PT-2022-22260

Name of the Vulnerable Software and Affected Versions CVA6 affected versions not specified Description The issue arises from an incorrect exception type being implemented when an illegal virtual address is loaded, specifically in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a. Recommendatio...

CVE-2022-34634: Improper Handling of Exceptional Conditions

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted det instructions rather create an exception...

CVE-2022-34636: Improper Handling of Exceptional Conditions

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMA violation occurs during address translation...

CVA6 安全漏洞

CVA6 is an application class 6 RISC-V CPU open-sourced by the OpenHW Group in Canada. A security vulnerability exists in CVA6 that originates from loading an illegal virtual address, which may result in an incorrect exception type...

PT-2022-22257

Name of the Vulnerable Software and Affected Versions CVA6 version d315ddd0f1be27c1b3f27eb0b8daf471a952299a Description The issue arises when CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted det instructions, which it fails to handle by creating an...

PT-2022-22266

Name of the Vulnerable Software and Affected Versions RISCV ISA Sim affected versions not specified Description The issue is related to the implementation of exception priority when accessing memory in RISCV ISA Sim. Specifically, commit ac466a21df442c59962589ba296c702631e041b5 is mentioned as...

CVE-2022-34641: Improper Handling of Exceptional Conditions

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation...

PT-2022-23228

Name of the Vulnerable Software and Affected Versions fdkaac affected versions not specified Description A floating point exception FPE issue was discovered in fdkaac via the wav open function at /src/wav reader.c. Recommendations At the moment, there is no information about a newer version that...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5389219706568704 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

apache-commons-configuration:XMLConfigurationLoadFuzzer: Uncaught exception in java.xml/com.sun.org.apache.xalan.internal.xsltc.trax.DOM2TO.parse

Detailed Report: https://oss-fuzz.com/testcase?key=5063421489446912 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: XMLConfigurationLoadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

archaius-core:DynamicPropertyFuzzer: Uncaught exception in java.base/java.util.HashMap.resize

Detailed Report: https://oss-fuzz.com/testcase?key=5716029120053248 Project: archaius-core Fuzzing Engine: libFuzzer Fuzz Target: DynamicPropertyFuzzer Job Type: libfuzzerasanarchaius-core Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

apache-commons-configuration:YAMLConfigurationWriteFuzzer: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeMappingChildren

Detailed Report: https://oss-fuzz.com/testcase?key=5790977205338112 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

IF A SINGLE ORDER FAILS, THE WHOLE FUNCTION REVERTS

Lines of code Vulnerability details Impact If a single order of the orders array fails, the whole function initiate or exit reverts with no information about which was the vulnerable order, the only information given is an Exception with a code of 5 Proof of Concept Tools Used editor Recommended...

Huawei HarmonyOS Denial of Service Vulnerability (CNVD-2022-57611)

Huawei HarmonyOS is an operating system from Huawei, China. It provides a microkernel-based distributed operating system. A security vulnerability exists in the graphics component of Huawei HarmonyOS, stemming from the existence of a multi-threaded access database for the graphics acceleration...

vm2 before 3.6.11 vulnerable to sandbox escape

This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code runnin...

CVE-2022-32117

Jerryscript v2.4.0 was discovered to contain a stack buffer overflow via the function jerryxprintunhandledexception in /util/print.c...

CVE-2022-32117

Jerryscript v2.4.0 was discovered to contain a stack buffer overflow via the function jerryxprintunhandledexception in /util/print.c...

CVE-2019-10761

This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code runnin...

CVE-2019-10761

This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code runnin...

Code injection

This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code runnin...