0XE0 All versions V2.4.8. Casting an internal value could lead to floating point exception under certain circumstances. This could allow an attacker to cause a denial of...

PT-2022-26366 · Unknown · Oxenstored

Name of the Vulnerable Software and Affected Versions: Oxenstored versions 32-bit builds Description: The issue arises from the Ocaml Xenbus library taking a C uint32 t out of the ring and casting it directly to an Ocaml integer. In 32-bit builds, this causes a truncation of the most significant...

libreoffice:fodtfuzzer: Bad-cast to SwXMLImport from SvXMLImport in XMLRedlineImportHelper::~XMLRedlineImportHelper

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5207260989358080 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: fodtfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address:...

libreoffice:ww8fuzzer: Bad-cast to SwCursor from SwPaM in SwCursor::GetNext

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6752484001710080 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000015e4b2...

geos:fuzz_geo2: Bad-cast to const geos::geom::Polygon from geos::geom::LineString in geos::operation::overlayng::OverlayMixedPoints::extractPolygons

Detailed Report: https://oss-fuzz.com/testcase?key=4698953031745536 Project: geos Fuzzing Engine: libFuzzer Fuzz Target: fuzzgeo2 Job Type: libfuzzerubsangeos Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000003488e50 Crash State: Bad-cast to const geos::geom::Polygon from...

Unsafe downcast operations can lead to silent failures

Lines of code Vulnerability details Solidity won't perform automatic checks when downcasting and it's possible for some fields to overflow while adding tiers. Proof of Concept Assume that in JBTiered721DelegateStore.recordAddTiers, one item for tiersToAdd contains votingUnits bigger than the size...

CVE-2022-43401

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Script Security Plugin 1183.v774b0b0aa451 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection a...

wabt:read_binary_interp_fuzzer: Bad-cast to wabt::interp::FuncType from invalid vptr in wabt::interp::BinaryReaderInterp::OnExport

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=4993742620983296 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: readbinaryinterpfuzzer Job Type: libfuzzerubsanwabt Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000027f1d10 Crash...

Security Bulletin: IBM WebSphere Cast Iron Solution is affected by a vulnerability in OpenSSL (CVE-2014-0160)

Abstract A security vulnerability has been discovered in OpenSSL Content VULNERABILITY DETAILS CVE-ID:CVE-2014-0160 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the TLS/DTLS heartbeat functionality. An attacker could exploit this...

serenity:FuzzJs: Bad-cast to AK::Array<AK::TypeErasedParameter, 0>JS::Value::to_object in JS::ObjectPrototype::is_prototype_of

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5862168716771328 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzJs Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7fff3ac30ab8 Crash Stat...

assimp:assimp_fuzzer: Bad-cast to Assimp::BaseImporterAssimp::DeleteImporterInstanceList in Assimp::Importer::~Importer

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5505232137748480 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000354c020 Crash State:...

cast-consulting.co.jp Cross Site Scripting vulnerability OBB-2917110

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Unsafe downcast

Lines of code Vulnerability details Impact It's possible to generate silent overflows when downcasting. E.g. if the value if bigger than the type being cast, it will overflow starting from zero. Proof of concept For the Price.sol constructor, if observationFrequency is a small value and...

CVE-2022-25302

All versions of package asneg/opcuastack are vulnerable to Denial of Service DoS due to a missing handler for failed casting when unvalidated data is forwarded to boost::get function in OpcUaNodeIdBase.h. Exploiting this vulnerability is possible when sending a specifically crafted OPC UA message...

PT-2022-17198 · Unknown · Asneg/Opcuastack

Name of the Vulnerable Software and Affected Versions: asneg/opcuastack versions affected versions not specified Description: The issue is related to a Denial of Service DoS condition due to a missing handler for failed casting when unvalidated data is forwarded to boost::get function in...

GLSA-202208-15 : isync: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-15 isync: Multiple Vulnerabilities - A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially...

rdkit:mol_data_stream_to_mol_fuzzer: Bad-cast to RDKit::QueryBond::QUERYBOND_QUERY' (aka 'Query<int, const RDKit::Bond *, true>') from invalid vptr in RDKit::QueryBond::~QueryBond

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6594100094173184 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002332b30 Crash...

CVE-2022-2163

Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via UI interaction...