85 matches found
CLEANSTART-2024-CC98818 issue was discovered in the flatbuffers crate through 2020-04-11 for Rust
Security vulnerability affects the flatbuffers package. An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust...
com.agorapulse:gru-micronaut (1.4.0), com.bertramlabs.plugins:asset-pipeline-grails (>=4.5.0, <=4.5.2) +155 more potentially affected by CVE-2026-44242 via io.micronaut:micronaut-inject (>=3.10.0, <=3.10.5)
io.micronaut:micronaut-inject MAVEN version =3.10.0, =4.5.0, =4.5.2 - dev.elide:elide-base-jvm 1.0-v3-alpha4-b11 - dev.elide:elide-proto-core-jvm 1.0-v3-alpha4-b11 - dev.elide:elide-proto-flatbuffers 1.0-v3-alpha4-b11 - dev.elide:elide-proto-kotlinx-jvm 1.0-v3-alpha4-b11 -...
EUVD-2021-1677
Malware in sbrugna...
EUVD-2021-1734
Malware in sbrugna...
CVE-2020-35864
An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. readscalar and readscalarat can transmute values without unsafe blocks...
CVE-2019-25004
An issue was discovered in the flatbuffers crate before 0.6.1 for Rust. Arbitrary bytes can be reinterpreted as a bool, defeating soundness...
WS-2021-0417
Code generated by flatbuffers' compiler is unsafe but not marked as such. No patch is known for the issue. All users that use generated code by flatbuffers compiler are recommended to: 1. not expose flatbuffer generated code as part of their public APIs 2. audit their code and look for any usage ...
GHSA-3JCH-9QGP-4844 Generated code can read and write out of bounds in safe code
Code generated by flatbuffers' compiler is unsafe but not marked as such. See https://github.com/google/flatbuffers/issues/6627 for details. All users that use generated code by flatbuffers compiler are recommended to: 1. not expose flatbuffer generated code as part of their public APIs 2. audit...
Generated code can read and write out of bounds in safe code
Code generated by flatbuffers' compiler is unsafe but not marked as such. See https://github.com/google/flatbuffers/issues/6627 for details. All users that use generated code by flatbuffers compiler are recommended to: 1. not expose flatbuffer generated code as part of their public APIs 2. audit...
gdal:fgb_fuzzer: Heap-buffer-overflow in flatbuffers::Table::VerifyOffset
Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4642513358553088 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: fgbfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60400000437c Crash...
flatbuffers:monster_fuzzer: Use-of-uninitialized-value in flatbuffers::Parser::Next
Project: https://github.com/google/flatbuffers.git Detailed Report: https://oss-fuzz.com/testcase?key=5201432904597504 Project: flatbuffers Fuzzing Engine: libFuzzer Fuzz Target: monsterfuzzer Job Type: libfuzzermsanflatbuffers Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
flatbuffers:flexverifier_fuzzer: Heap-buffer-overflow in flexbuffers::Verifier::VerifyRef
Project: https://github.com/google/flatbuffers.git Detailed Report: https://oss-fuzz.com/testcase?key=4530942700552192 Project: flatbuffers Fuzzing Engine: libFuzzer Fuzz Target: flexverifierfuzzer Job Type: libfuzzerasanflatbuffers Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...
OSV-2021-1678 Heap-buffer-overflow in flatbuffers::EscapeString
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42244 Crash type: Heap-buffer-overflow READ 1 Crash state: flatbuffers::EscapeString flexbuffers::Reference::ToString void flexbuffers::AppendToString...
PT-2021-27932
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which occurs in the flatbuffers::EscapeString function, and is also associated with...
flatbuffers:monster_fuzzer: Heap-buffer-overflow in flatbuffers::EscapeString
Project: https://github.com/google/flatbuffers.git Detailed Report: https://oss-fuzz.com/testcase?key=6327961110839296 Project: flatbuffers Fuzzing Engine: libFuzzer Fuzz Target: monsterfuzzer Job Type: libfuzzerasanflatbuffers Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
RUSTSEC-2021-0122 Generated code can read and write out of bounds in safe code
Code generated by flatbuffers' compiler is unsafe but not marked as such. See https://github.com/google/flatbuffers/issues/6627 for details. For example, if generated code is used to decode malformed or untrusted input, undefined behavior and thus security vulnerabilities is possible even without...
Generated code can read and write out of bounds in safe code
Code generated by flatbuffers' compiler is unsafe but not marked as such. See https://github.com/google/flatbuffers/issues/6627 for details. For example, if generated code is used to decode malformed or untrusted input, undefined behavior and thus security vulnerabilities is possible even without...
PT-2021-27790
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the LoadBinarySchema function, specifically in the do test...
flatbuffers:parser_fuzzer: Use-of-uninitialized-value in std::__1::basic_stringbuf<char, std::__1::char_traits<char>, std::__1::allocator
Project: https://github.com/google/flatbuffers.git Detailed Report: https://oss-fuzz.com/testcase?key=6449185268826112 Project: flatbuffers Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzermsanflatbuffers Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...
flatbuffers:monster_fuzzer: Use-of-uninitialized-value in LoadBinarySchema
Project: https://github.com/google/flatbuffers.git Detailed Report: https://oss-fuzz.com/testcase?key=6063472140484608 Project: flatbuffers Fuzzing Engine: libFuzzer Fuzz Target: monsterfuzzer Job Type: libfuzzermsanflatbuffers Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...