wolfmqtt:wolfmqtt-fuzzer: Heap-buffer-overflow in MqttDecode_Disconnect

Detailed Report: https://oss-fuzz.com/testcase?key=5439064937988096 Project: wolfmqtt Fuzzing Engine: afl Fuzz Target: wolfmqtt-fuzzer Job Type: aflasanwolfmqtt Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x602000401834 Crash State: MqttDecodeDisconnect...

espeak-ng:ssml-fuzzer: Stack-buffer-underflow in InterpretPhoneme

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=6480243527909376 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-underflow READ 8 Crash Address...

libtheora:fuzzer-decoder: Use-of-uninitialized-value in TheoraDecoder::writeImage

Project: https://gitlab.xiph.org/xiph/theora.git Detailed Report: https://oss-fuzz.com/testcase?key=5164772354555904 Project: libtheora Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decoder Job Type: libfuzzermsanlibtheora Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

harfbuzz:hb-subset-fuzzer: Heap-use-after-free in hb_resolve_overflows

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5127321313476608 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

flac:fuzzer_decoder: Use-of-uninitialized-value in FLAC::Decoder::FuzzerStream::write_callback

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=6021284983603200 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

harfbuzz:hb-shape-fuzzer: Use-of-uninitialized-value in OT::hb_ot_apply_context_t::skipping_iterator_t::prev

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5349416110784512 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

golang:xml_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5937482856792064 Project: golang Fuzzing Engine: libFuzzer Fuzz Target: xmlfuzzer Job Type: libfuzzerasangolang Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5875964396044288 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

gdk-pixbuf:stream_fuzzer: Heap-buffer-overflow in gdk_pixbuf__ico_image_load_increment

Project: https://gitlab.gnome.org/GNOME/gdk-pixbuf.git Detailed Report: https://oss-fuzz.com/testcase?key=5997924824252416 Project: gdk-pixbuf Fuzzing Engine: libFuzzer Fuzz Target: streamfuzzer Job Type: libfuzzerasangdk-pixbuf Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-buffer-overflow in void std::__1::allocator<unsigned long>::construct<unsigned long, unsigned long

Detailed Report: https://oss-fuzz.com/testcase?key=6296446266114048 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62100084eae9 Crash State: void...

wolfmqtt:wolfmqtt-fuzzer: Crash in void* std::__1::__libcpp_operator_new<unsigned long>

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=5254550643146752 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerubsanwolfmqtt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fcc00000008...

harfbuzz:hb-shape-fuzzer: Heap-buffer-overflow in bool OT::Lookup::sanitize<OT::PosLookupSubTable>

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5417352787787776 Project: harfbuzz Fuzzing Engine: honggfuzz Fuzz Target: hb-shape-fuzzer Job Type: honggfuzzasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

PT-2021-27756

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 8 crash has been reported. The crash state includes ZEND FETCH OBJ R SPEC CV CONST INLINE HANDLER and ZEND FETCH OBJ R SPEC CV...

tdengine:sql-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4897035493441536 Project: tdengine Fuzzing Engine: libFuzzer Fuzz Target: sql-fuzzer Job Type: libfuzzerubsantdengine Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x014ef4300020 Crash State: NULL Sanitizer: undefined UBSAN Recommend...

wasm3:fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4817025503985664 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerubsanwasm3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002f20138 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securit...

vitess:write_packet_fuzzer: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4614558212292608 Project: vitess Fuzzing Engine: libFuzzer Fuzz Target: writepacketfuzzer Job Type: libfuzzerasanvitess Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

ffmpeg:ffmpeg_AV_CODEC_ID_MSNSIREN_fuzzer: Global-buffer-overflow in decode_vector

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4670777924911104 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDMSNSIRENfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash...

mtail:vm-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6693879320018944 Project: mtail Fuzzing Engine: libFuzzer Fuzz Target: vm-fuzzer Job Type: libfuzzerasanmtail Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000004ca314 Crash State: NULL Sanitizer: address ASAN Recommended Securit...

A deep-dive into the SolarWinds Serv-U SSH vulnerability

Several weeks ago, Microsoft detected a 0-day remote code execution exploit being used to attack the SolarWinds Serv-U FTP software in limited and targeted attacks. The Microsoft Threat Intelligence Center MSTIC attributed the attack with high confidence to DEV-0322, a group operating out of Chin...

ASB-A-190188264

In RGBtoBGR1portable of SkSwizzleropts.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...