PT-2021-27755

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a global buffer overflow read. The crash involves the functions fr is base16 nstd, fr base16 decode nstd, and f...

freeradius:fuzzer_tacacs: Global-buffer-overflow in fr_is_base16_nstd

Detailed Report: https://oss-fuzz.com/testcase?key=5166028758319104 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzertacacs Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x7f26334095ff Crash State: frisbase16nstd...

PT-2021-27741

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the H5O linfo decode function, which is called by H5O msg read oh and H5O msg read. Recommendations: At the moment,...

wolfmqtt:wolfmqtt-fuzzer: Crash in MqttProps_Free

Detailed Report: https://oss-fuzz.com/testcase?key=6438505648095232 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasanwolfmqtt Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x13fd00000008 Crash State: MqttPropsFree MqttClientDecodePacket...

PT-2021-4487

Name of the Vulnerable Software and Affected Versions libjpeg-turbo affected versions not specified Description The issue is caused by a buffer overflow in the decode mcu and decode mcu fast functions of the libjpeg-turbo library, which is used for image processing. This can be exploited by a...

PT-2021-4488

Name of the Vulnerable Software and Affected Versions libjpeg-turbo affected versions not specified Description The issue is related to errors in resource management in the decode mcu function of the libjpeg-turbo image processing library. Exploitation of this issue may allow a remote attacker to...

CVE-2020-18773

An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service DOS via a crafted tif file...

Unexpected panic in multihash

In versions prior 0.11.3 it's possible to make fromslice panic by feeding it certain malformed input. It's never documented that fromslice and frombytes which wraps it can panic, and its' return type Result suggests otherwise. In practice, fromslice/frombytes is frequently used in networking code...

GHSA-8C6G-4XC5-W96C Uninitialized memory exposure in claxon

Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could b...

Uninitialized memory exposure in claxon

Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could b...

PT-2021-30955

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37536 Crash type: Use-of-uninitialized-value Crash state: H5F addr decode len H5VL native token to addr H5VL native object open...

Exiv2 Invalid Memory Access Vulnerability

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. An invalid memory access vulnerability exists in the decode function in iptc.cpp in Exiv2 version 0.27.99.0. An attacker could exploit the vulnerability to cause a denial of service via a specially crafted t...

DEBIAN-CVE-2020-18773

An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service DOS via a crafted tif file...

CVE-2020-18773

An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service DOS via a crafted tif file...

PYSEC-2021-883

An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service DOS via a crafted tif file...

UBUNTU-CVE-2020-18776

In Libav 12.3, there is a segmentation fault in vc1decodebmbintfr in vc1block.c that allows an attacker to cause denial-of-service via a crafted file...

Design/Logic Flaw

An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service DOS via a crafted tif file...

CVE-2020-18773

An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service DOS via a crafted tif file...

Exiv2 缓冲区错误漏洞

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. An invalid memory access vulnerability exists in the decode function in iptc.cpp in Exiv2 version 0.27.99.0. An attacker could exploit the vulnerability to cause a denial of service via a specially crafted t...

PT-2021-10243

Name of the Vulnerable Software and Affected Versions: Libav version 12.3 Description: The issue is related to a segmentation fault in the vc1 decode b mb intfr function in vc1 block.c, which can be triggered by an attacker using a crafted file, resulting in a denial-of-service. Recommendations:...