envoy:h1_capture_persistent_fuzz_test: Crash in Envoy::IntegrationTestServerImpl::~IntegrationTestServerImpl

Detailed Report: https://oss-fuzz.com/testcase?key=6320245042708480 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: h1capturepersistentfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f1906a74de0 Crash State:...

libreoffice:lwpfuzzer: Segv on unknown address in LwpDrawTextArt::~LwpDrawTextArt

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5813135838150656 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: lwpfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Segv on unknown address Crash Address...

libjxl:djxl_fuzzer: Crash in std::__1::__vector_base<jxl::Image3<float>, std::__1::allocator<jxl::Image3<floa

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5382562858532864 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerubsanlibjxl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00474700534b Crash State:...

CVE-2021-40418

When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the...

CVE-2021-40418

When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the...

Design/Logic Flaw

When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the...

pcl:ply_reader_fuzzer: Bad-cast to std::__function::__base<void (int)>std::__1::__function::__value_func<void in pcl::io::ply::ply_parser::scalar_property<int>::~scalar_property

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=5110833374429184 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffe49cc6460 Crash...

libreoffice:htmlfuzzer: Heap-use-after-free in HTMLTable::~HTMLTable

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5734539566120960 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: htmlfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

pcl:ply_reader_fuzzer: Crash in __dynamic_cast

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=6005752884494336 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x001200000418 Crash...

gdal:gdal_filesystem_fuzzer: Heap-use-after-free in GDALRasterBand::~GDALRasterBand

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5194612591951872 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

CVE-2021-39559

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function GString::GString located in GString.cc. It allows an attacker to cause Denial of Service...

CVE-2021-39539

An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function node::BDCNode::BDCNode located in bdcnode.cpp. It allows an attacker to cause Denial of Service...

Pdftools 代码问题漏洞

PDFTools is a tool for converting PDF files to ePUB format. node::BDCNode::BDCNode function in bdcnode.cpp in PDFTools 20200714 and earlier versions is vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service...

muduo:muduo_http_fuzzer: Use-of-uninitialized-value in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c

Project: https://github.com/chenshuo/muduo.git Detailed Report: https://oss-fuzz.com/testcase?key=5976075218321408 Project: muduo Fuzzing Engine: libFuzzer Fuzz Target: muduohttpfuzzer Job Type: libfuzzermsanmuduo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash Stat...

guetzli:guetzli_fuzzer: Use-of-uninitialized-value in guetzli::JPEGData::~JPEGData

Project: https://github.com/google/guetzli.git Detailed Report: https://oss-fuzz.com/testcase?key=5125356793757696 Project: guetzli Fuzzing Engine: libFuzzer Fuzz Target: guetzlifuzzer Job Type: libfuzzermsanguetzli Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ots:ots-fuzzer: Use-of-uninitialized-value in std::__1::__vector_base<ots::NameRecord, std::__1::allocator<ots::NameRecord> >:

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=4827757436076032 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzermsanots Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

flac:fuzzer_exo: Use-of-uninitialized-value in FLACParser::~FLACParser

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=4781915262025728 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerexo Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

PT-2021-27776

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurs due to a bad-cast to SplashPattern from an invalid vptr. This issue is related to the SplashState destructor and the restoreState function i...

ROS-2-1224

2.1224 Vulnerability in firefox browser CVE-2020-6819 and CVE-2020-6820 1. Vulnerability description: Two critical vulnerabilities have been discovered that could lead to the execution of attacker code when processing specially formatted content. It is warned that facts of using these...

GHSA-C3CW-C387-PJ65 Double free in crossbeam

Even if an element is popped from a queue, crossbeam would run its destructor inside the epoch-based garbage collector. This is a source of double frees. The flaw was corrected by wrapping elements inside queues in a ManuallyDrop...