VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities

3. Return-Stack-Buffer-Underflow CVE-2022-29901, CVE-2022-28693, CVE-2022-26373 and Branch Type Confusion CVE-2022-23816, CVE-2022-23825 vulnerabilities VMware ESXi contains Return-Stack-Buffer-Underflow CVE-2022-29901, CVE-2022-28693, CVE-2022-26373 and Branch Type Confusion CVE-2022-23816,...

VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities

3. Return-Stack-Buffer-Underflow CVE-2022-29901, CVE-2022-28693, CVE-2022-26373 and Branch Type Confusion CVE-2022-23816, CVE-2022-23825 vulnerabilities VMware ESXi contains Return-Stack-Buffer-Underflow CVE-2022-29901, CVE-2022-28693, CVE-2022-26373 and Branch Type Confusion CVE-2022-23816,...

VMSA-2022-0020:VMware ESXi addresses Return-Stack-Buffer-UnderfLOW and Branch Type Confusion vulnerabilities

Advisory ID: VMSA-2022-0020.2 CVSSv3 Range: 5.6 Issue Date:2022-07-12 Updated On: 2022-10-25 CVEs: CVE-2022-29901, CVE-2022-28693, CVE-2022-23816, CVE-2022-23825, CVE-2022-26373 Synopsis: VMware ESXi addresses Return-Stack-Buffer-Underflow and Branch Type Confusion vulnerabilities RSS Feed Downlo...

qemu:qemu-fuzz-i386-target-generic-fuzz-rtl8139: Stack-buffer-underflow in flatview_write_continue

Detailed Report: https://oss-fuzz.com/testcase?key=6417628110913536 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-rtl8139 Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Stack-buffer-underflow READ Crash Address: 0x7ffe7530fda0 Crash State:...

OSV-2021-1776 Stack-buffer-underflow in InterpretPhoneme

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43037 Crash type: Stack-buffer-underflow READ 8 Crash state: InterpretPhoneme InterpretPhoneme2 CalcLengths...

PT-2021-27998

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-underflow read error. The crash state involves several functions: InterpretPhoneme, InterpretPhoneme2, and...

espeak-ng:ssml-fuzzer: Stack-buffer-underflow in InterpretPhoneme

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=5260445026484224 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-underflow READ 8 Crash Address...

OSV-2021-1689 Stack-buffer-underflow in read_xref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42294 Crash type: Stack-buffer-underflow WRITE 1 Crash state: readxref pdfireadxref pdfisetinputstream...

PT-2021-27943

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-underflow WRITE 1 crash type. The crash state involves functions such as read xref, pdfi read xref, and pdfi set inp...

WS-2021-0587

In ghostscript there is Stack-buffer-underflow in readxref...

ghostscript:gstoraster_fuzzer: Stack-buffer-underflow in read_xref

Detailed Report: https://oss-fuzz.com/testcase?key=6186925189365760 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow WRITE 1 Crash Address: 0x7f42c7439f1f Crash State: readxref...

OSV-2021-1354 Stack-buffer-underflow in InterpretPhoneme

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39042 Crash type: Stack-buffer-underflow READ 8 Crash state: InterpretPhoneme InterpretPhoneme2 CalcLengths...

PT-2021-27808

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-underflow read error. The crash state involves several functions: InterpretPhoneme, InterpretPhoneme2, and...

OSV-2018-441 Stack-buffer-underflow in ps_index

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9970 Crash type: Stack-buffer-underflow READ 8 Crash state: psindex psrun evalpostscriptfunc...

PT-2021-27606

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-underflow read crash. Technical details include a crash state involving ps index, ps run, and eval postscript func...

OSV-2020-1851 Stack-buffer-underflow in fmt::v6::basic_format_args<fmt::v6::basic_format_context<std::__1::back_insert_i

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21794 Crash type: Stack-buffer-underflow READ 16 Crash state: fmt::v6::basicformatargsfmt::v6::basicformatcontextstd::1::backinserti fmt::v6::basicformatargsfmt::v6::basicformatcontextstd::1::backinserti...

PT-2020-22006

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported due to a stack-buffer-underflow read issue. The crash details indicate an issue with fmt::v6::basic format args and fmt::v6::basi...

libfmt:fuzzer_named_arg: Stack-buffer-underflow in fmt::v6::basic_format_args<fmt::v6::basic_format_context<std::__1::back_insert_i

Detailed Report: https://oss-fuzz.com/testcase?key=5747676286287872 Project: libfmt Fuzzing Engine: libFuzzer Fuzz Target: fuzzernamedarg Job Type: libfuzzerasanlibfmt Platform Id: linux Crash Type: Stack-buffer-underflow READ 16 Crash Address: 0x7f200d9a6110 Crash State:...

jsc: Stack-buffer-underflow in JSC::Register::pointer

Detailed Report: https://oss-fuzz.com/testcase?key=5763160024023040 Project: jsc Fuzzer: jsfuzzer Job Type: asanjsc Platform Id: linux Crash Type: Stack-buffer-underflow READ 8 Crash Address: 0x7ffcb1a355c8 Crash State: JSC::Register::pointer JSC::CallFrame::callee...

Denial Of Service (DoS) Through Stack Buffer Underflow

libarchive.so is vulnerable to denial of service DoS. The vulnerability exists due to a possible stack buffer underflow issue when parsing the ar header...