GHSA-XRQM-FPGR-6HHX Overflow/crash in `tf.range`

Impact While calculating the size of the output within the tf.range kernel, there is a conditional statement of type int64 = condition ? int64 : double. Due to C++ implicit conversion rules, both branches of the condition will be cast to double and the result would be truncated before the...

PT-2021-22996

Name of the Vulnerable Software and Affected Versions Softing Industrial Automation uaToolkit Embedded versions prior to 1.40 Description An issue allows remote attackers to cause a denial of service DoS or login as an anonymous user by sending crafted messages to an OPC/UA server. The server...

CVE-2021-40872: Access of Resource Using Incompatible Type

An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service DoS or login as an anonymous user bypassing security checks by sending crafted messages to a OPC/UA server. The server process may crash unexpectedly because of a...

CVE-2021-40871: Access of Resource Using Incompatible Type

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service DoS by sending crafted messages to a OPC/UA client. The client process may crash unexpectedly because of a wrong type cast, and must be restarted...

PYSEC-2021-810

TensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the output within the tf.range kernel, there is a conditional statement of type int64 = condition ? int64 : double. Due to C++ implicit conversion rules, both branches of the condition...

PYSEC-2021-395

TensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the output within the tf.range kernel, there is a conditional statement of type int64 = condition ? int64 : double. Due to C++ implicit conversion rules, both branches of the condition...

PYSEC-2021-810

TensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the output within the tf.range kernel, there is a conditional statement of type int64 = condition ? int64 : double. Due to C++ implicit conversion rules, both branches of the condition...

CVE-2021-41202

TensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the output within the tf.range kernel, there is a conditional statement of type int64 = condition ? int64 : double. Due to C++ implicit conversion rules, both branches of the condition...

pcl:ply_reader_fuzzer: Bad-cast to pcl::io::ply::ply_parser::list_property<unsigned int, float> from invalid vptr in std::__1::__shared_ptr_pointer<pcl::io::ply::ply_parser::list_property<unsigned

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=4733380273504256 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002e97c10 Crash...

serenity:FuzzPEM: Bad-cast to AK::Array<AK::TypeErasedParameter, 0>Crypto::decode_pem in FuzzPEM.cpp

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5157004667125760 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzPEM Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7fff15c70e08 Crash...

duckdb:parse_fuzz_test: Stack-buffer-overflow in bool duckdb::TryDecimalStringCast<duckdb::hugeint_t>

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=5376498064818176 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: parsefuzztest Job Type: libfuzzerasanduckdb Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

GHSA-89RJ-5GGJ-3P9P Reachable Assertion in OpenCV.

In OpenCV 3.3.1 corresponds with OpenCV-Python 3.3.1.11, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast...

Reachable Assertion in OpenCV.

In OpenCV 3.3.1 corresponds with OpenCV-Python 3.3.1.11, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast...

Unsafe cast in ConcentratedLiquidityPool burn leads to attack

Handle cmichel Vulnerability details The ConcentratedLiquidityPool.burn function performs an unsafe cast of a uint128 type to a signed integer. uint256 amount0fees, uint256 amount1fees = updatePositionmsg.sender, lower, upper, -int128amount; Note that amount is chosen by the caller and when...

IndexPool performs several unsafe type casts

Handle cmichel Vulnerability details The IndexPool.burn/burnSingle/swap/flashSwap functions all perform unsafe type casts to uint120 without checking if the values actually fit into 120 bits. Impact Unlike mint, these functions have other require statements and checks that don't seem to directly...

Unsafe cast in IndexPool mint leads to attack

Handle cmichel Vulnerability details The IndexPool.mint function performs an unsafe cast of ratio to the uint120 type: uint120 ratio = uint120divtoMint, totalSupply; Note that toMint is chosen by the caller and when choosing toMint = 2120 totalSupply / BASE, the ratio variable will be 2120 and th...

serenity:FuzzASN1: Bad-cast to AK::Array<AK::TypeErasedParameter, 0>Crypto::ASN1::parse_utc_time in TLS::Certificate::parse_asn1

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=4746446717452288 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzASN1 Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffc229d1488 Crash...

pcl:ply_reader_fuzzer: Bad-cast to std::__function::__base<void ()>std::__1::__function::__value_func<void in pcl::io::ply::ply_parser::list_property<unsigned int, short>::~list_property

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=4828523190157312 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7fff4ad8fe20 Crash...

envoy:server_fuzz_test: Crash in __dynamic_cast

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5279934721949696 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: serverfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000012221 Crash...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM WebSphere Cast Iron Solution & App Connect Professional

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology used by IBM Cast Iron. These issues were disclosed as part of the IBM Java SDK updates in April 2021. IBM Cast Iron has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2021-2161 DESCRIPTION: An unspecified...