2386 matches found
CVE-2022-41891 Segfault in `tf.raw_ops.TensorListConcat` in Tensorflow
TensorFlow is an open source platform for machine learning. If tf.rawops.TensorListConcat is given elementshape=, it results segmentation fault which can be used to trigger a denial of service attack. We have patched the issue in GitHub commit fc33f3dc4c14051a83eec6535b608abe1d355fde. The fix wil...
CVE-2022-41909: Improper Input Validation
TensorFlow is an open source platform for machine learning. An input encoded that is not a valid CompositeTensorVariant tensor will trigger a segfault in tf.rawops.CompositeTensorVariantToComponents. We have patched the issue in GitHub commits bf594d08d377dc6a3354d9fdb494b32d45f91971 and...
CVE-2022-41909
CVE-2022-41909 affects TensorFlow: an input encoded that is not a valid CompositeTensorVariant can cause a segfault in tf.raw_ops.CompositeTensorVariantToComponents. Patches are in commits bf594d08d... and 660ce5a89e..., with the fix slated for TensorFlow 2.11 and cherry-picked to 2.10.1, 2.9.3, ...
CVE-2022-41909
TensorFlow is an open source platform for machine learning. An input encoded that is not a valid CompositeTensorVariant tensor will trigger a segfault in tf.rawops.CompositeTensorVariantToComponents. We have patched the issue in GitHub commits bf594d08d377dc6a3354d9fdb494b32d45f91971 and...
libjpeg-turbo:libjpeg_turbo_fuzzer_dev: Segv on unknown address in decode_mcus
Detailed Report: https://oss-fuzz.com/testcase?key=6473955934601216 Project: libjpeg-turbo Fuzzing Engine: honggfuzz Fuzz Target: libjpegturbofuzzerdev Job Type: honggfuzzasanlibjpeg-turbo Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: decodemcus decompressdata...
PT-2025-54115
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to objtool. The find insn function can return NULL in case of failure. A missing check for this NULL return value can lead to a kernel Oops due ...
Wasmtime may have data leakage between instances in the pooling allocator
Impact There is a bug in Wasmtime's implementation of it's pooling instance allocator where when a linear memory is reused for another instance the initial heap snapshot of the prior instance can be visible, erroneously to the next instance. The pooling instance allocator in Wasmtime works by...
GHSA-WH6W-3828-G9QF Wasmtime may have data leakage between instances in the pooling allocator
Impact There is a bug in Wasmtime's implementation of it's pooling instance allocator where when a linear memory is reused for another instance the initial heap snapshot of the prior instance can be visible, erroneously to the next instance. The pooling instance allocator in Wasmtime works by...
SUSE SLED12 / SLES12 Security Update : gstreamer-0_10-plugins-good (SUSE-SU-2022:3906-1)
The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3906-1 advisory. - CVE-2022-1920: Fixed an integer overflow while parsing matroska files bsc1201688. - CVE-2022-1921: Fixed an...
PT-2022-5321 · Nginx · Nginx Njs
Name of the Vulnerable Software and Affected Versions: Nginx NJS versions 0.7.2 through 0.7.4 Description: The issue is related to a segmentation violation via the njs scope valid value function at njs scope.h. This could potentially allow a remote attacker to cause a denial of service. The vendo...
suricata:fuzz_mimedecparseline: Segv on unknown address in MimeDecDeInitParser
Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5539502479507456 Project: suricata Fuzzing Engine: afl Fuzz Target: fuzzmimedecparseline Job Type: aflasansuricata Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...
gpac:fuzz_parse: Segv on unknown address in gf_free
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6246192254418944 Project: gpac Fuzzing Engine: honggfuzz Fuzz Target: fuzzparse Job Type: honggfuzzasangpac Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gffree...
UBUNTU-CVE-2022-2963
A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug in function cmdoptsparse that can cause a crash or segmentation fault...
ruby: Buffer overrun in String-to-Float conversion
A buffer overrun vulnerability was found in Ruby. The issue occurs in a conversion algorithm from a String to a Float that causes process termination due to a segmentation fault, but under limited circumstances. This flaw may cause an illegal memory read...
CLSA-2022-1665428733 Fix CVE(s): CVE-2020-13435, CVE-2020-13425
SECURITY UPDATE: segfault in sqlite3ExprCodeTarget - debian/patches/CVE-2020-13435.patch: tries to prevent a recurrence of problems. - CVE-2020-13425...
libucl:ucl_add_string_fuzzer: Segv on unknown address in kh_get_ucl_hash_caseless_node
Detailed Report: https://oss-fuzz.com/testcase?key=5487912297037824 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: khgetuclhashcaselessnode uclhashsearch...
LIEF 安全漏洞
LIEF is a cross-platform library from the personal developer Romain Thomas. Used for parsing, modifying and abstracting Elf, Pe and MachO formats, a denial of service vulnerability exists in LIEF v0.12.1, which stems from a failure to properly handle incoming error messages in the initandparse...
libucl:ucl_add_string_fuzzer: Segv on unknown address in ucl_object_free_internal
Detailed Report: https://oss-fuzz.com/testcase?key=4627362902048768 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: uclobjectfreeinternal uclparserfree...
ngolo-fuzzing:fuzz_ngo_text_template: Segv on unknown address with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6365173812428800 Project: ngolo-fuzzing Fuzzing Engine: libFuzzer Fuzz Target: fuzzngotexttemplate Job Type: libfuzzerasanngolo-fuzzing Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASA...