llvm:clangd-fuzzer: Global-buffer-overflow in _GLOBAL__sub_I_DependencyScanningTool.cpp

Detailed Report: https://oss-fuzz.com/testcase?key=5886579209207808 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clangd-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address: 0x5759a2773a02 Crash State:...

llvm:clangd-fuzzer: Global-buffer-overflow in clang::clangd::calculateRoles

Detailed Report: https://oss-fuzz.com/testcase?key=5263163303198720 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clangd-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x59dbe7c7fbdb Crash State: clang::clangd::calculateRoles...

Malware in llvm-vs-code-extensions.vscode-clangd

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in llvm-vs-code-extensions.vscode-clangd (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b822fb613c3a0252eacdb48a5dea6a7b94786cc7b461e72423800257d6d650c Any computer that has this package installed or running should be considered...

llvm:clangd-fuzzer: Heap-buffer-overflow in llvm::raw_ostream::copy_to_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=6365487988342784 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clangd-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x625000004900 Crash State: llvm::rawostream::copytobuffer...

llvm:clangd-fuzzer: Use-of-uninitialized-value in clang::Lexer::LexTokenInternal

Detailed Report: https://oss-fuzz.com/testcase?key=5827471598288896 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clangd-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::Lexer::LexTokenInternal clang::Lexer::Lex...

llvm:clangd-fuzzer: Heap-buffer-overflow in llvm::raw_ostream::write

Detailed Report: https://oss-fuzz.com/testcase?key=6451144797585408 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clangd-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x625000004901 Crash State: llvm::rawostream::write...

Malicious Package

Overview vscode-clangd is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious code in vscode-clangd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3e05ac1fabef54ef34176e9d555cb6e63b3dfbc2241cf304ab6a1b8b3cd2cc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6974 Malicious code in vscode-clangd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3e05ac1fabef54ef34176e9d555cb6e63b3dfbc2241cf304ab6a1b8b3cd2cc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

llvm:clangd-fuzzer: Heap-buffer-overflow in llvm::raw_ostream::write

Detailed Report: https://oss-fuzz.com/testcase?key=6406085659983872 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clangd-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x625000004a02 Crash State: llvm::rawostream::write...

llvm:clangd-fuzzer: Crash in clang::serialization::reader::HeaderFileInfoTrait::ReadData

Detailed Report: https://oss-fuzz.com/testcase?key=5194868125335552 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clangd-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fe69ffbbfbf Crash State:...

llvm/clangd-fuzzer: Use-after-poison in llvm::yaml::Scanner::scanValue

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=4553604959567872 Project: llvm Fuzzer: libFuzzerllvmclangd-fuzzer Fuzz target binary: clangd-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address...