OSV-2022-702 Heap-double-free in ada_fuzz_header.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50042 Crash type: Heap-double-free Crash state: adafuzzheader.h snmpfreepdu snmpapifuzzer.c...

net-snmp:snmp_api_fuzzer: Heap-double-free in ada_fuzz_header.h

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5357436638199808 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpapifuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

OSV-2022-698 Heap-buffer-overflow in i2c_ASN1_INTEGER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49963 Crash type: Heap-buffer-overflow READ 1 Crash state: i2cASN1INTEGER bni2c asn1exi2c...

The Race to Secure eBPF for Windows

The Race to Secure eBPF for Windows By Trellix · August 11, 2022 This blog was written by Douglas McKee Innovation often improves functionality and even security; however, adoption starts slow. Adoption often doesn’t increase at a linear rate but at an exponential rate leaving behind attack...

The Race to Secure eBPF for Windows

The Race to Secure eBPF for Windows By Trellix · August 11, 2022 This blog was written by Douglas McKee Innovation often improves functionality and even security; however, adoption starts slow. Adoption often doesn’t increase at a linear rate but at an exponential rate leaving behind attack...

OSV-2022-696 Use-of-uninitialized-value in mix_add_scale_stride

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49921 Crash type: Use-of-uninitialized-value Crash state: mixaddscalestride crasmixaddscalestride crasaudioareacopy...

OSV-2022-695 Segv on unknown address in ndpi_free_flow_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49906 Crash type: Segv on unknown address Crash state: ndpifreeflowdata ndpiflowfree processndpicollectedinfo...

OSV-2022-691 Heap-buffer-overflow in dissect_softether_host_fqdn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49901 Crash type: Heap-buffer-overflow READ 1 Crash state: dissectsoftetherhostfqdn ndpisearchsoftether checkndpidetectionfunc...

PT-2022-37172 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash involves several functions, including...

OSV-2022-686 Heap-use-after-free in FT_Stream_ReadULong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49859 Crash type: Heap-use-after-free READ 1 Crash state: FTStreamReadULong sfntinitface ttfaceinit...

OSV-2022-684 Heap-buffer-overflow in pdfi_load_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49847 Crash type: Heap-buffer-overflow READ 8 Crash state: pdfiloadfont pdfiloaddictfont pdfiTf...

OSV-2022-681 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49858 Crash type: Uncaught exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.io.StringReader.ensureOpen java.base/java.io.StringReader.read...

OSV-2022-680 Heap-use-after-free in UA_Server_networkCallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49836 Crash type: Heap-use-after-free READ 4 Crash state: UAServernetworkCallback fuzzbinarymessage.cc UAmemoryManagerfree...

OSV-2022-679 Heap-buffer-overflow in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49845 Crash type: Heap-buffer-overflow WRITE 4 Crash state: udiv mrbbintmod intmod...

OSV-2022-676 Heap-use-after-free in archive_read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49840 Crash type: Heap-use-after-free READ Crash state: archivereaddata libarchivefuzzer.cc processheadfile...

PT-2022-37167 · Git +1 · Open62541

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 4 crash has been reported. The crash involves the UA Server networkCallback function and the fuzz binary message.cc file, with...

mruby:mruby_proto_fuzzer: Heap-buffer-overflow in udiv

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6447236036296704 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

Rust-WebSocket memory allocation based on untrusted length

Impact Untrusted websocket connections can cause an out-of-memory OOM process abort in a client or a server. The root cause of the issue is during dataframe parsing. Affected versions would allocate a buffer based on the declared dataframe size, which may come from an untrusted source. When...

GHSA-QRJV-RF5Q-QPXC Rust-WebSocket memory allocation based on untrusted length

Impact Untrusted websocket connections can cause an out-of-memory OOM process abort in a client or a server. The root cause of the issue is during dataframe parsing. Affected versions would allocate a buffer based on the declared dataframe size, which may come from an untrusted source. When...

OSV-2022-675 Heap-buffer-overflow in void RDKit::ParseV3000AtomProps<std::__1::vector<std::__1::basic_string_view<cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49783 Crash type: Heap-buffer-overflow READ 1 Crash state: void RDKit::ParseV3000AtomPropsstd::1::vectorstd::1::basicstringviewcha RDKit::ParseV3000AtomBlock RDKit::FileParserUtils::ParseV3000CTAB...