rdkit:smiles_string_to_mol_fuzzer: Heap-use-after-free in RDKit::Chirality::cleanupStereoGroups

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5333877915254784 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzerasani386rdkit Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

rdkit:smiles_string_to_mol_fuzzer: Use-of-uninitialized-value in bool SmilesParseOps::parser::parse_polymer_sgroup<std::__1::__wrap_iter<char con

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4703327693176832 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

rdkit:mol_data_stream_to_mol_fuzzer: Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4876358784778240 Project: rdkit Fuzzing Engine: afl Fuzz Target: moldatastreamtomolfuzzer Job Type: aflasanrdkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x611000284c40...

rdkit:smiles_string_to_mol_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5520160625131520 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x007e0000007d Crash State: NULL Sanitizer: undefined UBSAN...

rdkit:mol_data_stream_to_mol_fuzzer: Heap-buffer-overflow in bool SmilesParseOps::parser::parse_polymer_sgroup<std::__1::__wrap_iter<char con

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5752811554471936 Project: rdkit Fuzzing Engine: afl Fuzz Target: moldatastreamtomolfuzzer Job Type: aflasanrdkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x611000007428...

rdkit:smiles_string_to_mol_fuzzer: Use-of-uninitialized-value in RDKit::ROMol::getBondWithIdx

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4707349634351104 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

rdkit:smiles_string_to_mol_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6739763583909888 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x002900000028 Crash State: NULL Sanitizer: memory MSAN...

rdkit:smiles_string_to_mol_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4951339927470080 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: memory MSAN Crash...

clarkstownsmiles.com Cross Site Scripting vulnerability OBB-2123157

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

openbabel:fuzz_obconversion_smiles: Heap-buffer-overflow in OpenBabel::OBSmilesParser::ParseSmiles

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=6215343736487936 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzobconversionsmiles Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Cras...

Bumble: Leave inaccessible messaging system with a message (https://us1.badoo.com)

Hello, to test the messaging system I found a vulnerability that allows Inaccessible leave mensajaria system to another user only required to send a message. The vulnerability is in the system as the mobile version smiles and app do not have that system is only vulnerable version desktop VULNERAB...

Smiles - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Smiles published at the 'play' market has multiple vulnerabilities...

QiP memory corruption

Memory corruption on large number of smiles in message...

Icq 2001&amp;2002 vulnerability

Icq 2001&2002 have feature, that allows to insert graphical smiles. I found, that if you send message filled with lots of smilesicq msg can be about 7000 bytes long, then target icq hangs for 10-20 seconds, consuming all CPU time, or simply crashs. It seems for me that such type of message crashs...