921 matches found
CVE-2021-36089
Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress::applypaletteclr called from grk::FileFormatDecompress::applyColour...
PT-2021-28318
Name of the Vulnerable Software and Affected Versions: ZSTD affected versions not specified Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the ZSTD decompressMultiFrame and ZSTD decompress usingDDict functions, as well as the blos...
DEBIAN-CVE-2021-28211
A heap overflow in LzmaUefiDecompressGetInfo function in EDK II...
DEBIAN-CVE-2020-25467
A null pointer dereference was discovered lzodecompressbuf in stream.c in Irzip 0.621 which allows an attacker to cause a denial of service DOS via a crafted compressed file...
CVE-2021-27347
Use after free in lzmadecompressbuf function in stream.c in Irzip 0.631 allows attackers to cause Denial of Service DoS via a crafted compressed file...
CVE-2021-27347
Use after free in lzmadecompressbuf function in stream.c in Irzip 0.631 allows attackers to cause Denial of Service DoS via a crafted compressed file...
Irzip 资源管理错误漏洞
Irzip is a compression utility that excels at compressing large files. A post-release reuse vulnerability exists in the lzmadecompressbuf function in stream.c in Irzip version 0.631, which can be exploited by an attacker to cause a denial of service via specially crafted compressed files...
c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in frame_get_vlmetalayers
Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5966065472503808 Project: c-blosc2 Fuzzing Engine: afl Fuzz Target: decompressframefuzzer Job Type: aflasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...
grok:grk_decompress_fuzzer: Use-of-uninitialized-value in unsigned long grk::N_AVX2::vscheduler<grk::N_AVX2::DecompressDcShiftIrrev>
Detailed Report: https://oss-fuzz.com/testcase?key=5652473520979968 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: unsigned long grk::NAVX2::vscheduler...
c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in _blosc_getitem
Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=6208488536670208 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...
grok:grk_decompress_fuzzer: Use-of-uninitialized-value in void grk::N_AVX2::transform<grk::N_AVX2::DecompressDcShiftIrrev>
Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5142828708659200 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...
PT-2021-28224
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the function names apply palette clr and applyColour, whi...
grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::FileFormatDecompress::apply_palette_clr
Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5022555195965440 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerasangrok Platform Id...
grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::N_SCALAR::DecompressIrrev::vtrans
Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=4548537422577664 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...
grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::N_AVX2::hwy_decompress_dc_shift_irrev
Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=4845319075528704 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...
grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::FileFormatDecompress::serializeAsoc
Detailed Report: https://oss-fuzz.com/testcase?key=4590698616717312 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::FileFormatDecompress::serializeAsoc...
grok:grk_decompress_fuzzer: Heap-use-after-free in grk_object_unref
Detailed Report: https://oss-fuzz.com/testcase?key=4728907346608128 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerasangrok Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x608000040ea8 Crash State: grkobjectunref...
macOS Gatekeeper check bypass
This module exploits two CVEs that bypass Gatekeeper. For CVE-2021-30657, this module serves an OSX app as a zip that contains no Info.plist, which bypasses gatekeeper in macOS use exploit/osx/browser/osx/gatekeeperbypass msf undefinedgatekeeperbypass show actions ...actions... msf...