OSV-2021-1629 Heap-buffer-overflow in Curl_sasl_decode_mech

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41403 Crash type: Heap-buffer-overflow READ 10 Crash state: Curlsasldecodemech Curlsaslparseurlauthoption smtpparseurloptions...

OSV-2021-1628 Stack-buffer-overflow in sprint_realloc_hinted_integer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41372 Crash type: Stack-buffer-overflow WRITE 1 Crash state: sprintreallochintedinteger sprintreallocinteger snprintinteger...

ndpi:fuzz_process_packet: Use-of-uninitialized-value in ndpi_detection_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5005457090019328 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

matio:matio_fuzzer: Use-of-uninitialized-value in Mat_VarReadNumeric5

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=4688024875171840 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5275682339422208 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash...

assimp:assimp_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4520813181665280 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x005b0000006e Crash State: NULL Sanitizer: undefined UBSAN Recommended...

OSV-2021-1625 Heap-buffer-overflow in junkscan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41390 Crash type: Heap-buffer-overflow READ 16 Crash state: junkscan seturl parseurl...

OpenEXR -- Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute

Cary Phillips reports: OpenEXR Version 3.1.4 is a patch release that ... addresses one public security vulnerability: CVE-2021-45942 Heap-buffer-overflow in Imf31::LineCompositeTask::execute and several specific OSS-fuzz issues...

libyang:lyd_parse_mem_xml: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6094793879453696 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememxml Job Type: libfuzzermsanlibyang Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: memory MSAN Crash Revision:...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::packet_analysis::AYIYA::AYIYAAnalyzer::DetectProtocol

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=5513195373068288 Project: zeek Fuzzing Engine: honggfuzz Fuzz Target: zeek-packet-fuzzer Job Type: honggfuzzasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60400160a38...

binutils:fuzz_objdump_safe: Dynamic-stack-buffer-overflow in error_handler_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5014565440585728 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdumpsafe Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 8 Crash Address: 0x7ffdc13ed3b8 Crash State: errorhandlerinternal...

binutils:fuzz_dwarf: Null-dereference READ in load_separate_debug_files

Detailed Report: https://oss-fuzz.com/testcase?key=6117248264175616 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdwarf Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: loadseparatedebugfiles fuzzdwarf.c...

geos:fuzz_geo2: Heap-buffer-overflow in geos::operation::valid::PolygonNode::isInteriorSegment

Detailed Report: https://oss-fuzz.com/testcase?key=5902440944238592 Project: geos Fuzzing Engine: afl Fuzz Target: fuzzgeo2 Job Type: aflasangeos Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6160007da590 Crash State:...

OSV-2021-1615 Heap-buffer-overflow in jxl::ModularFrameDecoder::DecodeGroup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41283 Crash type: Heap-buffer-overflow READ Crash state: jxl::ModularFrameDecoder::DecodeGroup jxl::FrameDecoder::ProcessACGroup jxl::ThreadPool::RunCallStatejxl::FrameDecoder::ProcessSections...

CMSimple 5.4 Local File Inclusion / Remote Code Execution

Exploit Title: CMSimple 5.4 - Local file inclusion LFI to Remote code execution RCE Authenticated Date: 11/15/2021 Exploit Author: S1lv3r Vendor Homepage: https://www.cmsimple.org/en/ Software Link: https://www.cmsimple.org/en/ Version: CMSimple 5.4 Tested on: CMSimple 5.4 writeup:...

matio:matio_fuzzer: Crash in H5MM_memcpy

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6216752220995584 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash...

geos:fuzz_geo2: Heap-buffer-overflow in geos::operation::valid::PolygonNode::quadrant

Detailed Report: https://oss-fuzz.com/testcase?key=6254894818918400 Project: geos Fuzzing Engine: afl Fuzz Target: fuzzgeo2 Job Type: aflasangeos Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x611000004710 Crash State: geos::operation::valid::PolygonNode::quadrant...

OSV-2021-1610 Heap-buffer-overflow in mk_rconf_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41275 Crash type: Heap-buffer-overflow READ 1 Crash state: mkrconfread mkrconfreadglob mkrconfread...

OSV-2021-1607 Container-overflow in void jxl::CopyImageTo<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41235 Crash type: Container-overflow READ 4 Crash state: void jxl::CopyImageTo jxl::ModularFrameDecoder::DecodeGroup jxl::FrameDecoder::ProcessACGroup...

OSV-2021-1606 Segv on unknown address in jxl::N_AVX2::SingleFromSingle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41233 Crash type: Segv on unknown address Crash state: jxl::NAVX2::SingleFromSingle jxl::ThreadPool::SequentialRunnerStatic jxl::ModularFrameDecoder::ModularImageToDecodedRect...