OSV-2020-2247 Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntryBase::GetEntrySize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28315 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::MeshCoP::ChannelMaskEntryBase::GetEntrySize ot::MeshCoP::ChannelMaskEntryBase::GetNext ot::MeshCoP::ChannelMaskBaseTlv::IsValid...

PT-2020-22178

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read crash. Technical details include the crash type and state, which involve functions such as GetEntrySiz...

openthread:ip6-send-fuzzer: Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntryBase::GetEntrySize

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5674892943032320 Project: openthread Fuzzing Engine: libFuzzer Fuzz Target: ip6-send-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash...

OSV-2020-343 Stack-use-after-return in ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13741 Crash type: Stack-use-after-return READ 1 Crash state: ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage ot::MeshCoP::ChannelMaskTlv::GetChannelMask ot::MeshCoP::ChannelMaskTlv::GetChannelMask...

PT-2020-22261

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurs due to a stack-use-after-return READ 1 issue. The crash involves the GetChannelPage function in MeshCoP::ChannelMaskEntryBase, and the...

openthread/ip6-send-fuzzer: Stack-use-after-return in ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5153373483958272 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type:...