CVE-2021-40418

When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the...

mruby:mruby_proto_fuzzer: Bad-cast to ::ruby_fuzzer::BuiltinFuncsruby_fuzzer::Statement::clear_stmt_oneof in ruby_fuzzer::Statement::~Statement

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4892028584656896 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: Bad-cast Crash Address: 0x58105699ac40 Crash State:...

PT-2025-19689 · Git +1 · Rdkit

Name of the Vulnerable Software and Affected Versions: RDKit affected versions not specified Description: The software is susceptible to an unknown read crash. The crash state involves the RDKit::Dict::reset, RDKit::Atom::Atom, and RDKit::QueryAtom::QueryAtom functions. Recommendations: At the...

rdkit:mol_data_stream_to_mol_fuzzer: Crash in RDKit::Dict::reset

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4784563116638208 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00003c000000...

rdkit:mol_data_stream_to_mol_fuzzer: Crash in RDKit::Bond::~Bond

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6113228765069312 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000020000000...

PT-2026-4361

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's networking subsystem related to socket destruction. Specifically, the handshake req submit function replaces the socket's destructor sk-sk destruct bu...

CVE-2024-56673

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Do not call pmd dtor on vmemmap page table teardown The vmemmap's, which is used for RV64 with SPARSEMEMVMEMMAP, page tables are populated using pmd page middle directory hugetables. However, the pmd allocation is not...

DEBIAN-CVE-2024-56673

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Do not call pmd dtor on vmemmap page table teardown The vmemmap's, which is used for RV64 with SPARSEMEMVMEMMAP, page tables are populated using pmd page middle directory hugetables. However, the pmd allocation is not...

CVE-2024-56673 riscv: mm: Do not call pmd dtor on vmemmap page table teardown

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Do not call pmd dtor on vmemmap page table teardown The vmemmap's, which is used for RV64 with SPARSEMEMVMEMMAP, page tables are populated using pmd page middle directory hugetables. However, the pmd allocation is not...

CVE-2024-56673 riscv: mm: Do not call pmd dtor on vmemmap page table teardown

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Do not call pmd dtor on vmemmap page table teardown The vmemmap's, which is used for RV64 with SPARSEMEMVMEMMAP, page tables are populated using pmd page middle directory hugetables. However, the pmd allocation is not...

UBUNTU-CVE-2024-53210

In the Linux kernel, the following vulnerability has been resolved: s390/iucv: MSGPEEK causes memory leak in iucvsockdestruct Passing MSGPEEK flag to skbrecvdatagram increments skb refcount skb-users and iucvsockrecvmsg does not decrement skb refcount at exit. This results in skb memory leak in...

CVE-2024-53210 s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()

In the Linux kernel, the following vulnerability has been resolved: s390/iucv: MSGPEEK causes memory leak in iucvsockdestruct Passing MSGPEEK flag to skbrecvdatagram increments skb refcount skb-users and iucvsockrecvmsg does not decrement skb refcount at exit. This results in skb memory leak in...

kimageformats:kimgio_jxr_fuzzer: Segv on unknown address in QtSharedPointer::ExternalRefCountWithCustomDeleter<QFile, QtSharedPointer::Norma

Detailed Report: https://oss-fuzz.com/testcase?key=4882143284625408 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgiojxrfuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

spirv-cross:parser_fuzzer: Crash in spirv_cross::ParsedIR::~ParsedIR

Project: https://github.com/KhronosGroup/SPIRV-Cross.git Detailed Report: https://oss-fuzz.com/testcase?key=6192199510851584 Project: spirv-cross Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasanspirv-cross Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

PT-2024-40576

Name of the Vulnerable Software and Affected Versions: Llama affected versions not specified Description: The issue is related to a crash caused by an unknown read. Technical details about the crash include the ggml free function, the llama model destructor, and the llama load model from file...

php:php-fuzz-execute: Crash in i_zval_ptr_dtor

Detailed Report: https://oss-fuzz.com/testcase?key=4860195954556928 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerubsanphp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x569798ffa010 Crash State: izvalptrdtor zhoitdtor zendobjectsstoredel...

SUSE CVE-2021-47588

In the Linux kernel, the following vulnerability has been resolved: sit: do not call ipip6devfree from sitinitnet ipip6devfree is sit dev-privdestructor, already called by registernetdevice if something goes wrong. Alternative would be to make ipip6devfree robust against multiple invocations, but...

BIT-NODE-2024-27983

An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is possible to leave some data in nghttp2 memory after reset when headers with HTTP/2 CONTINUATION frame are sent to the server and then a T...

gdal:mitab_tab_fuzzer: Heap-double-free in ___interceptor_free

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5163426878914560 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: mitabtabfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x5030000145f0 Crash State:...

DEBIAN-CVE-2020-36788

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: avoid a use-after-free when BO init fails nouveauboinit is backed by ttmboinit and ferries its return code back to the caller. On failures, ttmboinit invokes the provided destructor which should de-initialize and fre...