9194 matches found
fieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime
Summary Fuzz testing on crossplane/crossplane, by Ada Logics and sponsored by the CNCF, identified input to a function in the fieldpath package that can cause an out of memory panic. Applications that use the Paved type's SetValue method with user provided input without proper validation might us...
GHSA-VFVJ-3M3G-M532 fieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime
Summary Fuzz testing on crossplane/crossplane, by Ada Logics and sponsored by the CNCF, identified input to a function in the fieldpath package that can cause an out of memory panic. Applications that use the Paved type's SetValue method with user provided input without proper validation might us...
OSV-2023-170 Invalid-free in hb_free_impl
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56952 Crash type: Invalid-free Crash state: hbfreeimpl OT::glyf::freecompiledsubsetglyphs OT::glyf::populatesubsetglyphs...
mruby:mruby_proto_fuzzer: Heap-use-after-free in mrb_gc_mark
Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5450442026123264 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyprotofuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x62f00001c5...
libxml2:html: Global-buffer-overflow in htmlCurrentChar
Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4544440854511616 Project: libxml2 Fuzzing Engine: afl Fuzz Target: html Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000000902283 Crash...
OSV-2023-164 UNKNOWN READ in fp_cmp_mag
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56892 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...
libredwg:llvmfuzz: Heap-buffer-overflow in dwg_decode_LWPOLYLINE_private
Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5561541119574016 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
OSV-2023-162 Global-buffer-overflow in xmlCurrentChar
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56841 Crash type: Global-buffer-overflow READ 1 Crash state: xmlCurrentChar xmlParseNCName xmlParseQName...
croaring:croaring_fuzzer_cc: Heap-buffer-overflow in array_container_to_uint32_array
Project: https://github.com/RoaringBitmap/CRoaring.git Detailed Report: https://oss-fuzz.com/testcase?key=5001666564063232 Project: croaring Fuzzing Engine: libFuzzer Fuzz Target: croaringfuzzercc Job Type: libfuzzerasancroaring Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...
GHSA-V829-X6HH-CQFQ Crossplane-runtime contains Improper Input Validation via Compositions
Summary Fuzz testing, by Ada Logics and sponsored by the CNCF, identified a vulnerability in the fieldpath package from crossplane/crossplane-runtime that an already highly privileged Crossplane user able to create or update Compositions could leverage to cause an out of memory panic in Crossplan...
Crossplane-runtime contains Improper Input Validation via Compositions
Summary Fuzz testing, by Ada Logics and sponsored by the CNCF, identified a vulnerability in the fieldpath package from crossplane/crossplane-runtime that an already highly privileged Crossplane user able to create or update Compositions could leverage to cause an out of memory panic in Crossplan...
cryptofuzz:cryptofuzz-openssl-noasm: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan
Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5544186750566400 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-val...
OSV-2023-160 Global-buffer-overflow in OT::gvar::accelerator_t::apply_deltas_to_points
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56800 Crash type: Global-buffer-overflow READ 2 Crash state: OT::gvar::acceleratort::applydeltastopoints bool OT::glyfimpl::Glyph::getpoints bool OT::glyfimpl::Glyph::getpoints...
OSV-2023-159 UNKNOWN READ in isvce_cabac_flush
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56816 Crash type: UNKNOWN READ Crash state: isvcecabacflush isvcecabacencodeterminate isvceentropy...
OSV-2023-158 Heap-use-after-free in ddsi_type_unref_impl_locked
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56837 Crash type: Heap-use-after-free READ 4 Crash state: ddsitypeunrefimpllocked ddsitypeunreflocked ddsixttypefini...
libreoffice:docxfuzzer: Heap-use-after-free in ZipFile::readExtraFields
Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5255157345812480 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: docxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash...
harfbuzz:hb-draw-fuzzer: Global-buffer-overflow in OT::gvar::accelerator_t::apply_deltas_to_points
Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5953342850596864 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-draw-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash Address:...
OSV-2023-156 Heap-use-after-free in HashMgr::add_word
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56737 Crash type: Heap-use-after-free READ 2 Crash state: HashMgr::addword HashMgr::loadtables HashMgr::HashMgr...
OSV-2023-153 Heap-use-after-free in ucl_hash_func
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56716 Crash type: Heap-use-after-free READ 8 Crash state: uclhashfunc khresizeuclhashnode khputuclhashnode...