Security Bulletin: The vulnerability CVE-2022-21299 in IBM Java SDK affects IBM WebSphere Cast Iron Solution & App Connect Professional

Summary The CVE-2022-21299 issue was disclosed as part of the IBM Java SDK updates in Apr 2022, IBM WebSphere Cast Iron Solution & App Connect Professional have addressed the applicable CVEs. This vulnerability is addressed in App connect professional v7.5.5.0, customer can migrate to this versio...

duckdb:parse_fuzz_test: Bad-cast to duckdb::BoundParameterExpression from duckdb::BoundCastExpression in duckdb::Planner::CreatePlan

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=4800152795217920 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: parsefuzztest Job Type: libfuzzerubsanduckdb Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000004d6bfa0 Crash State:...

Unsafe _price cast

Lines of code Vulnerability details Impact The price provided by chainlink AggregatorV3 could be a negative, if that happend the cast of the price goes high, in example, cast -1 to uint256 was 2256 - 1 Proof of Concept return uint256price.adjustDecimalsfeedDecimals, decimals; Tools Used Manual...

Security Bulletin: The CVE-2021-35561 vulnerability in IBM Java SDK affects IBM WebSphere Cast Iron Solution & App Connect Professional.

Summary The CVE-2021-35561 vulnerability in the IBM SDK Java Technology used by IBM WebSphere Cast Iron Solution & App Connect Professional. These issue were disclosed as part of the IBM Java SDK updates in Apr 2022, IBM WebSphere Cast Iron Solution & App Connect Professional have addressed the...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects IBM WebSphere Cast Iron Solution & App Connect Professional.

Summary There are multiple vulnerabilities in the IBM SDK Java Technology used by IBM WebSphere Cast Iron Solution & App Connect Professional. These issue were disclosed as part of the IBM Java SDK updates in Apr 2022, IBM WebSphere Cast Iron Solution & App Connect Professional have addressed the...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects IBM WebSphere Cast Iron Solution & App Connect Professional.

Summary There are multiple vulnerabilities in the IBM SDK Java Technology used by IBM WebSphere Cast Iron Solution & App Connect Professional. These issue were disclosed as part of the IBM Java SDK updates in Apr 2022, IBM WebSphere Cast Iron Solution & App Connect Professional have addressed the...

Mageia: Security Advisory (MGASA-2022-0241)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Cast UI interface in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Cast UI interface in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Chromium: CVE-2022-2163 Use after free in Cast UI and Toolbar

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

PT-2022-3060

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 103.0.5060.134 Description The issue is related to a use after free vulnerability in the Cast UI and Toolbar of Google Chrome, which could allow an attacker to exploit heap corruption via UI interaction if a use...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. Google Chrome suffers from a resource management error vulnerability that stems from a post-release reuse issue in the Cast UI and Toolbar...

GHSA-J32J-2HXV-RQF7 pg-native and libpq vulnerable to uncontrolled resource consumption

pg-native before 3.0.1 and libpq before 1.8.10 are vulnerable to Denial of Service DoS when the addons attempt to cast the second argument to an array and fail. This happens for every non-array argument passed. Note: pg-native is a mere binding to npm's libpq library, which in turn has the addons...

CVE-2022-25852

All versions of package pg-native; all versions of package libpq are vulnerable to Denial of Service DoS when the addons attempt to cast the second argument to an array and fail. This happens for every non-array argument passed. Note: pg-native is a mere binding to npm's libpq library, which in...

CVE-2022-25852

All versions of package pg-native; all versions of package libpq are vulnerable to Denial of Service DoS when the addons attempt to cast the second argument to an array and fail. This happens for every non-array argument passed. Note: pg-native is a mere binding to npm's libpq library, which in...

usrsctp:fuzzer_fragment: Bad-cast to struct sctp_sndrcvinfosctp_lower_sosend in usrsctp_sendv

Project: https://github.com/weinrank/usrsctp.git https://github.com/sctplab/usrsctp.git Detailed Report: https://oss-fuzz.com/testcase?key=6146632577581056 Project: usrsctp Fuzzing Engine: libFuzzer Fuzz Target: fuzzerfragment Job Type: libfuzzerubsanusrsctp Platform Id: linux Crash Type: Bad-cas...

OSV-2022-412 Bad-cast to const upb_tabent' (aka 'const struct _upb_tabent')insert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47464 Crash type: Bad-cast Crash state: Bad-cast to const upbtabent' aka 'const struct upbtabent'insert upbstrtableinsert createfielddef...

PT-2022-36990

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a bad-cast to const upb tabent also known as const struct upb tabent. This occurs during the execution of the upb...

upb:file_descriptor_parsenew_fuzzer: Bad-cast to const upb_tabent' (aka 'const struct _upb_tabent')insert in upb_strtable_insert

Detailed Report: https://oss-fuzz.com/testcase?key=5143351520788480 Project: upb Fuzzing Engine: libFuzzer Fuzz Target: filedescriptorparsenewfuzzer Job Type: libfuzzerubsanupb Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000006cd5018 Crash State: Bad-cast to const upbtabent' aka 'con...

assimp:assimp_fuzzer: Bad-cast to Assimp::D3DS::Material from invalid vptr in Assimp::ASE::Parser::ParseLV2MaterialBlock

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5921493454815232 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7f9305060a70 Crash State:...

openbabel:fuzz_obconversion_sdf: Bad-cast to OpenBabel::OBRingData from OpenBabel::OBPairData in OpenBabel::OBMol::GetSSSR

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4858500250468352 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzobconversionsdf Job Type: libfuzzerubsanopenbabel Platform Id: linux Crash Type: Bad-cast Crash Address:...