serenity:FuzzShell: Bad-cast to AST::BarewordLiteral from Shell::AST::Tilde in Shell::Parser::parse_heredoc_initiation_record

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5736407357325312 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzShell Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000021dafe0 Crash...

PT-2021-28217

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 4 crash has been reported. The crash state includes functions such as module check cast, server connect unref, and server unre...

geos:fuzz_geo2: Bad-cast to const geos::geom::Point from geos::geom::GeometryCollection in geos::operation::overlayng::OverlayMixedPoints::extractCoordinates

Detailed Report: https://oss-fuzz.com/testcase?key=5519035564425216 Project: geos Fuzzing Engine: libFuzzer Fuzz Target: fuzzgeo2 Job Type: libfuzzerubsangeos Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000292a720 Crash State: Bad-cast to const geos::geom::Point from...

PT-2021-30846

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue involves security vulnerabilities and a crash that occurs when a device handles certain cast traffic on the local network. Recommendations At the moment, there is no information...

pcl:ply_reader_fuzzer: Bad-cast to std::__shared_weak_countstd::__1::shared_ptr<pcl::io::ply::ply_parser::property>::~shared_ptr in std::__1::__vector_base<std::__1::shared_ptr<pcl::io::ply::ply_parser::property>

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=6443473755570176 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002d69590 Crash...

OESA-2021-1107 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: An issue was discovered in GNOME GLib...

pcl:ply_reader_fuzzer: Bad-cast to std::__function::__base<void (unsigned int)>std::__1::__function::__value_func<void in pcl::io::ply::ply_parser::list_property<unsigned int, signed char>::~list_proper

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=6396318839865344 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000024f8480 Crash...

openbabel:fuzz_obconversion_sdf: Bad-cast to OpenBabel::OBRingData from OpenBabel::OBPairData in OpenBabel::OBMol::GetSSSR

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=5967464732164096 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzobconversionsdf Job Type: libfuzzerubsanopenbabel Platform Id: linux Crash Type: Bad-cast Crash Address:...

Security Bulletin: Vulnerabilities in IBM Java SDK affect IBM WebSphere Cast Iron Solution & App Connect Professional

Summary Vulnerabilities in IBM® SDK Java™ Technology Edition, which are used by IBM WebSphere Cast Iron Solution & App Connect Professional . These issues were disclosed as part of the IBM Java SDK updates in Oct 2020 , IBM WebSphere Cast Iron Solution & App Connect Professional have addressed th...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM WebSphere Cast Iron Solution & App Connect Professional

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, which are used by IBM Cast Iron Solution & App Connect Professional . These issues were disclosed as part of the IBM Java SDK updates in January 2021, IBM Cast Iron & App Connect Professional have addressed the...

pcl:ply_reader_fuzzer: Bad-cast to pcl::io::ply::ply_parser::scalar_property<float> from invalid vptr in std::__1::__shared_ptr_pointer<pcl::io::ply::ply_parser::scalar_property<float>*

Detailed Report: https://oss-fuzz.com/testcase?key=4881862548914176 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002901a30 Crash State: Bad-cast to pcl::io::ply::plyparser::scalarpropert...

pcl:ply_reader_fuzzer: Bad-cast to std::__function::__base<void (unsigned int)> from invalid vptr in std::__1::__function::__value_func<void

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=6059239920500736 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000003283670 Crash...

pcl:ply_reader_fuzzer: Bad-cast to std::__shared_weak_count from invalid vptr in std::__1::shared_ptr<pcl::io::ply::ply_parser::property>::~shared_ptr

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=5284369905352704 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000001729650 Crash...

PT-2024-11075 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an unintentional stack access in the Linux kernel, specifically in the mtd: physmap: physmap-bt1-rom module. The problem arises because the data variable is of...

CVE-2021-28036

An issue was discovered in the quinn crate before 0.7.0 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures...

libreoffice:ww6fuzzer: Bad-cast to SwClientSwDoc::ChgPageDesc in UpdatePageDescs

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5726306856730624 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww6fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000171eae...

libreoffice:ww2fuzzer: Bad-cast to SwClient from invalid vptr in SwDoc::ChgPageDesc

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5521351386464256 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww2fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000174f01...

uwebsockets:EpollEchoServer: Bad-cast to std::__shared_weak_countstd::__1::shared_ptr<bool>::~shared_ptr in ofats::any_detail::handler_traits<void>::handler_base<ofats::any_detail::handler

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5678855417364480 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: EpollEchoServer Job Type: libfuzzerubsanuwebsockets Platform Id: linux Crash Type: Bad-cast Crash Address:...

uwebsockets:EpollEchoServer: Bad-cast to std::__shared_weak_count from invalid vptr in std::__1::shared_ptr<bool>::~shared_ptr

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=4735666304974848 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: EpollEchoServer Job Type: libfuzzerubsanuwebsockets Platform Id: linux Crash Type: Bad-cast Crash Address:...

Security Bulletin: App Connect Professional & IBM WebSphere Cast Iron Solution are affected by Apache Tomcat vulnerabilities.

Summary App Connect Professional & IBM WebSphere Cast Iron Solution have addressed the following vulnerabilities reported in Apache Tomcat. Vulnerability Details CVEID: CVE-2021-24122 DESCRIPTION: Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by a flaw when...