cryptofuzz:cryptofuzz-boringssl: Heap-buffer-overflow in mp_toradix

Detailed Report: https://oss-fuzz.com/testcase?key=5692555180900352 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x608000039d80 Crash State: mptoradix...

OSV-2020-1727 Heap-buffer-overflow in mbedtls_nist_kw_wrap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25529 Crash type: Heap-buffer-overflow WRITE 16 Crash state: mbedtlsnistkwwrap mbedtlscipherauthencrypt cryptofuzz::module::mbedTLSdetail::encryptAEAD...

cryptofuzz:cryptofuzz-libressl-noasm: Heap-buffer-overflow in mbedtls_nist_kw_wrap

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5109879700979712 Project: cryptofuzz Fuzzing Engine: afl Fuzz Target: cryptofuzz-libressl-noasm Job Type: aflasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash...

OSV-2020-1661 Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25181 Crash type: Use-of-uninitialized-value Crash state: fuzzing::memory::memorytestmsan cryptofuzz::ExecutorBase::postp cryptofuzz::ExecutorBase::Run...

PT-2020-21933

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the cryptofuzz::ExecutorBase class, specifically in the...

cryptofuzz:cryptofuzz-openssl-noasm: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6207936890929152 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-val...

OSV-2020-1600 Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24786 Crash type: Use-of-uninitialized-value Crash state: fuzzing::memory::memorytestmsan cryptofuzz::ExecutorBasecryptofuzz::component::Ciphertext, cryptofuzz::operatio cryptofuzz::ExecutorBasecryptofuzz::component::Ciphertex...

PT-2020-21918

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of "Use-of-uninitialized-value" as reported by OSS-Fuzz. The crash state involves the fuzzing::memory::memory test msa...

OSV-2020-1595 Use-of-uninitialized-value in cryptofuzz::module::Nettle::OpSymmetricDecrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24785 Crash type: Use-of-uninitialized-value Crash state: cryptofuzz::module::Nettle::OpSymmetricDecrypt cryptofuzz::ExecutorBasecryptofuzz::Buffer, cryptofuzz::operation::SymmetricDec cryptofuzz::ExecutorBasecryptofuzz::Buffe...

cryptofuzz:cryptofuzz-boringssl-noasm: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5726830049624064 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type:...

cryptofuzz:cryptofuzz-openssl-noasm: Use-of-uninitialized-value in cryptofuzz::module::Nettle::OpSymmetricDecrypt

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5699479697883136 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-val...

cryptofuzz:cryptofuzz-nss: Heap-buffer-overflow in Hacl_Chacha20PolyNUMBER_256_aead_decrypt

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5091247321251840 Project: cryptofuzz Fuzzing Engine: afl Fuzz Target: cryptofuzz-nss Job Type: aflasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

PT-2020-22209

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the cipher generic initiv and cipher generic init internal functions, specifically in the...

OSV-2020-201 Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22453 Crash type: Use-of-uninitialized-value Crash state: fuzzing::memory::memorytestmsan cryptofuzz::ExecutorBase::postp cryptofuzz::ExecutorBase::Run...

PT-2020-22062

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the cryptofuzz::ExecutorBase class, specifically in the...

cryptofuzz:cryptofuzz-openssl: Heap-buffer-overflow in CryptoPP::xorbuf

Detailed Report: https://oss-fuzz.com/testcase?key=5647824103669760 Project: cryptofuzz Fuzzing Engine: afl Fuzz Target: cryptofuzz-openssl Job Type: aflasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x610000000cf0 Crash State: CryptoPP::xorbuf...

cryptofuzz:cryptofuzz-openssl-noasm: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

Detailed Report: https://oss-fuzz.com/testcase?key=4846477779402752 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

cryptofuzz:cryptofuzz-boringssl-noasm: Crash in void CryptoPP::PutWord<unsigned int>

Detailed Report: https://oss-fuzz.com/testcase?key=4706273743601664 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x71d000010000 Crash State: void CryptoPP::PutWord...

cryptofuzz:cryptofuzz-boringssl-noasm: Heap-buffer-overflow in unsigned int CryptoPP::AdvancedProcessBlocks128_4x1_SSE<void

Detailed Report: https://oss-fuzz.com/testcase?key=5156417941274624 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzerasani386cryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0xf61142f0 Crash State: unsign...

cryptofuzz:cryptofuzz-libressl-noasm: Use-of-uninitialized-value in AES_encrypt

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5704214830645248 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-libressl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type:...