fmt:two-args-fuzzer: Stack-buffer-overflow in int fmt::v7::detail::snprintf_float<long double>

Project: https://github.com/fmtlib/fmt.git Detailed Report: https://oss-fuzz.com/testcase?key=5663571846496256 Project: fmt Fuzzing Engine: afl Fuzz Target: two-args-fuzzer Job Type: aflasanfmt Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7efceff544bf Crash State:...

fmt:chrono-duration-fuzzer: Stack-buffer-overflow in int fmt::v7::detail::snprintf_float<long double>

Project: https://github.com/fmtlib/fmt.git Detailed Report: https://oss-fuzz.com/testcase?key=5021224255225856 Project: fmt Fuzzing Engine: afl Fuzz Target: chrono-duration-fuzzer Job Type: aflasanfmt Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f299b95588f Crash...

fmt:named-arg-fuzzer: Stack-buffer-overflow in int fmt::v7::detail::snprintf_float<long double>

Project: https://github.com/fmtlib/fmt.git Detailed Report: https://oss-fuzz.com/testcase?key=5701202266423296 Project: fmt Fuzzing Engine: afl Fuzz Target: named-arg-fuzzer Job Type: aflasanfmt Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f294bcd3cbf Crash State:...

SyncRef's clone() and debug() allow data races

Affected versions of this crate unconditionally implement Sync for SyncRef. This definition allows data races if &T is accessible through &SyncRef. SyncRef derives Clone and Debug, and the default implementations of those traits access &T by invoking T::clone & T::fmt. It is possible to create da...

OSV-2020-1851 Stack-buffer-underflow in fmt::v6::basic_format_args<fmt::v6::basic_format_context<std::__1::back_insert_i

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21794 Crash type: Stack-buffer-underflow READ 16 Crash state: fmt::v6::basicformatargsfmt::v6::basicformatcontextstd::1::backinserti fmt::v6::basicformatargsfmt::v6::basicformatcontextstd::1::backinserti...

OSV-2020-1850 Heap-buffer-overflow in fmt::v6::basic_string_view<char>::basic_string_view

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21763 Crash type: Heap-buffer-overflow READ 2 Crash state: fmt::v6::basicstringview::basicstringview fmt::v6::basicformatargfmt::v6::basicformatcontextstd::1::backinsertit...

PT-2020-22006

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported due to a stack-buffer-underflow read issue. The crash details indicate an issue with fmt::v6::basic format args and fmt::v6::basi...

PT-2020-22005

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A heap-buffer-overflow read issue is reported, potentially causing a crash. The crash details indicate an issue with fmt::v6::basic string view and...

OSV-2020-1835 Stack-buffer-overflow in fmt::v7::detail::buffer<char>::push_back

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25884 Crash type: Stack-buffer-overflow READ 1 Crash state: fmt::v7::detail::buffer::pushback std::1::backinsertiterator ::operator= fmt::v7::detail::bufferappender std::1::copyconstexprchar const, f...

PT-2020-21992

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. Technical details about the crash include the involvement of fmt::v7::detail::buffer::push back...

PT-2020-22641

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow WRITE 4 crash type. The crash state involves functions such as surround51 to stereo downmix mtx, cras fmt co...

PT-2020-22657

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 4 crash has been reported. The crash involves the surround51 to stereo downmix mtx function, cras fmt conv create, and config...

PT-2020-21857

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the functions fmt setup, mrb str format, and mrb f sprintf...

DEBIAN-CVE-2019-17595

There is a heap-based buffer over-read in the fmtentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...

UBUNTU-CVE-2019-17595

There is a heap-based buffer over-read in the fmtentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...

PT-2019-5181

Name of the Vulnerable Software and Affected Versions ncurses versions prior to 6.1-20191012 Description The issue is related to a heap-based buffer over-read in the fmt entry function in tinfo/comp hash.c of the terminfo library. This could allow a remote attacker to disclose protected informati...

CVE-2019-14524

An issue was discovered in Schism Tracker through 20190722. There is a heap-based buffer overflow via a large number of song patterns in fmtmtmloadsong in fmt/mtm.c, a different vulnerability than CVE-2019-14465...

Heap overflow

An issue was discovered in Schism Tracker through 20190722. There is a heap-based buffer overflow via a large number of song patterns in fmtmtmloadsong in fmt/mtm.c, a different vulnerability than CVE-2019-14465...

Integer overflow

An issue was discovered in Schism Tracker through 20190722. There is an integer underflow via a large plen in fmtoktloadsong in the Amiga Oktalyzer parser in fmt/okt.c...

CVE-2019-14523

CVE-2019-14523 affects Schism Tracker (up to 20190722). The issue is an integer underflow in the Amiga Oktalyzer parser (fmt/okt.c) that underpins the vulnerability. Public advisories detail fixes in OpenSUSE/SU patches (e.g., openSUSE-2019:2019-1, openSUSE-SU-2019:2019-1) and related GLSA/Nessus...