bitcoin-core:txoutcompressor_deserialize: Use-of-uninitialized-value in CPubKey::Decompress

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=6088511858540544 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: txoutcompressordeserialize Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value...

OSV-2021-1344 Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39021 Crash type: Heap-buffer-overflow WRITE 4 Crash state: openhtj2k::T1OpenHTJ2K::decompress std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco std::1::packagedtaskint...

PT-2021-27801

Name of the Vulnerable Software and Affected Versions openhtj2k affected versions not specified Description The issue is related to a heap-buffer-overflow error, specifically a WRITE 4 crash type. The crash occurs in the openhtj2k::T1OpenHTJ2K::decompress function, which is part of the...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress

Detailed Report: https://oss-fuzz.com/testcase?key=6106031583789056 Project: grok Fuzzing Engine: honggfuzz Fuzz Target: grkdecompressfuzzer Job Type: honggfuzzasangrok Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x602000001054 Crash State:...

DEBIAN-CVE-2021-39262

A crafted NTFS image can cause an out-of-bounds access in ntfsdecompress in NTFS-3G 2021.8.22...

PT-2021-5802

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2021.8.22 Description The issue is related to an out-of-bounds access in the ntfs decompress function of the NTFS-3G driver, which can be triggered by a crafted NTFS image. This can potentially allow an attacker to...

Excessive Iteration in Compress

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package...

GO-2021-0100 Denial of service via deadlock in github.com/containers/storage

Due to a goroutine deadlock, using github.com/containers/storage/pkg/archive.DecompressStream on a xz archive returns a reader which will hang indefinitely when Close is called. An attacker can use this to cause denial of service if they are able to cause the caller to attempt to decompress an...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in ZSTD_decompressBlock_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5881749933522944 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0xf2713428 Crash State:...

BusyBox decompress_gunzip null pointer DoS

The vulnerability of the huftbuild function in the archival/libarchive/decompressgunzip.c file of the UNIX utility command-line tool BusyBox is related to the use of a null pointer. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created ZIP file...

CVE-2021-36089

Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress::applypaletteclr called from grk::FileFormatDecompress::applyColour...

PT-2021-28318

Name of the Vulnerable Software and Affected Versions: ZSTD affected versions not specified Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the ZSTD decompressMultiFrame and ZSTD decompress usingDDict functions, as well as the blos...

DEBIAN-CVE-2021-28211

A heap overflow in LzmaUefiDecompressGetInfo function in EDK II...

DEBIAN-CVE-2020-25467

A null pointer dereference was discovered lzodecompressbuf in stream.c in Irzip 0.621 which allows an attacker to cause a denial of service DOS via a crafted compressed file...

CVE-2021-27347

Use after free in lzmadecompressbuf function in stream.c in Irzip 0.631 allows attackers to cause Denial of Service DoS via a crafted compressed file...

CVE-2021-27347

Use after free in lzmadecompressbuf function in stream.c in Irzip 0.631 allows attackers to cause Denial of Service DoS via a crafted compressed file...

Irzip resource management error vulnerability

Irzip is a compression utility that excels at compressing large files. A post-release reuse vulnerability exists in the lzmadecompressbuf function in stream.c in Irzip version 0.631, which can be exploited by an attacker to cause a denial of service via specially crafted compressed files...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in frame_get_vlmetalayers

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5966065472503808 Project: c-blosc2 Fuzzing Engine: afl Fuzz Target: decompressframefuzzer Job Type: aflasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in unsigned long grk::N_AVX2::vscheduler<grk::N_AVX2::DecompressDcShiftIrrev>

Detailed Report: https://oss-fuzz.com/testcase?key=5652473520979968 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: unsigned long grk::NAVX2::vscheduler...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in _blosc_getitem

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=6208488536670208 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...