libyal:libfmos_lzfse_fuzzer: Use-of-uninitialized-value in libfmos_lzfse_decompress

Detailed Report: https://oss-fuzz.com/testcase?key=4600023953833984 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfmoslzfsefuzzer Job Type: libfuzzermsanlibyal Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: libfmoslzfsedecompress lzfsefuzzer.cc...

libyal:libfmos_lzfse_fuzzer: Heap-buffer-overflow in libfmos_lzfse_read_literal_values

Detailed Report: https://oss-fuzz.com/testcase?key=4658026849632256 Project: libyal Fuzzing Engine: afl Fuzz Target: libfmoslzfsefuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000004128 Crash State: libfmoslzfsereadliteralvalues...

libyal:libwrc_stream_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4789109342732288 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libwrcstreamfuzzer Job Type: libfuzzermsanlibyal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x70c0fbad240c Crash State: NULL Sanitizer: memory MSAN Recommende...

libyal:libwrc_stream_fuzzer: Heap-double-free in libwrc_resource_node_entry_free

Detailed Report: https://oss-fuzz.com/testcase?key=4614184518680576 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libwrcstreamfuzzer Job Type: libfuzzerasanlibyal Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x621000002900 Crash State: libwrcresourcenodeentryfree...

libyal:libpff_item_fuzzer: Heap-buffer-overflow in libpff_table_read_index_entries

Detailed Report: https://oss-fuzz.com/testcase?key=5308953863520256 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libpffitemfuzzer Job Type: libfuzzerasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60c000001981 Crash State: libpfftablereadindexentri...

libyal:libesedb_record_fuzzer: Heap-buffer-overflow in libfvalue_data_handle_set_data

Detailed Report: https://oss-fuzz.com/testcase?key=6134777978159104 Project: libyal Fuzzing Engine: afl Fuzz Target: libesedbrecordfuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x62d00003a400 Crash State: libfvaluedatahandlesetdata...

CVE-2020-18900

A heap-based buffer overflow in the libexeiohandlereadcoffoptionalheader function of libyal libexe before 20181128. NOTE: the vendor has disputed this as described in libyal/libexe issue 1 on GitHub...

CVE-2020-18900

A heap-based buffer overflow in the libexeiohandlereadcoffoptionalheader function of libyal libexe before 20181128. NOTE: the vendor has disputed this as described in libyal/libexe issue 1 on GitHub...

UBUNTU-CVE-2020-18900

DISPUTED A heap-based buffer overflow in the libexeiohandlereadcoffoptionalheader function of libyal libexe before 20181128. NOTE: the vendor has disputed this as described in libyal/libexe issue 1 on GitHub...

CVE-2020-18900

A heap-based buffer overflow in the libexeiohandlereadcoffoptionalheader function of libyal libexe before 20181128. NOTE: the vendor has disputed this as described in libyal/libexe issue 1 on GitHub...

CVE-2020-18897

An use-after-free vulnerability in the libpffitemtreecreatenode function of libyal Libpff before 20180623 allows attackers to cause a denial of service DOS or execute arbitrary code via a crafted pff file...

Heap overflow

A heap-based buffer overflow in the libexeiohandlereadcoffoptionalheader function of libyal libexe before 20181128. NOTE: the vendor has disputed this as described in libyal/libexe issue 1 on GitHub...

CVE-2020-18900

The CVE-2020-18900 entry concerns a heap-based buffer overflow in libyal libexe’s libexe_io_handle_read_coff_optional_header function prior to 20181128. Several connected sources (Red Hat, SUSE, NVD, UBUNTU, OSV, CNNVD, PT Security) repeat this description and note that the vendor disputes the is...

CVE-2020-18900

A heap-based buffer overflow in the libexeiohandlereadcoffoptionalheader function of libyal libexe before 20181128. NOTE: the vendor has disputed this as described in libyal/libexe issue 1 on GitHub...

CVE-2020-18900

A heap-based buffer overflow in the libexeiohandlereadcoffoptionalheader function of libyal libexe before 20181128. NOTE: the vendor has disputed this as described in libyal/libexe issue 1 on GitHub...

CVE-2020-18897

CVE-2020-18897 is a use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623. The flaw allows a crafted pff file to cause denial of service or execute arbitrary code. The provided documents identify the affected component and the underlying cause ...

CVE-2020-18897

An use-after-free vulnerability in the libpffitemtreecreatenode function of libyal Libpff before 20180623 allows attackers to cause a denial of service DOS or execute arbitrary code via a crafted pff file...

Libyal Libexe 缓冲区错误漏洞

Libyal Libexe is an open source library for accessing executable EXE formats. A buffer error vulnerability exists in Libyal Libexe that stems from the product's libexeiohandlereadcoffoptionalheader function failing to properly constrain memory boundaries. An attacker could execute code via this...

CVE-2020-18900: Out-of-bounds Write

A heap-based buffer overflow in the libexeiohandlereadcoffoptionalheader function of libyal libexe before 20181128. NOTE: the vendor has disputed this as described in libyal/libexe issue 1 on GitHub...

libyal:libfwevt_xml_document_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5740511217451008 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfwevtxmldocumentfuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00001440 Crash State: NULL Sanitizer: address ASAN...