OSV-2024-555 Heap-buffer-overflow in ArduinoJson::V704HB22::detail::MsgPackDeserializer<ArduinoJson::V704HB22::detail

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69497 Crash type: Heap-buffer-overflow WRITE 1 Crash state: ArduinoJson::V704HB22::detail::MsgPackDeserializerArduinoJson::V704HB22::detail ArduinoJson::V704HB22::DeserializationError::Code ArduinoJson::V704HB22::detail:...

PT-2024-40797

Name of the Vulnerable Software and Affected Versions ArduinoJson version V704HB22 Description A heap buffer overflow issue was identified, which can cause a crash. The issue is related to the MsgPackDeserializer in the ArduinoJson library. The crash occurs due to a heap-buffer-overflow write...

arduinojson:msgpack_fuzzer: Heap-buffer-overflow in ArduinoJson::V704HB22::detail::MsgPackDeserializer<ArduinoJson::V704HB22::detail

Project: https://github.com/bblanchon/ArduinoJson.git Detailed Report: https://oss-fuzz.com/testcase?key=5354792971993088 Project: arduinojson Fuzzing Engine: libFuzzer Fuzz Target: msgpackfuzzer Job Type: libfuzzerasani386arduinojson Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1...

PT-2020-21908

Name of the Vulnerable Software and Affected Versions ArduinoJson affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. Technical details about the crash include the encodeCodepoint function and the JsonDeserializer class. The cra...

arduinojson:json_fuzzer: Use-of-uninitialized-value in void ArduinoJsonNUMBER_71::Utf8::encodeCodepoint<ArduinoJsonNUMBER_71::StringCop

Project: https://github.com/bblanchon/ArduinoJson.git Detailed Report: https://oss-fuzz.com/testcase?key=5127643834613760 Project: arduinojson Fuzzing Engine: libFuzzer Fuzz Target: jsonfuzzer Job Type: libfuzzermsanarduinojson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

arduinojson: Use-of-uninitialized-value in ArduinoJson::Internals::CharPointerTraits::equals

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4631060662976512 Project: arduinojson Fuzzer: libFuzzerarduinojsonjsonfuzzer Fuzz target binary: jsonfuzzer Job Type: libfuzzermsanarduinojson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash Stat...