6546 matches found
GHSA-XG8P-34W2-J49J linked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend`
Impact What kind of vulnerability is it? Who is impacted? This vulnerability impacts all the initialization functions on the Heap and LockedHeap types, including Heap::new, Heap::init, Heap::initfromslice, and LockedHeap::new. It also affects multiple uses of the Heap::extend method. Initializati...
OSV-2022-899 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51390 Crash type: Heap-buffer-overflow READ 7 Crash state: std::1::basicstring, std::1::allocatorch PfxEntry::add AffixMgr::expandrootword...
Explained: Fuzzing for security
Fuzzing, or fuzz testing, is defined as an automated software testing method that uses a wide range of invalid and unexpected data as input to find flaws in the software undergoing the test. The flaws do not necessarily have to be security vulnerabilities. Fuzzing can also bring other undesirable...
OSV-2022-896 Segv on unknown address in Sass::unifyComplex
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51316 Crash type: Segv on unknown address Crash state: Sass::unifyComplex Sass::Extender::extendCompound Sass::Extender::extendComplex...
OSV-2022-892 Segv on unknown address in ddsi_config_init
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51292 Crash type: Segv on unknown address Crash state: ddsiconfiginit fuzzconfiginit.c...
OSV-2022-891 Stack-buffer-overflow in flb_env_var_translate
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51278 Crash type: Stack-buffer-overflow WRITE Crash state: flbenvvartranslate flbparserconffile configrandomfuzzer.c...
OSV-2022-889 Heap-use-after-free in AffixMgr::prefix_check
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51277 Crash type: Heap-use-after-free READ 2 Crash state: AffixMgr::prefixcheck AffixMgr::affixcheck HunspellImpl::checkword...
OSV-2022-883 Segv on unknown address in HashMgr::add_word
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51187 Crash type: Segv on unknown address Crash state: HashMgr::addword HashMgr::loadtables HashMgr::HashMgr...
OSV-2022-882 Use-of-uninitialized-value in SfxEntry::test_condition
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51218 Crash type: Use-of-uninitialized-value Crash state: SfxEntry::testcondition SfxEntry::add AffixMgr::expandrootword...
OSV-2022-881 Heap-use-after-free in AcquireCodePageWithCapacity
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51182 Crash type: Heap-use-after-free READ 8 Crash state: AcquireCodePageWithCapacity CompileElseBlock CompileIf...
OSV-2022-880 Global-buffer-overflow in _getBaseCellNeighbor
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51208 Crash type: Global-buffer-overflow READ 4 Crash state: getBaseCellNeighbor localIjkToCell localIjToCell...
PT-2022-37273 · Git +1 · Hunspell
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash occurs in the HashMgr class, specifically in the add...
OSV-2022-874 UNKNOWN WRITE in from8to16
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51128 Crash type: UNKNOWN WRITE Crash state: from8to16 cmsHandleExtraChannels CachedXFORM...
OSV-2022-868 Heap-buffer-overflow in AffixMgr::redundant_condition
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51124 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::redundantcondition AffixMgr::parseaffix AffixMgr::parsefile...
OSV-2022-865 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51101 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.lang.StringUTF16.newString java.base/java.lang.String.substring...
OSV-2022-866 Stack-buffer-underflow in gs_type2_interpret
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51089 Crash type: Stack-buffer-underflow READ 4 Crash state: gstype2interpret copiedtype1glyphoutline gsdefaultglyphinfo...
OSV-2022-864 Heap-buffer-overflow in SuggestMgr::badcharkey_utf
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51102 Crash type: Heap-buffer-overflow READ 2 Crash state: SuggestMgr::badcharkeyutf SuggestMgr::suggest HunspellImpl::suggestinternal...
OSV-2022-863 Heap-use-after-free in user_wrapper_opendir
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51047 Crash type: Heap-use-after-free READ 10 Crash state: userwrapperopendir phpstreamopendir phpdoopendir...
OSV-2022-861 Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51083 Crash type: Heap-use-after-free READ 8 Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypegeos::geom::Coor geos::geomgraph::NodeMap::addNode geos::operation::overlay::OverlayOp::copyPoints...