466 matches found
grok:grk_decompress_fuzzer: Incorrect-function-pointer-type in grk::BufferedStream::read
Detailed Report: https://oss-fuzz.com/testcase?key=6498826541727744 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerubsangrok Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Crash State: grk::BufferedStream::read...
CVE-2021-33446
An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is NULL pointer dereference in mjsnext in mjs.c...
Use of Uninitialized Function Pointer
Description When providing a crafted input binary to radare2, the context-readaddr function pointer is never initialized before use. This is due to the switch statement responsible for the assignment not finding a matching value for its switch cases. Calling function c static bool...
OSV-2022-394 Incorrect-function-pointer-type in cv::split
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47190 Crash type: Incorrect-function-pointer-type Crash state: cv::split cv::split TestSplitAndMerge...
PT-2022-36979
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Incorrect-function-pointer-type. The crash state involves the functions cv::split and cv::split, and is...
opencv:core_fuzzer: Incorrect-function-pointer-type in cv::split
Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=5109274650476544 Project: opencv Fuzzing Engine: libFuzzer Fuzz Target: corefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Crash...
FIS GT.M Denial of Service Vulnerability (CNVD-2022-32799)
FIS GT.M is a database platform. A security vulnerability exists in FIS GT.M versions prior to V7.0-000, which stems from the lack of input validation in the call to doverify in srunix/doverify.c. The vulnerability can be exploited to attempt to jump to a NULL pointer by corrupting the function...
YottaDB has an unspecified vulnerability (CNVD-2022-31932)
YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB r1.32 and earlier versions, which can be exploited to gain control of the execution process by manipulating the value of the function pointer used by opwrite in srport/opwrite.c using carefully crafted...
YottaDB has an unspecified vulnerability (CNVD-2022-31928)
YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB r1.32 and earlier, which stems from missing input validation in the call to doverify in srunix/doverify.c. An attacker could use this vulnerability to attempt to jump to a NULL pointer by corrupting the...
DEBIAN-CVE-2021-44506
An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of input validation in calls to doverify in srunix/doverify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer...
CVE-2021-44482
An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to doverify in srunix/doverify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer...
CVE-2021-44486
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in opwrite in srport/opwrite.c in order to gain control of the flow of execution...
CVE-2021-44486
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in opwrite in srport/opwrite.c in order to gain control of the flow of execution...
CVE-2021-44486
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in opwrite in srport/opwrite.c in order to gain control of the flow of execution...
CVE-2021-44482
An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to doverify in srunix/doverify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer...
CVE-2021-44482
An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to doverify in srunix/doverify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer...
UBUNTU-CVE-2021-44506
An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of input validation in calls to doverify in srunix/doverify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer...
CVE-2021-44506
An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of input validation in calls to doverify in srunix/doverify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer...
Design/Logic Flaw
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in opwrite in srport/opwrite.c in order to gain control of the flow of execution...
Null pointer dereference
An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to doverify in srunix/doverify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer...