9194 matches found
PT-2023-35832 · Git +1 · Liblouis
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state involves several functions, includi...
ruby:fuzz_ruby_gems: Use-after-poison in rb_gc_writebarrier
Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4854465984069632 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubygems Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7fffdb2894d8 Crash...
OSV-2023-402 Heap-use-after-free in Assimp::FBXExporter::WriteObjects
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59036 Crash type: Heap-use-after-free READ 4 Crash state: Assimp::FBXExporter::WriteObjects Assimp::FBXExporter::ExportBinary Assimp::ExportSceneFBX...
swift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame length
A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. It is fixed in 1.19.2 and later releases. This vulnerability is caused by a logica...
php:php-fuzz-execute: Heap-use-after-free in zval_call_destructor
Detailed Report: https://oss-fuzz.com/testcase?key=6561659590934528 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60e000002f80 Crash State: zvalcalldestructor...
apache-commons-imaging:ImagingTiffFuzzer: Security exception in org.apache.commons.imaging.common.Allocator.intArray
Detailed Report: https://oss-fuzz.com/testcase?key=5824662127640576 Project: apache-commons-imaging Fuzzing Engine: libFuzzer Fuzz Target: ImagingTiffFuzzer Job Type: libfuzzerasanapache-commons-imaging Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
mysql-server:fuzz_initfile: Heap-buffer-overflow in my_ismbchar_utf8mb3
Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=5477722185662464 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...
nccl:fuzz_xml: Crash in xmlLoadSub
Project: https://github.com/NVIDIA/nccl.git Detailed Report: https://oss-fuzz.com/testcase?key=4539745888501760 Project: nccl Fuzzing Engine: libFuzzer Fuzz Target: fuzzxml Job Type: libfuzzerasannccl Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x792a25dd33d0 Crash State: xmlLoadS...
OSV-2023-397 Heap-buffer-overflow in json_write_TF
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58915 Crash type: Heap-buffer-overflow READ 1 Crash state: jsonwriteTF jsonpreR13headerwriteprivate dwgwritejson...
OSV-2023-396 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58938 Crash type: Security exception Crash state: org.springframework.expression.spel.ast.OpPlus.getValueInternal java.base/java.util.Arrays.hashCode java.base/sun.reflect.generics.reflectiveObjects.ParameterizedTypeImpl.hashC...
OSV-2023-392 Negative-size-param in H5MM_memcpy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58892 Crash type: Negative-size-param Crash state: H5MMmemcpy H5Olinkdecode H5Omsgiteratereal...
OSV-2023-390 Heap-buffer-overflow in sdhci_write
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58813 Crash type: Heap-buffer-overflow WRITE 1 Crash state: sdhciwrite memoryregionwriteaccessor memoryregiondispatchwrite...
libredwg:llvmfuzz: Heap-buffer-overflow in json_write_TF
Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6027934943805440 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
OSV-2023-388 Heap-buffer-overflow
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58786 Crash type: Heap-buffer-overflow READ 4 Crash state: NULL...
PT-2023-35822 · Git +1 · Tcmalloc
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported, with a crash state of NULL. This issue was identified through an OSS-Fuzz report. Recommendations:...
OSV-2023-385 Bad-cast to Assimp::BaseImporter from invalid vptr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58724 Crash type: Bad-cast Crash state: Bad-cast to Assimp::BaseImporter from invalid vptr Assimp::Importer::ReadFile Assimp::BatchLoader::LoadAll...
OSV-2023-384 Heap-use-after-free in mrb_str_hash_m
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58723 Crash type: Heap-use-after-free READ 1 Crash state: mrbstrhashm mrbfuncallwithblock mrbfuncallargv...
OSV-2023-383 Security exception in org.json.JSONStringer.value
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58722 Crash type: Security exception Crash state: org.json.JSONStringer.value org.json.JSONArray.writeTo org.json.JSONStringer.beforeValue...
OSV-2023-382 Use-of-uninitialized-value in wabt::BinaryReaderObjdump::PrintInitExpr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58694 Crash type: Use-of-uninitialized-value Crash state: wabt::BinaryReaderObjdump::PrintInitExpr wabt::BinaryReaderObjdump::EndInitExpr wabt::BinaryReaderObjdump::EndGlobalInitExpr...