envoy:codec_impl_fuzz_test: Bad-cast to Envoy::Http::Http1::ConnectionImplEnvoy::Http::Http1::StreamEncoderImpl::readDisable in Envoy::Http::Http1::StreamEncoderImpl::~StreamEncoderImpl

Detailed Report: https://oss-fuzz.com/testcase?key=5694284302516224 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: codecimplfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000006e40fb8 Crash State: Bad-cast to...

Google Chrome资源管理错误漏洞

Google Chrome is a web browser from Google Inc.V8 is an open source JavaScript engine. Google Chrome suffers from a resource management error vulnerability that exists due to a use-after-free error in the Cast UI component in Google Chrome. A remote attacker could create a specially crafted web...

The vulnerability of the Cast UI interface in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Cast UI interface in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the Cast UI interface in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Cast UI interface in Google Chrome and Microsoft Edge is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

serenity:FuzzPGMLoader: Bad-cast to AK::Array<AK::TypeErasedParameter, 0>Gfx::read_image_data in bool Gfx::decode<Gfx::PortableImageMapLoadingContext<Gfx::PGM> >

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5619183524642816 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzPGMLoader Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7fff616c6308 Cra...

assimp:assimp_fuzzer: Bad-cast to Assimp::ZipFile from Assimp::MemoryIOStream in Assimp::IOSystem2Unzip::opendisk

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6688053861679104 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000003c3e370 Crash State:...

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to a Heap buffer overflow in Cast UI...

Denial Of Service (DoS)

Chrome is vulnerable to denial of service. The vulnerability exists due to a Use after free in Cast UI...

Debian DSA-5089-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5089 advisory. Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. For the...

Chromium: CVE-2022-0800 Heap buffer overflow in Cast UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-0790 Use after free in Cast UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA12482 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in ANGLE can be exploited to cause...

Google launches Chrome 99, fixes 28 vulnerabilities

The Chrome team announced the promotion of Chrome 99 to the stable channel for Windows, Mac and Linux on March 1, 2022. This will roll out over the coming days/weeks. In the desktop version, a total of 28 vulnerabilities were closed. Of these, 11 were classified as high, 15 as medium and two as...

LockedBalance library should drop parameters to 96/32 bits

Lines of code Vulnerability details Impact The LockedBalance contract takes 256-bit amount values but performs bit math on them as if they were 96 bit values. Bits could spill over to a different locked balance in the else part lockedBalance stores two 128-bit locked balances in one 256-bit stora...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A memory mis-reference vulnerability exists in the Google Chrome Cast UI, which is caused by a mix-up in the program's instructions for freeing memory, and can be exploited to cause the program to crash and execute arbitrary code...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, Inc. A heap buffer overflow vulnerability exists in the Google Chrome Cast UI, which can be exploited by attackers to cause arbitrary code execution...

KLA12473 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of bounds memory...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 99 to the stable channel for Windows, Mac and Linux.This will roll out over the coming days/weeks. Chrome 99.0.4844.51 for Windows,Mac and Linux contains a number of fixes and improvements -- a list of changes is available in the lo...

upb:file_descriptor_parsenew_fuzzer: Bad-cast to upb_OneofDef' (aka 'struct upb_OneofDef')create_fielddef in create_msgdef

Detailed Report: https://oss-fuzz.com/testcase?key=4733587960758272 Project: upb Fuzzing Engine: libFuzzer Fuzz Target: filedescriptorparsenewfuzzer Job Type: libfuzzerubsanupb Platform Id: linux Crash Type: Bad-cast Crash Address: 0xffffffe126cd9680 Crash State: Bad-cast to upbOneofDef' aka...

Security Bulletin: WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in Pacemaker, ImageMagick, gd-libgd, libxslt, cURL libcurl , Ghostscript.

Summary WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in Pacemaker, ImageMagick, gd-libgd, libxslt, cURL libcurl , Ghostscript. These vulnerabilities are addressed in App connect professional v7.5.4.0 and v7.5.5.0, customer can migrate to these versions without...