CVE-2022-36027: Improper Input Validation

TensorFlow is an open source platform for machine learning. When converting transposed convolutions using per-channel weight quantization the converter segfaults and crashes the Python process. We have patched the issue in GitHub commit aa0b852a4588cea4d36b74feb05d93055540b450. The fix will be...

PT-2022-23065

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1, 2.8.1, and 2.7.2 Description The issue occurs when QuantizedAvgPool is given min input or max input tensors of a nonzero rank, resulting in a segfault that can be used to trigger a...

CVE-2022-35982: Improper Input Validation

TensorFlow is an open source platform for machine learning. If SparseBincount is given inputs for indices, values, and denseshape that do not make a valid sparse tensor, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

CVE-2022-35986: Improper Input Validation

TensorFlow is an open source platform for machine learning. If RaggedBincount is given an empty input tensor splits, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit 7a4591fd4f065f4fa903593bc39b2f79530a74b8. The fix will b...

CVE-2022-35972: Improper Input Validation

TensorFlow is an open source platform for machine learning. If QuantizedBiasAdd is given mininput, maxinput, minbias, maxbias tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

CVE-2022-35970: Improper Input Validation

TensorFlow is an open source platform for machine learning. If QuantizedInstanceNorm is given xmin or xmax tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit 785d67a78a1d533759fcd2f5e8d6ef778de849e...

burntsushi-toml:fuzz_toml: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6029837914996736 Project: burntsushi-toml Fuzzing Engine: libFuzzer Fuzz Target: fuzztoml Job Type: libfuzzerasanburntsushi-toml Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

PT-2022-37273 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash occurs in the HashMgr class, specifically in the add...

hunspell:affdicfuzzer: Segv on unknown address in HashMgr::add_word

Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=6220606672076800 Project: hunspell Fuzzing Engine: libFuzzer Fuzz Target: affdicfuzzer Job Type: libfuzzerasanhunspell Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

RHEL 8 : Red Hat OpenShift Service Mesh 2.1.3 (RHSA-2022:5004)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5004 advisory. Red Hat OpenShift Service Mesh is a Red Hat distribution of the Istio service mesh project, tailored for installation into an on-premise...

fluent-bit:flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5848956248129536 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-filterstdoutfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer:...

DEBIAN-CVE-2022-32745

A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault...

radon:fuzz: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6255926146891776 Project: radon Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanradon Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

wasm3:fuzzer: Segv on unknown address in FreeCodePages

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6211074755526656 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanwasm3 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: FreeCodePage...

CVE-2022-36140

SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::DeclareFunction2::writeSWF::Writer, SWF::Context...

DEBIAN-CVE-2022-36140

SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::DeclareFunction2::writeSWF::Writer, SWF::Context...

UBUNTU-CVE-2022-38234

XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObjObject at /xpdf/Lexer.cc...

PT-2022-22573 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: The issue is related to a segmentation violation in SWFTools, specifically via the FoFiTrueType::computeTableChecksumunsigned char, int function at /xpdf/FoFiTrueType.cc. Recommendations: ...

mariadb: assertion failure in compare_order_elements

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sqlwindow.cc, impacting availability...

SUSE-SU-2022:2717-1 Security update for ncurses

This update for ncurses fixes the following issues: - CVE-2022-29458: Fixed segfaulting out-of-bounds read in convertstrings in tinfo/readentry.c bsc1198627...