39 matches found
sleuthkit:sleuthkit_fls_ext_fuzzer: Heap-buffer-overflow in ext2fs_inode_walk
Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5200092827746304 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsextfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
OSV-2020-1386 Heap-buffer-overflow in parse_relocation_info
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24400 Crash type: Heap-buffer-overflow READ 4 Crash state: parserelocationinfo getrelocs64 relocs...
OSV-2020-1138 Heap-buffer-overflow in void apply_sao_internal<unsigned short>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14184 Crash type: Heap-buffer-overflow READ 1 Crash state: void applysaointernal void applysao threadtasksao::work...
OSV-2020-698 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18515 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int OT::ArrayOf, OT::IntType ::...
CVE-2020-3327: Improper Input Validation
A vulnerability in the ARJ archive parsing module in Clam AntiVirus ClamAV Software versions 0.102.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a heap buffer overflow read. An attacker could exploit thi...
dlplibs:wdbfuzzer: Stack-buffer-overflow in WPSEmbeddedObject::operator=
Detailed Report: https://oss-fuzz.com/testcase?key=5720192547291136 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: wdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7ffde3842118 Crash State: WPSEmbeddedObject::operator=...
pcre2:pcre2_fuzzer: Heap-buffer-overflow in set_start_bits
Project: svn://vcs.exim.org/pcre2/code/trunk Detailed Report: https://oss-fuzz.com/testcase?key=5170113773043712 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzerasani386pcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf2b04f6a...
PHP Multiple Vulnerabilities (Dec 2019) - Linux
PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...
binutils:fuzz_disassemble: Global-buffer-overflow in exg_sex_discrim
Detailed Report: https://oss-fuzz.com/testcase?key=5752218594050048 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000001977e78 Crash State: exgsexdiscrim decodeoperation...
imagemagick/ping_ept2_fuzzer: Stack-buffer-overflow in GetNextUTFCode
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5695814195740672 Project: imagemagick Fuzzer: libFuzzerimagemagickpingept2fuzzer Fuzz target binary: pingept2fuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...
libarchive/libarchive_fuzzer: Heap-buffer-overflow in run_arm_filter
Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5666609181491200 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflo...
PT-2019-4483
Name of the Vulnerable Software and Affected Versions Linux kernel version 5.0.21 Description The issue is related to a buffer overflow read in the Linux kernel, specifically in the functions f2fs build segment manager and init min max mtime in fs/f2fs/segment.c. This can be exploited by mounting...
SUSE SLED15 / SLES15 Security Update : perl (SUSE-SU-2018:4187-1)
This update for perl fixes the following issues : Secuirty issues fixed : CVE-2018-18311: Fixed integer overflow with oversize environment bsc1114674. CVE-2018-18312: Fixed heap-buffer-overflow write / regnode overrun bsc1114675. CVE-2018-18313: Fixed heap-buffer-overflow read if regex contains \...
PT-2018-2718
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.40 PHP versions 7.0.x through 7.1.25 PHP versions 7.2.x through 7.2.13 PHP versions 7.3.x through 7.3.0 Description An issue in PHP allows for invalid memory access due to invalid input to the xmlrpc decode function,...
Debian DSA-4347-1 : perl - security update
Multiple vulnerabilities were discovered in the implementation of the Perl programming language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2018-18311 Jayakrishna Menon and Christophe Hauser discovered an integer overflow vulnerability in Perlmysete...
GPAC MP4Box Heap Overflow Vulnerability
GPAC is a set of open source multimedia framework . MP4Box is one of the multimedia wrapper . A heap overflow vulnerability exists in the 'urnRead' function in the isomedia/boxcodebase.c file of MP4Box in GPAC version 0.7.1. An attacker can exploit this vulnerability to cause a heap buffer...
CVE-2017-5412: Improper Restriction of Operations within the Bounds of a Memory Buffer
A buffer overflow read during SVG filter color value operations, resulting in data exposure. This vulnerability affects Firefox 52 and Thunderbird 52...
imagemagick/encoder_heic_fuzzer: Heap-buffer-overflow in ff_hevc_put_hevc_qpel_pixels_8_sse
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5358449251581952 Project: imagemagick Fuzzer: aflimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...