PT-2021-28103

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 4 crash has been reported. The crash involves the functions frame get lazychunk, frame decompress chunk, and blosc2 schunk...

c-blosc2:decompress_frame_fuzzer: Crash in frame_get_vlmetalayers

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=4622970490322944 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerubsanc-blosc2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::BitIO::bytein

Detailed Report: https://oss-fuzz.com/testcase?key=5762853736939520 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x605000157511 Crash State: grk::BitIO::bytein grk::BitIO::read...

PT-2021-28076

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the following functions: frame get lazychunk, frame decompress chunk, and blosc2...

PT-2021-28045

Name of the Vulnerable Software and Affected Versions blosc versions affected versions not specified Description The issue is related to a crash caused by a memcpy parameter overlap. Technical details include the crash type being Memcpy-param-overlap, and the crash state involves functions such a...

PT-2021-28043

Name of the Vulnerable Software and Affected Versions blosc2 affected versions not specified Description The issue is related to a heap-buffer-overflow read. Technical details about exploitation include the function names blosc run decompression with context and blosc2 decompress. The crash occur...

c-blosc2:decompress_frame_fuzzer: Memcpy-param-overlap in frame_get_usermeta

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5035219092635648 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in blosc_d

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5079034688045056 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Addres...

grok:grk_decompress_fuzzer: Crash in grk::decompress_step_97

Detailed Report: https://oss-fuzz.com/testcase?key=5245768921382912 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6320000a0bc0 Crash State: grk::decompressstep97 bool grk::decompresspartialtile...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::FileFormat::serializeAsoc

Detailed Report: https://oss-fuzz.com/testcase?key=6243076467195904 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::FileFormat::serializeAsoc...

PT-2021-28010

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a segmentation fault on an unknown address. The crash involves the frame get lazychunk, frame decompress chunk, a...

c-blosc2:decompress_chunk_fuzzer: Use-of-uninitialized-value in ZSTD_checkContinuity

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=6243129091031040 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompresschunkfuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

grok:grk_decompress_fuzzer: Crash in grk::SparseBuffer<6u, 6u>::alloc

Detailed Report: https://oss-fuzz.com/testcase?key=5352193955856384 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6028000005a8 Crash State: grk::SparseBuffer::alloc bool...

OSV-2020-2258 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28505 Crash type: Heap-buffer-overflow READ Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...

PT-2020-15690

Name of the Vulnerable Software and Affected Versions picoTCP and picoTCP-NG versions through 1.7.0 Description The issue is related to the DNS domain name record decompression functionality in the pico dns decompress name function, located in pico dns common.c. It does not validate the compressi...

PT-2020-22183

Name of the Vulnerable Software and Affected Versions grk affected versions not specified Description The issue is related to a heap-buffer-overflow read. Technical details about the crash include the decompress function in grk::t1 part1::T1Part1, the open function in grk::DecompressBlockExec, an...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

Detailed Report: https://oss-fuzz.com/testcase?key=5796072240840704 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6060000001de Crash State: grk::t1part1::T1Part1::decompress...

PT-2020-22180

Name of the Vulnerable Software and Affected Versions blosc2 affected versions not specified Description The issue is related to a heap-buffer-overflow read, which can cause a crash. Technical details about the crash include the blosc run decompression with context, blosc2 decompress ctx, and fra...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

Detailed Report: https://oss-fuzz.com/testcase?key=4816795705933824 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ 12 Crash Address: 0x61c00002978b Crash State: grk::t1part1::T1Part1::decompress...

OSV-2020-2249 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28328 Crash type: Heap-buffer-overflow READ Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...