UBUNTU-CVE-2021-28211

A heap overflow in LzmaUefiDecompressGetInfo function in EDK II...

grok:grk_decompress_fuzzer: Heap-use-after-free in grk_object_unref

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5168794080247808 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerasangrok Platform Id...

PT-2021-28145

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by an invalid-free error. The crash occurs in the following functions: frame get lazychunk, frame decompress chunk,...

PT-2021-28120

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the std:: 1:: packaged task func function, specifically wi...

c-blosc2:decompress_frame_fuzzer: Nested bug in the same thread, aborting. with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5180440703008768 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Nested bug in the same thread, aborting. Crash Address: Crash State: NULL Sanitizer:...

PT-2021-28107

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the functions frame get lazychunk, frame decompress chunk, and blosc2 schunk...

PT-2021-28103

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 4 crash has been reported. The crash involves the functions frame get lazychunk, frame decompress chunk, and blosc2 schunk...

c-blosc2:decompress_frame_fuzzer: Crash in frame_get_vlmetalayers

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=4622970490322944 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerubsanc-blosc2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::BitIO::bytein

Detailed Report: https://oss-fuzz.com/testcase?key=5762853736939520 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x605000157511 Crash State: grk::BitIO::bytein grk::BitIO::read...

PT-2021-28076

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the following functions: frame get lazychunk, frame decompress chunk, and blosc2...

PT-2021-28045

Name of the Vulnerable Software and Affected Versions blosc versions affected versions not specified Description The issue is related to a crash caused by a memcpy parameter overlap. Technical details include the crash type being Memcpy-param-overlap, and the crash state involves functions such a...

PT-2021-28043

Name of the Vulnerable Software and Affected Versions blosc2 affected versions not specified Description The issue is related to a heap-buffer-overflow read. Technical details about exploitation include the function names blosc run decompression with context and blosc2 decompress. The crash occur...

c-blosc2:decompress_frame_fuzzer: Memcpy-param-overlap in frame_get_usermeta

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5035219092635648 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in blosc_d

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5079034688045056 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Addres...

grok:grk_decompress_fuzzer: Crash in grk::decompress_step_97

Detailed Report: https://oss-fuzz.com/testcase?key=5245768921382912 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6320000a0bc0 Crash State: grk::decompressstep97 bool grk::decompresspartialtile...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::FileFormat::serializeAsoc

Detailed Report: https://oss-fuzz.com/testcase?key=6243076467195904 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::FileFormat::serializeAsoc...

PT-2021-28010

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a segmentation fault on an unknown address. The crash involves the frame get lazychunk, frame decompress chunk, a...

c-blosc2:decompress_chunk_fuzzer: Use-of-uninitialized-value in ZSTD_checkContinuity

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=6243129091031040 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompresschunkfuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

grok:grk_decompress_fuzzer: Crash in grk::SparseBuffer<6u, 6u>::alloc

Detailed Report: https://oss-fuzz.com/testcase?key=5352193955856384 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6028000005a8 Crash State: grk::SparseBuffer::alloc bool...

OSV-2020-2258 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28505 Crash type: Heap-buffer-overflow READ Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...