8394 matches found
Thunderbird: Hang when processing certain OpenPGP messages
The Mozilla Foundation Security Advisory describes this flaw as: Certain malformed OpenPGP messages could trigger incorrect parsing of PKESK/SKESK packets due to a bug in the Ribose RNP library used by Thunderbird up to version 102.9.1, which would cause the Thunderbird user interface to hang. Th...
Thunderbird: Hang when processing certain OpenPGP messages
The Mozilla Foundation Security Advisory describes this flaw as: Certain malformed OpenPGP messages could trigger incorrect parsing of PKESK/SKESK packets due to a bug in the Ribose RNP library used by Thunderbird up to version 102.9.1, which would cause the Thunderbird user interface to hang. Th...
Thunderbird: Hang when processing certain OpenPGP messages
The Mozilla Foundation Security Advisory describes this flaw as: Certain malformed OpenPGP messages could trigger incorrect parsing of PKESK/SKESK packets due to a bug in the Ribose RNP library used by Thunderbird up to version 102.9.1, which would cause the Thunderbird user interface to hang. Th...
OSV-2023-323 Heap-buffer-overflow in OT::glyf_impl::SubsetGlyph::serialize
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58071 Crash type: Heap-buffer-overflow WRITE 2 Crash state: OT::glyfimpl::SubsetGlyph::serialize OT::glyf::subset bool trysubset...
OSV-2023-322 Use-after-poison in str_new_frozen_buffer
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58079 Crash type: Use-after-poison READ 8 Crash state: strnewfrozenbuffer fstrupdatecallback rbstupdate...
OSV-2023-321 Heap-use-after-free in ucl_hash_func
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58069 Crash type: Heap-use-after-free READ 8 Crash state: uclhashfunc khresizeuclhashnode khputuclhashnode...
binutils:fuzz_nm: Heap-buffer-overflow in print_symname
Detailed Report: https://oss-fuzz.com/testcase?key=5121669269422080 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzznm Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61f000000d48 Crash State: printsymname printsymbolinfobsd...
OSV-2023-319 Heap-buffer-overflow in ZSTD_decompressSequencesLong_bmi2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035 Crash type: Heap-buffer-overflow READ 8 Crash state: ZSTDdecompressSequencesLongbmi2 ZSTDdecompressSequencesLong ZSTDdecompressBlockinternal...
harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in OT::glyf_impl::SubsetGlyph::serialize
Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6521393809588224 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash...
libucl:ucl_add_string_fuzzer: Heap-use-after-free in ucl_hash_func
Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=6235945317040128 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...
wolfssl:cryptofuzz-normal-math: Heap-buffer-overflow in sp_read_unsigned_bin
Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4522678383149056 Project: wolfssl Fuzzing Engine: honggfuzz Fuzz Target: cryptofuzz-normal-math Job Type: honggfuzzasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash...
OSV-2023-316 Segv on unknown address in dwg_ref_get_object
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57981 Crash type: Segv on unknown address Crash state: dwgrefgetobject dwggeojsonfeature dwggeojsonobject...
notary:FuzzVerify: Crash in pthread_create
Detailed Report: https://oss-fuzz.com/testcase?key=5978256221536256 Project: notary Fuzzing Engine: libFuzzer Fuzz Target: FuzzVerify Job Type: libfuzzerasannotary Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x10c00004c000 Crash State: pthreadcreate cgotrypthreadcreate Sanitizer:...
CVE-2023-2004
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
OSV-2023-314 Heap-buffer-overflow in dwg_encode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57969 Crash type: Heap-buffer-overflow READ 8 Crash state: dwgencode llvmfuzz.c...
OSV-2023-311 Heap-double-free in cache_bclose
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57939 Crash type: Heap-double-free Crash state: cachebclose bfdclosealldone fuzzobjdump.h...
CVE-2023-29479
The Mozilla Foundation Security Advisory describes this flaw as: Certain malformed OpenPGP messages could trigger incorrect parsing of PKESK/SKESK packets due to a bug in the Ribose RNP library used by Thunderbird up to version 102.9.1, which would cause the Thunderbird user interface to hang. Th...
PT-2023-35776 · Git +1 · Systemd
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash involves the udev rule parse value function and is related to the...