Denial Of Service (DoS)

google.golang.org/protobuf is vulnerable to Denial Of Service DoS. The vulnerability exists due to the parseNumber function in decodenumber.go, which allows an attacker to cause an application crash by parsing a message starting with a number, then whitespace, then minus, then whitespace, such as...

libarchive:libarchive_fuzzer: Heap-buffer-overflow in decode_number

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=4614148940496896 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libarchive:libarchive_fuzzer: Heap-buffer-overflow in decode_number

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=5779303243579392 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

OSV-2018-68 Heap-buffer-overflow in read_bits_16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12817 Crash type: Heap-buffer-overflow READ 1 Crash state: readbits16 decodenumber parsetables...