CVE-2021-23960

Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exploitable crash. This vulnerability affects Firefox 85, Thunderbird 78.7, and Firefox ESR 78.7...

UBUNTU-CVE-2021-23962

Incorrect use of the '' method could have led to a user-after-poison and a potentially exploitable crash. This vulnerability affects Firefox 85...

Mozilla Firefox ESR < 78.7

The version of Firefox ESR installed on the remote Windows host is prior to 78.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-04 advisory. - Mozilla developers Alexis Beingessner, Christian Holler, Andrew McCreight, Tyson Smith, Jon Coppeard, Andr Bargull,...

skia:sksl2pipeline: Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5698558672109568 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2pipeline Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x6310000009b8...

OSV-2017-116 Use-after-poison in rawspeed::OrfDecoder::decodeCompressed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3012 Crash type: Use-after-poison WRITE 2 Crash state: rawspeed::OrfDecoder::decodeCompressed rawspeed::OrfDecoder::decodeRawInternal rawspeed::RawDecoder::decodeRaw...

OSV-2017-97 Use-after-poison in rawspeed::unroll_loop_t<void rawspeed::LJpegDecompressor::decodeN<4>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4451 Crash type: Use-after-poison WRITE 2 Crash state: rawspeed::unrollloopt void rawspeed::LJpegDecompressor::decodeN rawspeed::AbstractLJpegDecompressor::decode...

PT-2021-27455

Name of the Vulnerable Software and Affected Versions: rawspeed affected versions not specified Description: The issue is related to a crash type known as Use-after-poison WRITE 2. It occurs in the rawspeed::LJpegDecompressor::decodeN function, which is part of the...

PT-2021-27397

Name of the Vulnerable Software and Affected Versions: rawspeed affected versions not specified Description: The issue is related to a crash type known as Use-after-poison WRITE 2. It occurs in the rawspeed::OrfDecoder::decodeCompressed function, which is called by...

skia:skruntimeeffect: Use-after-poison in SkSL::Type::isScalar

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6485633413545984 Project: skia Fuzzing Engine: honggfuzz Fuzz Target: skruntimeeffect Job Type: honggfuzzasanskia Platform Id: linux Crash Type: Use-after-poison READ 4 Crash Address: 0x631000014bb0...

skia:skruntimeeffect: Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5107427169140736 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skruntimeeffect Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x631000005278...

rocksdb:db_fuzzer: Use-after-poison in db_fuzzer.cc

Detailed Report: https://oss-fuzz.com/testcase?key=5720662568206336 Project: rocksdb Fuzzing Engine: honggfuzz Fuzz Target: dbfuzzer Job Type: honggfuzzasanrocksdb Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x7fffe152e000 Crash State: dbfuzzer.cc HonggfuzzPersistentLoop...

skia:skruntimeeffect: Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Detailed Report: https://oss-fuzz.com/testcase?key=5137902589837312 Project: skia Fuzzing Engine: afl Fuzz Target: skruntimeeffect Job Type: aflasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x6310000009d8 Crash State: std::1::uniqueptrSkSL::Expression,...

skia:skruntimeeffect: Use-after-poison in SkTArray<std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::E

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5744111596470272 Project: skia Fuzzing Engine: honggfuzz Fuzz Target: skruntimeeffect Job Type: honggfuzzasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x631000000bb8...

skia:skruntimeeffect: Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5114195066617856 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skruntimeeffect Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x631000000e78...

mongoose:fuzz: Use-after-poison in mg_url_decode

Detailed Report: https://oss-fuzz.com/testcase?key=6226516639875072 Project: mongoose Fuzzing Engine: honggfuzz Fuzz Target: fuzz Job Type: honggfuzzasanmongoose Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x7fffe1958008 Crash State: mgurldecode mghttpgetvar fuzz.c...

librawspeed:TiffDecoderFuzzer-DngDecoder: Use-after-poison in rawspeed::DngOpcodes::LookupOpcode::apply

Project: https://github.com/darktable-org/rawspeed.git Detailed Report: https://oss-fuzz.com/testcase?key=5118943375261696 Project: librawspeed Fuzzing Engine: afl Fuzz Target: TiffDecoderFuzzer-DngDecoder Job Type: aflasanlibrawspeed Platform Id: linux Crash Type: Use-after-poison READ 2 Crash...

git:fuzz-pack-headers: Use-after-poison in unpack_object_header_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=6047165599973376 Project: git Fuzzing Engine: honggfuzz Fuzz Target: fuzz-pack-headers Job Type: honggfuzzasangit Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x7fffe173e000 Crash State: unpackobjectheaderbuffer...

llvm:llvm-isel-fuzzer--x86_64-O2: Use-after-poison in llvm::SelectionDAG::getNode

Detailed Report: https://oss-fuzz.com/testcase?key=4861603086467072 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-isel-fuzzer--x8664-O2 Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Use-after-poison READ 2 Crash Address: 0x62100004b1aa Crash State:...

skia:skruntimeeffect: Use-after-poison in SkSL::Type::columns

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5082530600189952 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skruntimeeffect Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Use-after-poison READ 4 Crash Address: 0x631000014be0...

skia:sksl2metal: Use-after-poison in SkTArray<std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::E

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5580190906056704 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2metal Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x631000000b38 Cras...