PT-2021-6704 · Exiv2 +1 · Exiv2 +1

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.27.99.0 Description: The issue is related to a float point exception in the printLong function in tags int.cpp, which can be exploited by attackers to cause a denial of service DOS via a crafted tif file. This is due to a lack...

CVE-2020-18774

A float point exception in the printLong function in tagsint.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service DOS via a crafted tif file...

多款 ARM 产品安全漏洞

ARM Cortex-M55 and others are products of ARM UK.ARM Cortex-M55 is ARM Holdings' ultra-low power ARM microarchitecture for microcontrollers and embedded subsystems.ARM Cortex-M35P is a tamper-resistant Cortex -M processor.ARM Cortex-M33 is a feature-rich implementation of the Armv8-M architecture...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.jj_3R_363

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5575300470145024 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.jj_3R_327

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5658213000282112 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

openSUSE 15 Security Update : openexr (openSUSE-SU-2021:2793-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2793-1 advisory. - A flaw found in function dataWindowForTile of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed b...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.jj_3R_402

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5684603696840704 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Statements

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5834375112032256 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

SUSE-SU-2021:2793-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2021-20298 bsc1188460: Fixed Out-of-memory in B44Compressor - CVE-2021-20299 bsc1188459: Fixed Null-dereference READ in Imf25:Header:operator - CVE-2021-20300 bsc1188458: Fixed Integer-overflow in Imf25:hufUncompress - CVE-2021-20302...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.InclusiveOrExpression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5521089995341824 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.jj_3R_250

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6043141929566208 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

Google TensorFlow Dezero Error Vulnerability (CNVD-2021-64069)

Google TensorFlow, an end-to-end open source machine learning platform, is vulnerable to a divide by zero error in versions prior to Google TensorFlow 2.6.0. An attacker could exploit the vulnerability through a specially crafted parameter call in-place to cause a floating point exception, which...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValue

Detailed Report: https://oss-fuzz.com/testcase?key=5961943492460544 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.getPropertyValue...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Statements

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4883151456436224 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.parser.DefaultJSONParser.parseObject

Detailed Report: https://oss-fuzz.com/testcase?key=5655558040977408 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

Denial Of Service (DoS)

Exiv2 is vulnerable to denial of service. A floating point exception FPE due to an integer divide by zero allows an attacker to crash the application...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.RelationalExpression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5010188873105408 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.parser.DefaultJSONParser.parseObject

Detailed Report: https://oss-fuzz.com/testcase?key=5985807067381760 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValue

Detailed Report: https://oss-fuzz.com/testcase?key=6738468242849792 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.getPropertyValue...

OSV-2021-1137 Uncaught exception in com.alibaba.fastjson.parser.DefaultJSONParser.parseObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37237 Crash type: Uncaught exception Crash state: com.alibaba.fastjson.parser.DefaultJSONParser.parseObject java.base/java.util.HashMap.tableSizeFor java.base/java.util.HashMap...