wolfmqtt:wolfmqtt-fuzzer: Heap-buffer-overflow in MqttDecode_Props

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=4632913572921344 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasani386wolfmqtt Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

PT-2021-27916

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description The issue is related to a heap buffer overflow read. Technical details about the crash include the Curl sasl decode mech and Curl sasl parse url auth option functions, as well as the smtp parse...

curl:curl_fuzzer: Heap-buffer-overflow in Curl_sasl_decode_mech

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6358065000087552 Project: curl Fuzzing Engine: afl Fuzz Target: curlfuzzer Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address: 0x60e00002bbff Crash State:...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_utf8_decode

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=6355911919140864 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

stb:stbi_read_fuzzer: Heap-buffer-overflow in stbi__jpeg_huff_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5566868505624576 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x629000129661 Crash State: stbijpeghuffdecode stbijpegdecodeblockprogac...

PT-2021-27890

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow crash. Technical details include a crash type of Heap-buffer-overflow WRITE 4, and the crash state involves...

jasper: Heap-based buffer over-read in jp2_decode() in jp2_dec.c

jp2decode in jp2/jp2dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components...

python-pillow: Negative-offset memcpy in TIFF image reader

A flaw was found in python-pillow. In TiffDecode.c, there is a negative-offset memcpy with an invalid size which could lead to a system crash...

PT-2021-27887

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the pn buffer append, pni data intern node, and pni...

PT-2021-27886

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: consume list, pn amqp decode DqEoQBIoIe, and pn message...

qpid-proton:fuzz-message-decode: Heap-buffer-overflow in consume_list

Project: https://github.com/apache/qpid-proton.git Detailed Report: https://oss-fuzz.com/testcase?key=6101905114267648 Project: qpid-proton Fuzzing Engine: libFuzzer Fuzz Target: fuzz-message-decode Job Type: libfuzzerasanqpid-proton Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

GHSA-P49H-HJVM-JG3H PCX P mode buffer overflow in Pillow

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

PT-2021-27883

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which occurs in the Canvas5Structure::NIBDecoder::decode function, specifically when calling...

The vulnerability of the decode_mcu() function in the libjpeg-turbo library allows a attacker to compromise the accessibility of protected information.

The vulnerability of the decodemcu function in the libjpeg-turbo library is related to resource management errors. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information by excessive consumption of processor resources...

The vulnerabilities of the decode_mcu() and decode_mcu_fast() functions in the libjpeg-turbo library allow a hacker to cause a service failure.

The vulnerability of the decodemcu and decodemcufast functions in the libjpeg-turbo library arises from the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure by using a specially crafted file...

The vulnerability of the TiffDecode.c component in the Pillow image processing library, related to out-of-buffer writing, allows a hacker to cause a service failure.

The vulnerability of the TiffDecode.c component in the Pillow image processing library is related to the lack of memory checks during reading operations. Exploiting this vulnerability could allow an attacker to cause a service failure...

nike.com Cross Site Scripting vulnerability OBB-2201528

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| nike.com ---|--- Open Bug Bounty...

PT-2021-27860

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a global buffer overflow read. The crash involves the functions fr base16 decode nstd, fr value box from str, and...

The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access.

...

matio:matio_fuzzer: Heap-buffer-overflow in H5O__dtype_decode_helper

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5489525699248128 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow REA...