Code injection

Vulnerability in the OSS Support Tools product of Oracle Support Tools component: Diagnostic Assistant. The supported version that is affected is Prior to 2.12.41. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise OSS Support Tools...

CVE-2021-2303

CVE-2021-2303 affects Oracle OSS Support Tools, component Diagnostic Assistant, with the vulnerable version prior to 2.12.41. The issue allows a high-privilege attacker, over HTTP from the network, to compromise OSS Support Tools and potentially access all data handled by the tools. ZDI also note...

OSV-2021-670 Heap-buffer-overflow in av1_free_cdef_buffers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33480 Crash type: Heap-buffer-overflow READ 8 Crash state: av1freecdefbuffers decoderdestroy aomcodecdestroy...

OSV-2021-668 Stack-use-after-return in pdf14_initialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33529 Crash type: Stack-use-after-return WRITE 8 Crash state: pdf14initialize pdf14procsinitialize pdf14RGBinitialize...

OSV-2021-667 Heap-buffer-overflow in _estrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33445 Crash type: Heap-buffer-overflow READ 12 Crash state: estrdup exifprocessusercomment exifprocessIFDTAGimpl...

OSV-2021-665 UNKNOWN READ in QOutlineMapper::convertPath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33438 Crash type: UNKNOWN READ Crash state: QOutlineMapper::convertPath QRasterPaintEngine::fill QPaintEngineEx::stroke...

OSV-2021-664 Heap-use-after-free in module_check_cast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33444 Crash type: Heap-use-after-free READ 4 Crash state: modulecheckcast serverconnectunref serverunref...

OSV-2021-660 UNKNOWN READ in op_BranchIfPrologue_s

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33397 Crash type: UNKNOWN READ Crash state: opBranchIfPrologues m3CallVL m3CallV...

OSV-2021-654 Heap-buffer-overflow in decode_mcu_fast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33340 Crash type: Heap-buffer-overflow READ 1 Crash state: decodemcufast decodemcu consumedata...

OSV-2021-652 Heap-use-after-free in ZSTD_freeDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33324 Crash type: Heap-use-after-free READ 4 Crash state: ZSTDfreeDDict blosc2freectx blosc2schunkfree...

OSV-2021-646 Heap-use-after-free in std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33315 Crash type: Heap-use-after-free READ 8 Crash state: std::1::treeiteratorstd::1::valuetypestd::1::basicstringchar, st draco::Metadata::AddSubMetadata draco::MetadataDecoder::DecodeMetadata...

OSV-2021-644 UNKNOWN READ in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33292 Crash type: UNKNOWN READ Crash state: bloscd dojob bloscrundecompressionwithcontext...

OSV-2021-642 Heap-buffer-overflow in op_Const64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33318 Crash type: Heap-buffer-overflow WRITE 8 Crash state: opConst64 EvaluateExpression InitElements...

OSV-2021-640 Heap-buffer-overflow in frame_get_metalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33251 Crash type: Heap-buffer-overflow READ 6 Crash state: framegetmetalayers frametoschunk blosc2schunkfrombuffer...

openSUSE: Security Advisory for wavpack (openSUSE-SU-2021:0154-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OSV-2021-635 Heap-use-after-free in std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33227 Crash type: Heap-use-after-free READ 8 Crash state: std::1::treeiteratorstd::1::valuetypestd::1::basicstringchar, st void draco::Metadata::AddEntrystd::1::vectorunsigned char, std::1::allocat...

OSV-2021-624 Heap-buffer-overflow in load_u32_be

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33039 Crash type: Heap-buffer-overflow READ 1 Crash state: loadu32be osslsm4setkey cipherhwsm4initkey...

OSV-2021-623 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33052 Crash type: Null-dereference READ Crash state: NULL...

OSV-2021-622 Heap-buffer-overflow in frame_get_vlmetalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33071 Crash type: Heap-buffer-overflow READ Crash state: framegetvlmetalayers frametoschunk blosc2schunkfrombuffer...

OSV-2021-620 Segv on unknown address in dwg_free_summaryinfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33059 Crash type: Segv on unknown address Crash state: dwgfreesummaryinfo dwgfree llvmfuzz.c...