tarantool:msgpack_decode_test: Heap-buffer-overflow in load_u64

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=4971370208100352 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: msgpackdecodetest Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash...

tarantool:msgpack_decode_test: Heap-buffer-overflow in mp_load_float

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=6346058259824640 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: msgpackdecodetest Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

tarantool:uri_parse_test: Heap-use-after-free in cdata_setptr

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=5666324051984384 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: uriparsetest Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address:...

tarantool:msgpack_decode_test: Heap-buffer-overflow in lua_error

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=5225524847509504 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: msgpackdecodetest Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

tarantool:msgpack_decode_test: Heap-buffer-overflow in mp_load_float

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=6102314986045440 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: msgpackdecodetest Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

tarantool:misc_sysprof_test: Segv on unknown address in stream_lfunc

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=5150541643317248 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: miscsysproftest Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Segv on unknown address Crash Address:...

tarantool:msgpack_decode_test: Heap-buffer-overflow in small_asan_alloc

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=4995721056288768 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: msgpackdecodetest Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

tarantool:luaL_loadbuffer_fuzzer: Heap-buffer-overflow in lj_record_idx

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=6142630408028160 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferfuzzer Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash...

tarantool:luaL_loadbuffer_fuzzer: Heap-buffer-overflow in mmcall

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=6505879185981440 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferfuzzer Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash...

EUVD-2016-0039

Malware in sbrugna...

EUVD-2025-18975

Malicious code in bioql PyPI...

Tarantool datetime function Heap Buffer Overflow DoS

The vulnerability of the tmtodatetime function in the datetime.c library of the Tarantool computing platform is related to an uncontrolled, exploitable condition. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

ROS-20250904-07

A vulnerability in a RAM computing platform consisting of a database and application server Tarantool is associated with an achievable assertion. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20250904-08

A vulnerability in a RAM computing platform consisting of a database and application server Tarantool is associated with an achievable assertion. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2025-6536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in Tarantool up to 3.3.1 and classified as problematic. Affected by this vulnerability is the function tmtodatetime in the librar...

Linux Distros Unpatched Vulnerability : CVE-2016-9037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can...

Linux Distros Unpatched Vulnerability : CVE-2016-9036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable incorrect return value vulnerability exists in the mpcheck function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause th...

tarantool:luaL_loadbuffer_fuzzer: Heap-buffer-overflow in mmcall

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=6399895872536576 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferfuzzer Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash...

CVE-2025-6536

A vulnerability has been found in Tarantool up to 3.3.1 and classified as problematic. Affected by this vulnerability is the function tmtodatetime in the library src/lib/core/datetime.c. The manipulation leads to reachable assertion. Attacking locally is a requirement. The exploit has been...

DEBIAN-CVE-2025-6536

A vulnerability has been found in Tarantool up to 3.3.1 and classified as problematic. Affected by this vulnerability is the function tmtodatetime in the library src/lib/core/datetime.c. The manipulation leads to reachable assertion. Attacking locally is a requirement. The exploit has been...