wolfmqtt:wolfmqtt-fuzzer: Segv on unknown address in MqttProps_Free

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=6749681204461568 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasanwolfmqtt Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

DEBIAN-CVE-2020-21468

A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service DOS. NOTE: the vendor cannot reproduce this issue in a released version, such as 5.0.7...

graphicsmagick:coder_J2C_fuzzer: Segv on unknown address in jpc_pchglist_destroy

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6713657107546112 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJ2Cfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Segv on unknown address Crash...

mruby:mruby_fuzzer: Segv on unknown address in mrb_exc_get_id

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4878626047262720 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

tpm2-tss:Tss2_Sys_ContextLoad_Prepare: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5276795956494336 Project: tpm2-tss Fuzzing Engine: libFuzzer Fuzz Target: Tss2SysContextLoadPrepare Job Type: libfuzzerasantpm2-tss Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN...

freetype2:cidtype1: Segv on unknown address in ft_free

Detailed Report: https://oss-fuzz.com/testcase?key=6520240670900224 Project: freetype2 Fuzzing Engine: honggfuzz Fuzz Target: cidtype1 Job Type: honggfuzzasanfreetype2 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: ftfree ftmemfree cffcmapunicodedone Sanitizer:...

arrow:arrow-ipc-file-fuzz: Segv on unknown address in arrow::DefaultBackend

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6674891504484352 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-file-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State...

unicorn:fuzz_emu_arm_armbe: Segv on unknown address in helper_uc_tracecode

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5378083759194112 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarmarmbe Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: Segv on unknown address Crash Address:...

Security update for go1.16 (moderate)

openSUSE Security Update: Security update for go1.16 Announcement ID: openSUSE-SU-2021:1199-1 Rating: moderate References: 1182345 1189162 Cross-References: CVE-2021-36221 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has one errata is now available.Description...

Compiler optimisation leads to SEGFAULT

Affected versions of the pnet crate were optimized out by compiler, which caused dereference of uninitialized file descriptor which caused segfault...

GHSA-R6FF-2Q3C-V3PV Compiler optimisation leads to SEGFAULT

Affected versions of the pnet crate were optimized out by compiler, which caused dereference of uninitialized file descriptor which caused segfault...

Segmentation fault in time

Impact Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library. The...

GHSA-WCG3-CVX6-7396 Segmentation fault in time

Impact Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library. The...

Null pointer deference in av-data

An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault...

GHSA-352P-RHVQ-7G78 Null pointer deference in av-data

An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault...

GHSA-F8H4-7RGH-Q2GM Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord`

Impact The implementation for tf.rawops.ExperimentalDatasetToTFRecord and tf.rawops.DatasetToTFRecord can trigger heap buffer overflow and segmentation fault: python import tensorflow as tf dataset = tf.data.Dataset.range3 dataset = tf.data.experimental.tovariantdataset...

GHSA-3HXH-8CP2-G4HG Use after free and segfault in shape inference functions

Impact When running shape functions, some functions such as MutableHashTableShape produce extra output information in the form of a ShapeAndType struct. The shapes embedded in this struct are owned by an inference context that is cleaned up almost immediately; if the upstream code attempts to...

Segfault on strings tensors with mistmatched dimensions, due to Go code

Impact Under certain conditions, Go code can trigger a segfault in string deallocation. For string tensors, C.TFTStringDealloc is called during garbage collection within a finalizer function. However, tensor structure isn't checked until encoding to avoid a performance penalty. The current method...

wasm3:fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6097212950577152 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanwasm3 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: memory MSAN Crash Revision:...

SUSE-SU-2021:2788-1 Security update for go1.16

This update for go1.16 fixes the following issues: Update to go1.16.7: - go47473 net/http: panic due to racy read of persistConn after handler panic CVE-2021-36221 bsc1189162 - go47348 cmd/go: 'go list -f '.Stale'' stack overflow with cyclic imports - go47332 time: Timer reset broken under heavy...