OSV-2023-477 Global-buffer-overflow in htmlParseHTMLAttribute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59718 Crash type: Global-buffer-overflow READ 1 Crash state: htmlParseHTMLAttribute htmlParseStartTag htmlParseContentInternal...

OSV-2023-474 Global-buffer-overflow in xmlDictLookup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59701 Crash type: Global-buffer-overflow READ 1 Crash state: xmlDictLookup xmlParseNCName xmlParseQName...

Denial of Service via reachable assertion

A grpc-swift server is vulnerable to a denial of service attack via a reachable assertion. This was due to incorrect logic when handling GOAWAY frames. The attack is low-effort: it takes very little resources to construct and send the required sequence of frames. The impact on availability is hig...

Denial of service via HTTP/2 HEADERS frames padding

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.2. It is fixed in 1.20.0 and later releases. This vulnerability is caused by a logica...

OSV-2023-470 Heap-use-after-free in psi_device_ref_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59661 Crash type: Heap-use-after-free READ 8 Crash state: psidevicereffinalize gsgcreclaim ireclaim...

rdkit:mol_deserialization_fuzzer: Heap-buffer-overflow in RDKit::streamRead

Detailed Report: https://oss-fuzz.com/testcase?key=5912430778384384 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldeserializationfuzzer Job Type: libfuzzerasani386rdkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf6120cd4 Crash State: RDKit::streamRead...

Denial of Service via reachable assertion

A grpc-swift server is vulnerable to a denial of service attack via a reachable assertion. This was due to incorrect logic when handling GOAWAY frames. The attack is low-effort: it takes very little resources to construct and send the required sequence of frames. The impact on availability is hig...

PT-2023-35866 · Git +1 · Freerdp

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE crash was reported, with the crash state involving TestFuzzCommonAssistanceParseFileBuffer.c. No information is available...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::IDnsResource::decodeName

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=6272012755271680 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libxslt:xslt: Global-buffer-overflow in xmlDictLookup

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5172704131809280 Project: libxslt Fuzzing Engine: honggfuzz Fuzz Target: xslt Job Type: honggfuzzasanlibxslt Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address:...

libxml2:xml: Global-buffer-overflow in xmlDictLookup

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4699711567953920 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzerasani386libxml2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

OSV-2023-467 Stack-buffer-overflow in SetPitchGradient

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59636 Crash type: Stack-buffer-overflow WRITE 1 Crash state: SetPitchGradient calcpitches CalcPitches...

ffmpeg:ffmpeg_AV_CODEC_ID_JPEG2000_fuzzer: Heap-buffer-overflow in jpegNUMBER_decode_tile

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5142077915398144 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDJPEG2000fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

OSV-2023-462 Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59625 Crash type: Heap-buffer-overflow READ 1 Crash state: IEC104Stats::processPacket Flow::processIEC60870Packet Flow::processPacket...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in IPv4Layer.h

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5858768907534336 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::IPv6Extension::getExtensionLen

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5075028610514944 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

OSV-2023-460 Segv on unknown address in config__bridge_cleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59604 Crash type: Segv on unknown address Crash state: configbridgecleanup configcleanup mosquittofuzzmain...

flex:fuzz-main: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4878367963611136 Project: flex Fuzzing Engine: libFuzzer Fuzz Target: fuzz-main Job Type: libfuzzerubsanflex Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000b926417 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securi...

SUSE CVE-2023-3044

An excessively large PDF page size found in fuzz testing, unlikely in normal PDF files can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate...

PT-2023-35861

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash was reported, characterized as a Segv on an unknown address. The crash state includes functions such as config bridge cleanup, config cleanup, and...