OSV-2021-273 Heap-use-after-free in sctp_sorecvmsg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30215 Crash type: Heap-use-after-free WRITE 4 Crash state: sctpsorecvmsg usrsctprecvv handleupcall...

OSV-2021-269 Stack-use-after-return in sta_prop_equal_fn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30192 Crash type: Stack-use-after-return READ 6 Crash state: stapropequalfn wmemmapinsert dissectieeeNUMBERcommon...

OSV-2021-271 Heap-buffer-overflow in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30193 Crash type: Heap-buffer-overflow READ 1 Crash state: bloscrundecompressionwithcontext blosc2decompress fuzzdecompresschunk.c...

sudoers:fuzz_sudoers: Crash in sudo_printf_int

Detailed Report: https://oss-fuzz.com/testcase?key=6748426685513728 Project: sudoers Fuzzing Engine: libFuzzer Fuzz Target: fuzzsudoers Job Type: libfuzzerasansudoers Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61c000010000 Crash State: sudoprintfint sudoerserrorf sudoerserror...

c-blosc2:decompress_frame_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4816997072371712 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerubsanc-blosc2 Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer:...

yara:macho_fuzzer: Heap-buffer-overflow in macho_handle_unixthread

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=4954503294091264 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: machofuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x604000003f40...

c-blosc2:decompress_frame_fuzzer: Use-after-poison in frame_get_usermeta

Detailed Report: https://oss-fuzz.com/testcase?key=4806947029254144 Project: c-blosc2 Fuzzing Engine: honggfuzz Fuzz Target: decompressframefuzzer Job Type: honggfuzzasanc-blosc2 Platform Id: linux Crash Type: Use-after-poison READ Crash Address: 0x7fffe1958059 Crash State: framegetusermeta...

c-blosc2:decompress_frame_fuzzer: Crash in blosc2_schunk_free

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=6366676536918016 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

wolfmqtt:wolfmqtt-fuzzer: Heap-buffer-overflow in MqttEncode_Num

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=4549989994987520 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasani386wolfmqtt Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

libsass:data_context_fuzzer: Nested bug in the same thread, aborting. with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6666177491369984 Project: libsass Fuzzing Engine: libFuzzer Fuzz Target: datacontextfuzzer Job Type: libfuzzermsanlibsass Platform Id: linux Crash Type: Nested bug in the same thread, aborting. Crash Address: Crash State: NULL Sanitizer: memory...

OSV-2021-261 Stack-buffer-overflow in flb_sds_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30093 Crash type: Stack-buffer-overflow READ Crash state: flbsdscat ratranslatekeymap flbratranslate...

Security Advisory 2021-02-02-2 - wolfSSL heap buffer overflow in RsaPad_PSS (CVE-2020-36177)

DESCRIPTION RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size. The issue is marked as critical with CVSS score of 9.8. REQUIREMENTS It's still work in progress, there is not that much information about it...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in inchi_ios_print_nodisplay

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=5797235344408576 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: inchiinputfuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in ParseSegmentMobileH

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=5099388252848128 Project: inchi Fuzzing Engine: afl Fuzz Target: inchiinputfuzzer Job Type: aflasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x6030000001a2...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in inchi_ios_print

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=4670894968537088 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: inchiinputfuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

wolfmqtt:wolfmqtt-fuzzer: Crash in MqttProps_Free

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=4671798656499712 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasanwolfmqtt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00209fff8001...

wolfmqtt:wolfmqtt-fuzzer: Crash in MqttDecode_Num

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=4540422754009088 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasanwolfmqtt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x621000013a16...

ffmpeg:ffmpeg_AV_CODEC_ID_PBM_fuzzer: Heap-buffer-overflow in ff_combine_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4997145650397184 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDPBMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6110000002bb...

OSV-2021-260 Heap-buffer-overflow in flb_parser_json_do

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30090 Crash type: Heap-buffer-overflow READ Crash state: flbparserjsondo flbparserdo parserfuzzer.c...

OSV-2021-258 Heap-buffer-overflow in unstripe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30087 Crash type: Heap-buffer-overflow READ 1 Crash state: unstripe arithuncompressto arithdecode...