PT-2023-36479

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61941 Crash type: Use-after-poison READ 8 Crash state: parser yylex ruby yyparse yycompile0...

ruby:fuzz_ruby_gems: Use-after-poison in parser_yylex

Detailed Report: https://oss-fuzz.com/testcase?key=5596330708566016 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubygems Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7fffdcc1fcd0 Crash State: parseryylex rubyyyparse yycompile0...

ruby:fuzz_ruby_gems: Use-after-poison in rb_gc_writebarrier

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4788744216248320 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubygems Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7fffdd1021d0 Crash...

ruby:fuzz_ruby_gems: Use-after-poison in str_duplicate_setup

Detailed Report: https://oss-fuzz.com/testcase?key=5487581411016704 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubygems Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7fffdd141f60 Crash State: strduplicatesetup internstr rbinterns...

It's possible to block some user from voting for (or against) some proposal

Lines of code Vulnerability details Note: Although some code involved is inside a contract which is out of scope, I argue that this finding is in scope, since the vulnerability exists in the in-scope contract. In the Arcade protocol, there are several voting vaults implemented so that users can u...

ruby:fuzz_ruby_gems: Use-after-poison in rb_gc_writebarrier

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6645775814492160 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubygems Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7fffdd131f48 Crash...

ruby:fuzz_ruby_gems: Use-after-poison in rb_gc_writebarrier

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5857188957257728 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubygems Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7fffdd131f48 Crash...

OSV-2023-443 Use-after-poison in file_is_simh

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59438 Crash type: Use-after-poison READ 4 Crash state: fileissimh filebuffer magicbuffer...

PT-2023-35852 · Git +1 · File

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided input. Description: The issue is related to a crash type identified as "Use-after-poison READ 4". The crash state includes variables such as file is simh, file buffer, and magic...

file:magic_fuzzer: Use-after-poison in file_is_simh

Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=5051270344605696 Project: file Fuzzing Engine: afl Fuzz Target: magicfuzzer Job Type: aflasanfile Platform Id: linux Crash Type: Use-after-poison READ 4 Crash Address: 0x7a0eb21e8007 Crash State: fileissi...

ruby:fuzz_ruby_gems: Use-after-poison in rb_gc_writebarrier

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4854465984069632 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubygems Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7fffdb2894d8 Crash...

tcmalloc:profile_builder_fuzz: Use-after-poison in absl::BytesToHexString

Project: https://github.com/google/tcmalloc.git Detailed Report: https://oss-fuzz.com/testcase?key=5125212023422976 Project: tcmalloc Fuzzing Engine: afl Fuzz Target: profilebuilderfuzz Job Type: aflasantcmalloc Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x730e8fcfd220...

skia-ftz:sksl2pipeline: Use-after-poison in SkSL::IsAssignableVisitor::visitExpression

Detailed Report: https://oss-fuzz.com/testcase?key=5090480953360384 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: sksl2pipeline Job Type: libfuzzerasanskia-ftz Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x631000000b88 Crash State:...

skia-ftz:sksl2pipeline: Use-after-poison in SkSL::PipelineStage::PipelineStageCodeGenerator::writeVariableReference

Detailed Report: https://oss-fuzz.com/testcase?key=4664590771552256 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: sksl2pipeline Job Type: libfuzzerasanskia-ftz Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x631000001088 Crash State:...

libgit2:commit_graph_fuzzer: Use-after-poison in git_oid_raw_cmp

Detailed Report: https://oss-fuzz.com/testcase?key=5458408397733888 Project: libgit2 Fuzzing Engine: honggfuzz Fuzz Target: commitgraphfuzzer Job Type: honggfuzzasanlibgit2 Platform Id: linux Crash Type: Use-after-poison READ Crash Address: 0x7fffe35e5609 Crash State: gitoidrawcmp...

OSV-2023-322 Use-after-poison in str_new_frozen_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58079 Crash type: Use-after-poison READ 8 Crash state: strnewfrozenbuffer fstrupdatecallback rbstupdate...

PT-2023-35781 · Git +1 · Ruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Use-after-poison READ 8. The crash state involves several function calls, including str new frozen...

ruby:fuzz_ruby_gems: Use-after-poison in str_new_frozen_buffer

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6492306898550784 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubygems Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7ffff6650010 Crash...

OSV-2023-292 Use-after-poison in rb_gc_writebarrier

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57782 Crash type: Use-after-poison READ 8 Crash state: rbgcwritebarrier rbsetclasspathstring rbdefineclassidunder...

PT-2023-36466

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57782 Crash type: Use-after-poison READ 8 Crash state: rb gc writebarrier rb set class path string rb define class id under...