Lucene search
+L

1111 matches found

OSS-Fuzz
OSS-Fuzz
•added 2017/11/07 11:09 p.m.•26 views

spidermonkey: Heap-buffer-overflow in js::wasm::Table::set

Detailed report: https://oss-fuzz.com/testcase?key=6489859028942848 Project: spidermonkey Fuzzer: jsfuzzer Job Type: asanspidermonkey Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6110001d0fc8 Crash State: js::wasm::Table::set js::WasmTableObject::setImpl...

6.7AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2017/10/26 9:15 a.m.•21 views

llvm/llvm-dwarfdump-fuzzer: Crash in llvm::object::WasmObjectFile::parseDataSection

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=4546851673997312 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: UNKNOWN READ Crash...

6.8AI score
SaveExploits0Affected Software1
OSV
OSV
•added 2017/10/16 1:29 a.m.•26 views

CVE-2017-15368

The wasmdis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service stack-based buffer over-read and application crash or possibly have unspecified other impact via a crafted WASM file that triggers an incorrect rhexbin2str call...

7.8CVSS8.2AI score
SaveExploits0References2
NVD
NVD
•added 2017/10/16 1:29 a.m.•32 views

CVE-2017-15368

The wasmdis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service stack-based buffer over-read and application crash or possibly have unspecified other impact via a crafted WASM file that triggers an incorrect rhexbin2str call...

7.8CVSS6.9AI score0.0132EPSS
SaveExploits0References2
Prion
Prion
•added 2017/10/16 1:29 a.m.•28 views

Stack overflow

The wasmdis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service stack-based buffer over-read and application crash or possibly have unspecified other impact via a crafted WASM file that triggers an incorrect rhexbin2str call...

6.8CVSS6.3AI score0.0132EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2017/10/16 1:00 a.m.•38 views

CVE-2017-15368

The wasmdis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service stack-based buffer over-read and application crash or possibly have unspecified other impact via a crafted WASM file that triggers an incorrect rhexbin2str call...

7AI score0.0132EPSS
SaveExploits0References2
CVE
CVE
•added 2017/10/16 1:00 a.m.•74 views

CVE-2017-15368

CVE-2017-15368 affects radare2 2.0.0: the wasm_dis function (libr/asm/arch/wasm/wasm.c) is exploitable via a crafted WASM file and can cause a stack-based buffer over-read, leading to a denial of service (application crash) and potentially other impact due to an incorrect r_hex_bin2str call. Reme...

7.8CVSS6.8AI score0.0132EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2017/10/16 1:00 a.m.•51 views

CVE-2017-15368

The wasmdis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service stack-based buffer over-read and application crash or possibly have unspecified other impact via a crafted WASM file that triggers an incorrect rhexbin2str call...

7.8CVSS7AI score0.0132EPSS
SaveExploits0
CNVD
CNVD
•added 2017/10/16 12:00 a.m.•12 views

radare2 denial of service vulnerability (CNVD-2017-32251)

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'wasmdis' function in the libr/asm/arch/wasm/wasm.c file in radare2 version 2.0.0. A remote attacker can exploit this vulnerability to cause a denial of service stack-based buffer...

7.8CVSS6.2AI score0.0132EPSS
SaveExploits0References1
NVD
NVD
•added 2017/04/03 5:59 a.m.•32 views

CVE-2016-10226

JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service bitfield out-of-bounds read and application crash via crafted JavaScript code that is mishandled in the operatorString function, related to...

7.5CVSS7.4AI score0.01724EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2017/04/03 5:44 a.m.•72 views

CVE-2016-10226

Removed by vendor...

7.5CVSS7.6AI score0.01724EPSS
SaveExploits0
Rows per page
Query Builder