Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2020-0796 ----------- Tổng quan: Tính năng compression...

grok:grk_decompress_fuzzer: Nested bug in the same thread, aborting. with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5645221567922176 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Nested bug in the same thread, aborting. Crash Address: Crash State: NULL Sanitizer: memory MSAN...

c-blosc2:decompress_fuzzer: Crash in std::__Fuzzer::pair<std::__Fuzzer::__hash_iterator<std::__Fuzzer::__hash_node<st

Detailed Report: https://oss-fuzz.com/testcase?key=6514938623033344 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzerubsanc-blosc2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fcc00066720 Crash State:...

PT-2020-22107

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the tinfl decompress function, which is called by mz infla...

PT-2020-14782

Name of the Vulnerable Software and Affected Versions GoPro gpmf-parser version 1.5 Description The issue is related to a division-by-zero vulnerability in the GPMF Decompress function. This vulnerability can be triggered by parsing malicious input, which may result in a crash. Recommendations Fo...

c-blosc2:decompress_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4881454368292864 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzerubsanc-blosc2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7eff01954260 Crash State: NULL Sanitizer: undefined UBSAN...

grok:grk_decompress_fuzzer: Crash in grk::SparseBuffer<6u, 6u>::read_or_write

Detailed Report: https://oss-fuzz.com/testcase?key=5197905562173440 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000003c00 Crash State: grk::SparseBuffer::readorwrite...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::t1_ht::T1HT::postDecode

Detailed Report: https://oss-fuzz.com/testcase?key=5706757122555904 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::t1ht::T1HT::postDecode...

OSV-2020-1830 Heap-use-after-free in grk::TileProcessor::~TileProcessor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25873 Crash type: Heap-use-after-free READ 8 Crash state: grk::TileProcessor::TileProcessor grk::CodeStream::decompresstiles grk::CodeStream::dodecompress...

grok:grk_decompress_fuzzer: Heap-use-after-free in grk::t1_part1::T1Part1::postDecode

Detailed Report: https://oss-fuzz.com/testcase?key=4658002672746496 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6150009f8798 Crash State: grk::t1part1::T1Part1::postDecode...

@adobe/helix-cli (>=0.10.6-pre.2, <=4.3.0), @c8y/cli (9.15.0) +123 more potentially affected by CVE-2020-12265 via decompress (>=4.0.0, <=4.2.0)

decompress NPM version =4.0.0, =0.10.6-pre.2, =1.1.4, =4.0.2-rc.0, =1.9.9-1, =1.0.1, =5.0.3-beta, =6.12.0, =0.9.1, =0.9.0, =0.10.5, =3.0.0-rc.0, =3.0.0-alpha.1, =0.0.1, =0.0.1-canary-publish-10b14e980f40c7d15fe9aa4b2b8dacd099133853, =3.60.0 and more Source cves: CVE-2020-12265 Source advisory:...

GHSA-QGFR-5HQP-VRW9 Path Traversal in decompress

Versions of decompress prior to 4.2.1 are vulnerable to Arbitrary File Write. The package fails to prevent extraction of files with relative paths, allowing attackers to write to any folder in the system by including filenames containing../. Recommendation Upgrade to version 4.2.1 or later...

@achingbrain/ngrok (0.2.2), @atomist/sdm-automation (>=0.1.16-master.20181116180810, <=0.1.59-master.20200611224542) +603 more potentially affected by unknown CVE via decompress-zip (>=0.0.2, <=0.2.0)

decompress-zip NPM version =0.0.2, =0.1.16-master.20181116180810, =14.0.5, =0.1.2, =1.2.6, =1.0.1, =1.0.0, =1.1.1, =5.0.1, =1.0.0, =5.2.1, =5.3.0 - @paulcbetts/squirrel-windows 1.2.1 - @pgswe/ics.js 0.1.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-73V8-V6G4-VRPM...

@angular/benchpress (0.1.0), @camptocamp/closure-util (>=1.20.0, <=1.27.0) +140 more potentially affected by unknown CVE via decompress-zip (>=0.3.0, <=0.3.1)

decompress-zip NPM version =0.3.0, =1.20.0, =0.4.0, =0.4.0, =0.5.0-beta.2, =1.36.0, =0.0.1, =3.6.0, =1.0.0, =0.1.0, =0.1.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-73V8-V6G4-VRPM...

GHSA-73V8-V6G4-VRPM Arbitrary File Overwrite in decompress-zip

Vulnerable versions of decompress-zip are affected by the Zip-Slip vulnerability, an arbitrary file write vulnerability. The vulnerability occurs because decompress-zip does not verify that extracted files do not resolve to targets outside of the extraction root directory. Recommendation For...

Arbitrary File Overwrite in decompress-zip

Vulnerable versions of decompress-zip are affected by the Zip-Slip vulnerability, an arbitrary file write vulnerability. The vulnerability occurs because decompress-zip does not verify that extracted files do not resolve to targets outside of the extraction root directory. Recommendation For...

PT-2020-21110

Name of the Vulnerable Software and Affected Versions decompress-zip versions 0.2.x through 0.2.1 decompress-zip versions 0.3.x through 0.3.1 Description The issue is an arbitrary file write vulnerability, known as Zip-Slip, which occurs because decompress-zip does not verify that extracted files...

grok:grk_decompress_fuzzer: Nested bug in the same thread, aborting. with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6324070826901504 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Nested bug in the same thread, aborting. Crash Address: Crash State: NULL Sanitizer: memory MSAN...

PT-2020-6423 · Lrzip +3 · Lrzip +3

Name of the Vulnerable Software and Affected Versions: Lrzip version 0.621 Description: A null pointer dereference was discovered in the lzo decompress buf function in stream.c, which allows an attacker to cause a denial of service DOS via a crafted compressed file. This issue can be exploited by...

OSV-2020-1016 UNKNOWN READ in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23717 Crash type: UNKNOWN READ Crash state: bloscrundecompressionwithcontext bloscdecompress fuzzdecompress.c...