libyang:lyd_parse_mem_json: Crash in lydict_remove

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=6538934944399360 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememjson Job Type: libfuzzerasanlibyang Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00000094aab0 Cras...

libyang:lyd_parse_mem_json: Heap-use-after-free in lydjson_metadata_finish

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=4806391844962304 Project: libyang Fuzzing Engine: afl Fuzz Target: lydparsememjson Job Type: aflasanlibyang Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60d000007bc8 Cra...

perfetto:trace_processor_fuzzer: Segv on unknown address in Json::decodePrefixedString

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed Report: https://oss-fuzz.com/testcase?key=5370069594013696 Project: perfetto Fuzzing Engine: libFuzzer Fuzz Target: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Crash Type: Segv on unknown...

libyang:lyd_parse_mem_json: Crash in dict_insert

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=4790897616224256 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememjson Job Type: libfuzzerasanlibyang Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00000094b3b0 Cras...

libyang:lyd_parse_mem_json: Use-of-uninitialized-value in lyht_find_first

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=5117149606707200 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememjson Job Type: libfuzzermsanlibyang Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libyang:lyd_parse_mem_json: Heap-use-after-free in dict_hash_multi

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=6341213843226624 Project: libyang Fuzzing Engine: afl Fuzz Target: lydparsememjson Job Type: aflasanlibyang Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x609000014ab0 Cra...

libredwg:llvmfuzz: Heap-buffer-overflow in bit_utf8_to_TV

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5805838259322880 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libredwg:llvmfuzz: Heap-buffer-overflow in bit_utf8_to_TV

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5967211421368320 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libyang:lyd_parse_mem_json: Heap-buffer-overflow in lyjson_number

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=5450016241090560 Project: libyang Fuzzing Engine: afl Fuzz Target: lydparsememjson Job Type: aflasanlibyang Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x60500000a187...

libredwg:llvmfuzz: Heap-buffer-overflow in strtol

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5979606881533952 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address:...

libyang:lyd_parse_mem_json: Heap-buffer-overflow in log_vprintf

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=6363884920373248 Project: libyang Fuzzing Engine: honggfuzz Fuzz Target: lydparsememjson Job Type: honggfuzzasanlibyang Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libyang:lyd_parse_mem_json: Heap-buffer-overflow in lyjson_number

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=5435663802564608 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememjson Job Type: libfuzzerasanlibyang Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

6xs (>=0.1.0, <=0.1.3), 7ghost (>=4.11.0, <=4.11.46) +2398 more potentially affected by CVE-2020-28472 via aws-sdk (>=2.0.0-rc1, <=2.813.0)

aws-sdk NPM version =2.0.0-rc1, =0.1.0, =4.11.0, =3.10.1, =2.0.0, =1.0.0, =0.1.0, =1.16.0, =2.0.0, =3.7.0 and more Source cves: CVE-2020-28472 Source advisory: SNYK:JS-AWSSDK-1059424...

OSV-2018-18 Heap-buffer-overflow in json_parse_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9847 Crash type: Heap-buffer-overflow READ 1 Crash state: jsonparseobject jsonparse fileisjson...

Prototype Pollution in badopcode/nodash

Description ts-nodash is vulnerable to Prototype Pollution. Proof of Concept 1. Create the following PoC file: // poc.js var merge = require"ts-nodash".Merge const payload = JSON.parse'"proto":"polluted":"Yes! Its Polluted"'; var obj = console.log"Before : " + .polluted; mergeobj, payload;...

CVE-2020-26883

In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents...

CVE-2020-26883

In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents...

Design/Logic Flaw

In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents...

CVE-2020-26883

In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents...

CVE-2020-26883

Play Framework versions 2.6.0–2.8.2 contain a vulnerability caused by unbounded recursion during JSON parsing (notably in fromJson in form.scala per Veracode). This can lead to stack depletion/DoS via crafted JSON sent over the network. Affected components: Play Framework JSON parsing pathway; ro...