CVE-2024-40635

containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as roo...

opencv:imdecode_fuzzer: Container-overflow in cv::GifDecoder::lzwDecode

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=4519276212191232 Project: opencv Fuzzing Engine: afl Fuzz Target: imdecodefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Container-overflow WRITE 1 Crash Address: 0x7e3bdb2df024 Crash...

AZL-76968 CVE-2025-0838 affecting package mysql 8.0.45-2

There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve, and rehash methods of absl::flat,nodehashset,map did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer...

opencv:imdecode_fuzzer: Container-overflow in cv::PngDecoder::readHeader

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=6429545422454784 Project: opencv Fuzzing Engine: libFuzzer Fuzz Target: imdecodefuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address:...

OSV-2024-1343 Container-overflow in glslang::HlslParseContext::decomposeIntrinsic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=380569852 Crash type: Container-overflow READ 8 Crash state: glslang::HlslParseContext::decomposeIntrinsic glslang::HlslParseContext::handleFunctionCall glslang::HlslGrammar::acceptFunctionCall...

PT-2024-41065 · Git +1 · Shaderc

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A crash occurs due to a container-overflow READ 8 issue. The crash involves the glslang::HlslParseContext::decomposeIntrinsic and glslang::HlslParseContext::handleFunctionCall functions, as...

shaderc:shaderc_fdp_fuzzer: Container-overflow in glslang::HlslParseContext::decomposeIntrinsic

Project: https://github.com/google/shaderc.git Detailed Report: https://oss-fuzz.com/testcase?key=6018855043923968 Project: shaderc Fuzzing Engine: afl Fuzz Target: shadercfdpfuzzer Job Type: aflasanshaderc Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address: 0x525000a1d878 Cra...

shaderc:glslc_fuzzer: Container-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, glslang::pool_allocato

Project: https://github.com/google/shaderc.git Detailed Report: https://oss-fuzz.com/testcase?key=4916925462806528 Project: shaderc Fuzzing Engine: afl Fuzz Target: glslcfuzzer Job Type: aflasanshaderc Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address: 0x525000bd1ac0 Crash...

libreoffice:docxfuzzer: Container-overflow in SvMemoryStream::GetData

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4788719863791616 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: docxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow WRITE Crash...

imagemagick:encoder_jxl_fuzzer: Container-overflow in std::__1::enable_if<

Detailed Report: https://oss-fuzz.com/testcase?key=5830813051060224 Project: imagemagick Fuzzing Engine: centipede Fuzz Target: encoderjxlfuzzer Job Type: centipedeasanimagemagick Platform Id: linux Crash Type: Container-overflow WRITE Crash Address: 0x607000032e50 Crash State: std::1::enableif...

perfetto:trace_processor_fuzzer: Container-overflow in std::__1::enable_if<

Detailed Report: https://oss-fuzz.com/testcase?key=4823824917397504 Project: perfetto Fuzzing Engine: centipede Fuzz Target: traceprocessorfuzzer Job Type: centipedeasanperfetto Platform Id: linux Crash Type: Container-overflow WRITE Crash Address: 0x6080005081c0 Crash State: std::1::enableif...

hermes:fuzzer-jsi-entry: Container-overflow in std::__1::enable_if<

Detailed Report: https://oss-fuzz.com/testcase?key=5192915280789504 Project: hermes Fuzzing Engine: centipede Fuzz Target: fuzzer-jsi-entry Job Type: centipedeasanhermes Platform Id: linux Crash Type: Container-overflow WRITE 8 Crash Address: 0x60b00000080f Crash State:...

perfetto:producer_socket_fuzzer: Container-overflow in std::__1::enable_if<

Detailed Report: https://oss-fuzz.com/testcase?key=5086878980702208 Project: perfetto Fuzzing Engine: centipede Fuzz Target: producersocketfuzzer Job Type: centipedeasanperfetto Platform Id: linux Crash Type: Container-overflow WRITE 9 Crash Address: 0x605000066a70 Crash State: std::1::enableif...

bitcoin-core:wallet_notifications: Container-overflow in std::__1::__wrap_iter<unsigned char*> std::__1::vector<unsigned char, std::__1::

Detailed Report: https://oss-fuzz.com/testcase?key=6031759698362368 Project: bitcoin-core Fuzzing Engine: centipede Fuzz Target: walletnotifications Job Type: centipedeasanbitcoin-core Platform Id: linux Crash Type: Container-overflow WRITE Crash Address: 0x51100004b6a1 Crash State:...

OSV-2024-322 Container-overflow in strtol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68322 Crash type: Container-overflow READ 3 Crash state: strtol Pistache::Http::Private::BodyStep::Chunk::parse Pistache::Http::Private::BodyStep::parseTransferEncoding...

PT-2024-40712 · Pistache · Pistache

Name of the Vulnerable Software and Affected Versions: Pistache affected versions not specified Description: The issue is related to a crash caused by a container-overflow read. Technical details about the crash include the involvement of the strtol function,...

pistache:fuzz_parsers: Container-overflow in strtol

Project: https://github.com/pistacheio/pistache.git Detailed Report: https://oss-fuzz.com/testcase?key=6066774966599680 Project: pistache Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsers Job Type: libfuzzerasanpistache Platform Id: linux Crash Type: Container-overflow READ 3 Crash Address:...

OSV-2024-140 Container-overflow in WasmEdge::LLVM::Compiler::compile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67006 Crash type: Container-overflow READ 8 Crash state: WasmEdge::LLVM::Compiler::compile WasmEdge::LLVM::Compiler::compile WasmEdge::Driver::FuzzTool...

wasmedge:wasmedge-fuzztool: Container-overflow in WasmEdge::LLVM::Compiler::compile

Project: https://github.com/WasmEdge/WasmEdge.git Detailed Report: https://oss-fuzz.com/testcase?key=6294514933235712 Project: wasmedge Fuzzing Engine: afl Fuzz Target: wasmedge-fuzztool Job Type: aflasanwasmedge Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address: 0x6090000020...

clickhouse:format_fuzzer: Container-overflow in DB::ParserExpressionImpl::parse

Detailed Report: https://oss-fuzz.com/testcase?key=4991850557538304 Project: clickhouse Fuzzing Engine: libFuzzer Fuzz Target: formatfuzzer Job Type: libfuzzerasanclickhouse Platform Id: linux Crash Type: Container-overflow READ 4 Crash Address: 0x7c6293bc5910 Crash State:...