llvm:clang-objc-fuzzer: Global-buffer-overflow in ProcessUCNEscape

Detailed Report: https://oss-fuzz.com/testcase?key=5085532385968128 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000ccfc3dc Crash State: ProcessUCNEscape...

CVE-2020-0306

In LLVM, there is a possible ineffective stack cookie placement due to stack frame double reservation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

Stack overflow

In LLVM, there is a possible ineffective stack cookie placement due to stack frame double reservation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-0306

In LLVM, there is a possible ineffective stack cookie placement due to stack frame double reservation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-0306

In LLVM, there is a possible ineffective stack cookie placement due to stack frame double reservation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-0306

Removed by vendor...

CVE-2020-0306

CVE-2020-0306 concerns LLVM: an ineffective stack cookie placement due to stack frame double reservation, enabling local elevation of privilege on Android 11 without extra execution privileges or user interaction. The issue is documented across multiple feeds (NVD, Red Hat, Ubuntu, Debian) with t...

About the security content of Xcode 12.0

About the security content of Xcode 12.0 This document describes the security content of Xcode 12.0. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

orbit:ElfFileLoadSymbolsFuzzer: Heap-buffer-overflow in llvm::object::ELFFile<llvm::object::ELFType<

Detailed Report: https://oss-fuzz.com/testcase?key=5137699567304704 Project: orbit Fuzzing Engine: libFuzzer Fuzz Target: ElfFileLoadSymbolsFuzzer Job Type: libfuzzerasanorbit Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6060000002af Crash State:...

llvm:clang-fuzzer: Use-of-uninitialized-value in clang::Parser::ParseCastExpression

Detailed Report: https://oss-fuzz.com/testcase?key=5079246079524864 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::Parser::ParseCastExpression...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::PushDeclContext

Detailed Report: https://oss-fuzz.com/testcase?key=5760004104388608 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::PushDeclContext...

Control Flow Guard for Clang/LLVM and Rust

As part of our ongoing efforts towards safer systems programming, we’re pleased to announce that Windows Control Flow Guard CFG support is now available in the Clang C/C++ compiler and Rust. What is Control Flow Guard? CFG is a platform security technology designed to enforce control flow...

Control Flow Guard for Clang/LLVM and Rust

As part of our ongoing efforts towards safer systems programming, we’re pleased to announce that Windows Control Flow Guard CFG support is now available in the Clang C/C++ compiler and Rust. What is Control Flow Guard? CFG is a platform security technology designed to enforce control flow...

llvm:llvm-opt-fuzzer--x86_64-guard_widening: Heap-use-after-free in llvm::Value::setNameImpl

Detailed Report: https://oss-fuzz.com/testcase?key=5166633690333184 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-opt-fuzzer--x8664-guardwidening Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ 3 Crash Address: 0x60400000d7f0 Crash State:...

llvm:clang-objc-fuzzer: Heap-buffer-overflow in clang::Lexer::getTokenPrefixLength

Detailed Report: https://oss-fuzz.com/testcase?key=6326215485685760 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7fd2d09dff07 Crash State:...

llvm:clang-objc-fuzzer: Segv on unknown address in clang::Preprocessor::LexHeaderName

Detailed Report: https://oss-fuzz.com/testcase?key=4823847375994880 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Preprocessor::LexHeaderName...

OSV-2020-1498 Segv on unknown address in llvm::llvm_unreachable_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21075 Crash type: Segv on unknown address Crash state: llvm::llvmunreachableinternal clang::Sema::CheckAbsoluteValueFunction clang::Sema::CheckFunctionCall...

OSV-2020-1488 Segv on unknown address in llvm::llvm_unreachable_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20787 Crash type: Segv on unknown address Crash state: llvm::llvmunreachableinternal findDefaultInitializer checkDuplicateDefaultInit...

OSV-2020-1467 Segv on unknown address in llvm::APInt::udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19272 Crash type: Segv on unknown address Crash state: llvm::APInt::udiv llvm::APInt::sdiv ComplexExprEvaluator::VisitBinaryOperator...

OSV-2020-1463 Segv on unknown address in llvm::detail::IEEEFloat::roundSignificandWithExponent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19171 Crash type: Segv on unknown address Crash state: llvm::detail::IEEEFloat::roundSignificandWithExponent llvm::detail::IEEEFloat::convertFromDecimalString llvm::detail::IEEEFloat::convertFromString...