fluent-bit:flb-it-fuzz-config_fuzzer_OSSFUZZ: Heap-buffer-overflow in mk_rconf_read

Detailed Report: https://oss-fuzz.com/testcase?key=5058465710604288 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62100000a0ff Crash State:...

gdal:gdal_filesystem_fuzzer: Heap-buffer-overflow in GRIBRasterBand::IReadBlock

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6667229731618816 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

CVE-2021-42114

Modern DRAM devices PC-DDR4, LPDDR4X are affected by a vulnerability in their internal Target Row Refresh TRR mitigation against Rowhammer attacks. Novel non-uniform Rowhammer access patterns, consisting of aggressors with different frequencies, phases, and amplitudes allow triggering bit flips o...

Privilege escalation

Modern DRAM devices PC-DDR4, LPDDR4X are affected by a vulnerability in their internal Target Row Refresh TRR mitigation against Rowhammer attacks. Novel non-uniform Rowhammer access patterns, consisting of aggressors with different frequencies, phases, and amplitudes allow triggering bit flips o...

CVE-2021-42114

CVE-2021-42114 (Blacksmith) affects modern DRAM (PC‑DDR4, LPDDR4X) where TRR mitigations can be bypassed by non‑uniform memory access patterns. ETH Zurich et al. demonstrated a fuzzer (Blacksmith) that triggered bit flips across 40 DRAM devices from major vendors (Samsung, SK Hynix, Micron), enab...

gdal:gml_geom_import_fuzzer: Heap-double-free in Curl_close

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4538384865951744 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: gmlgeomimportfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x617000047580 Crash...

graphicsmagick:coder_J2C_fuzzer: Segv on unknown address in jpc_pchglist_destroy

Detailed Report: https://oss-fuzz.com/testcase?key=6230132319191040 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJ2Cfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: jpcpchglistdestroy...

tdengine:sql-fuzzer: Crash in unsigned long fuzzer::ForEachNonZeroByte<unsigned long fuzzer::TracePC::CollectF

Detailed Report: https://oss-fuzz.com/testcase?key=4876134148341760 Project: tdengine Fuzzing Engine: libFuzzer Fuzz Target: sql-fuzzer Job Type: libfuzzerubsantdengine Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x01cf572c0000 Crash State: unsigned long...

libbpf:bpf-object-fuzzer: Heap-buffer-overflow in __bpf_object__open

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=5747922482888704 Project: libbpf Fuzzing Engine: afl Fuzz Target: bpf-object-fuzzer Job Type: aflasanlibbpf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x603000000118...

libbpf:bpf-object-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6033144516575232 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerubsanlibbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f640000002b Crash State: NULL Sanitizer: undefined UBSAN...

libbpf:bpf-object-fuzzer: Use-of-uninitialized-value in __bpf_object__open

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6255174864207872 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzermsanlibbpf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

kernel: System crash in intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c

A flaw was found in the Linux kernel. On some Haswell CPUs, userspace applications such as perf-fuzzer can cause a system crash because the PEBS status in a PEBS record is mishandled...

zlog 1.2.15 Buffer Overflow

Exploit Title: zlog 1.2.15 - Buffer Overflow Date: 10/23/2021 Exploit Author: LIWEI Vendor Homepage: https://github.com/HardySimpson/zlog Software Link: https://github.com/HardySimpson/zlog Version: v1.2.15 Tested on: ubuntu 18.04.2 1.- compile the zlogv1.2.15 code to a library. 2.- Use the...

libbpf:bpf-object-fuzzer: Heap-buffer-overflow in bpf_object__section_to_libbpf_map_type

Detailed Report: https://oss-fuzz.com/testcase?key=4819294802804736 Project: libbpf Fuzzing Engine: afl Fuzz Target: bpf-object-fuzzer Job Type: aflasanlibbpf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6140000df8c8 Crash State: bpfobjectsectiontolibbpfmaptype...

libbpf:bpf-object-fuzzer: Heap-use-after-free in bpf_object__init_user_maps

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=4927709692690432 Project: libbpf Fuzzing Engine: afl Fuzz Target: bpf-object-fuzzer Job Type: aflasanlibbpf Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x612000092684 Cras...

openexr:openexr_exrcheck_fuzzer: Crash in Imf_3_1::DeepTiledInputFile::readPixelSampleCounts

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=4614577267015680 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcheckfuzzer Job Type: libfuzzerubsanopenexr Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

tdengine:sql-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6237391300460544 Project: tdengine Fuzzing Engine: libFuzzer Fuzz Target: sql-fuzzer Job Type: libfuzzerubsantdengine Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0b007357c304 Crash State: NULL Sanitizer: undefined UBSAN Recommend...

libexif:exif_from_data_fuzzer: Use-of-uninitialized-value in exif_entry_fix

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=4872157730045952 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exiffromdatafuzzer Job Type: libfuzzermsanlibexif Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

freeimage:load_from_memory_fuzzer: Crash in _MemoryReadProc

Detailed Report: https://oss-fuzz.com/testcase?key=5164860086812672 Project: freeimage Fuzzing Engine: afl Fuzz Target: loadfrommemoryfuzzer Job Type: aflasanfreeimage Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x605fff001120 Crash State: MemoryReadProc...

ASB-A-191444150

In rwt4tsmdetectndef of rwt4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure due to a limited change in behavior based on the out of bounds data with no additional execution privileges needed. User interaction is not...