ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_h323

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5187010236252160 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60300000011d...

(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the user-mode...

tremor:decode_fuzzer: Heap-buffer-overflow in res2_inverse

Detailed Report: https://oss-fuzz.com/testcase?key=5769585533124608 Project: tremor Fuzzing Engine: afl Fuzz Target: decodefuzzer Job Type: aflasantremor Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60e00000062d Crash State: res2inverse mapping0inverse...

leptonica:enhance_fuzzer: Heap-buffer-overflow in pixGetRGBComponentCmap

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5686984648687616 Project: leptonica Fuzzing Engine: honggfuzz Fuzz Target: enhancefuzzer Job Type: honggfuzzasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

open62541:fuzz_tcp_message: Use-of-uninitialized-value in UA_Array_copy

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5740902795706368 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzztcpmessage Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

tremor:decode_fuzzer: Crash in _01inverse

Project: https://gitlab.xiph.org/xiph/tremor.git Detailed Report: https://oss-fuzz.com/testcase?key=5087225147817984 Project: tremor Fuzzing Engine: libFuzzer Fuzz Target: decodefuzzer Job Type: libfuzzermsantremor Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x70a06c800114 Crash...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_search_openvpn

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5094191580577792 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireader Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60b0000003d2 Crash State:...

rdkit:smiles_string_to_mol_fuzzer: Container-overflow in yysmiles_parse

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5760260085383168 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzerasanrdkit Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address:...

ots:ots-fuzzer: Heap-buffer-overflow in LZ4_read16

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=5651243541463040 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzerasanots Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6180000007e8...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5766939894087680 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

unicorn:fuzz_emu_arm_thumb: Crash with empty stacktrace

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5697486768832512 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarmthumb Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fee8001e2...

htslib:hts_open_fuzzer: Heap-buffer-overflow in hts_md5_update

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5755386700496896 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

U.S. Dept Of Defense: Tomcat examples available for public, Disclosure Apache Tomcat version, Critical/High/Medium CVE

Summary: There are multiple issues found on ███: 1. ███████/examples/ - Apache Tomcat examples are available for public. Multiple issues - session and cookies manipulation, internals IP disclosure. 2. Error page contains information about Apache Tomcat version 3. Reported Tomcat version is...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in s_exD_process

Detailed Report: https://oss-fuzz.com/testcase?key=5769684738899968 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sexDprocess sreadbuf...

flac:fuzzer_decoder: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5769553180360704 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libtheora:fuzzer-decoder: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

Project: https://gitlab.xiph.org/xiph/theora.git Detailed Report: https://oss-fuzz.com/testcase?key=5761911192027136 Project: libtheora Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decoder Job Type: libfuzzermsanlibtheora Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libpcap:fuzz_both: Use-of-uninitialized-value in pcap_filter_with_aux_data

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed Report: https://oss-fuzz.com/testcase?key=5721166951219200 Project: libpcap Fuzzing Engine: libFuzzer Fuzz Target: fuzzboth Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

open62541:fuzz_mdns_xht: Use-of-uninitialized-value in txt2sd

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5657499161329664 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzmdnsxht Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

imagemagick:encoder_pgx_fuzzer: Heap-buffer-overflow in PushLongPixel

Detailed Report: https://oss-fuzz.com/testcase?key=5646203397341184 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpgxfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000003b35 Crash State: PushLongPixel...

imagemagick:ping_pict_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5087317020901376 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingpictfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...