UBUNTU-CVE-2024-32615

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Znbitdecompressonebyte in H5Znbit.c, caused by the earlier use of an initialized pointer...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in void grk::N_AVX2::vscheduler<grk::N_AVX2::DecompressDcShiftIrrev>

Detailed Report: https://oss-fuzz.com/testcase?key=4627634813206528 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void grk::NAVX2::vscheduler...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::Scheduler::run

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=4595795868319744 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

freerdp: Out-Of-Bounds Read in nsc_rle_decompress_data

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Read in the nscrledecompressdata function. The Out-Of-Bounds Read occurs because it processes context-Planes without checking if it contains da...

freerdp: buffer overflow in ncrush_decompress causes crash with crafted input

A flaw was found in the FreeRDP implementation. Feeding crafted input into the ncrushdecompress function may cause a buffer overflow, resulting in a crash...

libjpeg-turbo: heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c

A heap buffer over-read flaw was found in libjpeg-turbo. For certain types of smoothed jpeg images, the decompresssmoothdata function may improperly enter a condition statement that leads to heap memory read of uninitialized data, which may cause an application crash or loss of confidentiality...

Vulnerability of the interleaved_decompress() function in the RDP client FreeRDP, allowing attackers to disclose protected information

The vulnerability of the interleaveddecompress function in the RDP client FreeRDP involves reading data beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

PT-2024-40705 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A stack-buffer-overflow READ 1 crash was reported. The crash occurred in the shoco decompress function, located in the fuzz alg shoco.cpp file. No...

freerdp:TestFuzzCodecs: Heap-buffer-overflow in ExtractRunLength

Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=6196819496337408 Project: freerdp Fuzzing Engine: libFuzzer Fuzz Target: TestFuzzCodecs Job Type: libfuzzerasanfreerdp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

PT-2024-3039

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.11.6 FreeRDP versions prior to 3.5.0 Description The issue is related to an out-of-bounds read in the zgfx decompress segment function of the FreeRDP client. This can allow a remote attacker to disclose protected...

PT-2024-3035

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.5.0 FreeRDP versions prior to 2.11.6 Description The issue is related to out-of-bounds read and integer overflow in functions such as ncrush decompress, zgfx decompress segment, clear decompress residual data, nsc r...

PT-2024-3038

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.11.6 FreeRDP versions prior to 3.5.0 Description The issue is related to an out-of-bounds read in the interleaved decompress function of the FreeRDP RDP client. This can allow a remote attacker to disclose protected...

PT-2024-3037

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.5.0 FreeRDP versions prior to 2.11.6 Description The issue is related to an out-of-bounds read in the FreeRDP client. This can be exploited by a remote attacker to disclose protected information. The vulnerability i...

PT-2024-24368 · C-Blosc2 · C-Blosc2

Name of the Vulnerable Software and Affected Versions: c-blosc2 versions up to 2.13.2 Description: A critical issue was found in the ndlz8 decompress function of the file /src/c-blosc2/plugins/codecs/ndlz/ndlz8x8.c. This issue leads to a heap-based buffer overflow. The attack can be launched...

PT-2024-24372 · C-Blosc2 · C-Blosc2

Name of the Vulnerable Software and Affected Versions: c-blosc2 versions up to 2.13.2 Description: A critical issue has been found, affecting the ndlz4 decompress function in the file /src/c-blosc2/plugins/codecs/ndlz/ndlz4x4.c. This issue leads to a heap-based buffer overflow. The attack can be...

gpac:fuzz_parse: Heap-buffer-overflow in gf_gz_decompress_payload_ex

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5518364279635968 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzparse Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x621000004d00 Crash State:...

Nervos CKB Snappy decompress length can be very large and causes out of memory error

Impact Adversary can create message which compressed size is less than the package limit but the decompressed length is very large such as 1G. It will cost the node many memories to process the network messages, and on the system with less than 1G memory, the process is killed directly because of...

PT-2024-40047 · Ckb · Ckb

Name of the Vulnerable Software and Affected Versions: CKB affected versions not specified Description: An issue allows an adversary to create a message with a compressed size less than the package limit, but with a very large decompressed length, such as 1G. This can cause a node to consume a...

SUSE CVE-2023-35956

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...

UBUNTU-CVE-2023-35956

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...