webp-CVE-2023-4863

libwebp CVE-2023-4863 A Vulnerability to Hack The World - CVE-2023-4863 Finding The .webp Vulnerability in 8s Fuzzing with AFL++...

GHSA-V7G2-M8C5-MF84 ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder

A crafted SVG file containing an malicious element causes ImageMagick to attempt to allocate 674 GB of memory, leading to an out-of-memory abort. Found via AFL++ fuzzing with afl-clang-lto instrumentation and AddressSanitizer...

libvpx:vpx_enc_fuzzer_vp9_nalloc: Use-of-uninitialized-value in vp9_quantize_fp_avx2

Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=6484144678043648 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxencfuzzervp9nalloc Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

Monero: Reported RPC Overflow

A stack buffer overflow was reported in the Monero RPC server. Specifically, on line 1291 of the corerpcserver.cpp file, an overflow could occur if the size of the b.data did not match the size of the crypto::keyimage. Additionally, a missing return statement was found following line 1289. The...

PT-2025-19688 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: libdwg affected versions not specified Description: The software is susceptible to an index-out-of-bounds issue discovered through OSS-Fuzz testing. The crash occurs during the processing of .dwg files, specifically within the dwg decode eed,...

openssl:provider: Null-dereference READ in evp_mac_final

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5110198501965824 Project: openssl Fuzzing Engine: afl Fuzz Target: provider Job Type: aflasanopenssl Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State:...

jq:jq_fuzz_parse_extended: Heap-buffer-overflow in decToString

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=4714293282865152 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzparseextended Job Type: libfuzzerasanjq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x6020000000c0...

spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

Detailed Report: https://oss-fuzz.com/testcase?key=4687415303602176 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

wolfssl:fuzzer-wolfssh-client-randomize: Heap-buffer-overflow in ParseAndVerifyCert

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5451204620058624 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-client-randomize Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

CVE-2022-24668

A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. This vulnerability is caused by a logical error after frame parsing but before frame handlin...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in sc_pkcs15emu_oberthur_add_cert

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6008101662752768 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

Microsoft MsMpEng - Multiple Crashes While Scanning Malformed Files Exploit

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1261 A detailed introduction to MsMpEng can be found in issue 1252 , so I will skip the background story here. Through fuzzing, we have discovered a number of ways to crash the...

Monkey HTTPD 1.1.1 - Denial of Service Vulnerability

Title: ====== Monkey HTTPD 1.1.1 - Denial of Service Vulnerability Date: ===== 2013-05-28 References: =========== http://bugs.monkey-project.com/ticket/181 Introduction: ============= Monkey is a lightweight and powerful web server for GNU/Linux. It has been designed to be very scalable with low...