llamacpp:fuzz_tokenizer_deepseek_coder: Segv on unknown address in llama_output_reserve

Detailed Report: https://oss-fuzz.com/testcase?key=4908165122031616 Project: llamacpp Fuzzing Engine: libFuzzer Fuzz Target: fuzztokenizerdeepseekcoder Job Type: libfuzzerasanllamacpp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: llamaoutputreserve llamadecode...

DEBIAN-CVE-2024-48426

A segmentation fault SEGV was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an invalid memory address 0x1000c9714971...

PYSEC-2024-293

A segmentation fault SEGV was detected in the Assimp::SplitLargeMeshesProcessTriangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a...

h3:fuzzerPolygonToCellsExperimentalNoHoles: Heap-buffer-overflow in polygonToCellsExperimental

Project: https://github.com/uber/h3.git Detailed Report: https://oss-fuzz.com/testcase?key=6226282003628032 Project: h3 Fuzzing Engine: afl Fuzz Target: fuzzerPolygonToCellsExperimentalNoHoles Job Type: aflasanh3 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

spring-boot:ConfigurationMetadataRepositoryJsonBuilderFuzzer: Security exception in org.json.JSONTokener.nextValue

Detailed Report: https://oss-fuzz.com/testcase?key=6587677827203072 Project: spring-boot Fuzzing Engine: libFuzzer Fuzz Target: ConfigurationMetadataRepositoryJsonBuilderFuzzer Job Type: libfuzzerasanspring-boot Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

SUSE CVE-2022-48992

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: Add NULL check in BE reparenting Add NULL check in dpcmbereparent API, to handle kernel NULL pointer dereference error. The issue occurred in fuzzing test...

CVE-2022-48992

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: Add NULL check in BE reparenting Add NULL check in dpcmbereparent API, to handle kernel NULL pointer dereference error. The issue occurred in fuzzing test...

SUSE CVE-2024-50006

In the Linux kernel, the following vulnerability has been resolved: ext4: fix idatasem unlock order in ext4indmigrate Fuzzing reports a possible deadlock in jbd2logwaitcommit. This issue is triggered when an EXT4IOCMIGRATE ioctl is set to require synchronous updates because the file descriptor is...

CVE-2022-48992

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: Add NULL check in BE reparenting Add NULL check in dpcmbereparent API, to handle kernel NULL pointer dereference error. The issue occurred in fuzzing test...

UBUNTU-CVE-2022-48992

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: Add NULL check in BE reparenting Add NULL check in dpcmbereparent API, to handle kernel NULL pointer dereference error. The issue occurred in fuzzing test...

CVE-2022-48992

CVE-2022-48992 pertains to the Linux kernel: the ASoC subsystem (soc-pcm) BE reparenting path had a NULL pointer dereference risk exposed during fuzzing. The root cause is a missing NULL check in the dpcm_be_reparent API, which could lead to kernel NULL pointer dereference. The fix adds an explic...

CVE-2022-48992 ASoC: soc-pcm: Add NULL check in BE reparenting

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: Add NULL check in BE reparenting Add NULL check in dpcmbereparent API, to handle kernel NULL pointer dereference error. The issue occurred in fuzzing test...

AZL-52126 CVE-2024-50006 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: ext4: fix idatasem unlock order in ext4indmigrate Fuzzing reports a possible deadlock in jbd2logwaitcommit. This issue is triggered when an EXT4IOCMIGRATE ioctl is set to require synchronous updates because the file descriptor is...

UBUNTU-CVE-2024-50006

In the Linux kernel, the following vulnerability has been resolved: ext4: fix idatasem unlock order in ext4indmigrate Fuzzing reports a possible deadlock in jbd2logwaitcommit. This issue is triggered when an EXT4IOCMIGRATE ioctl is set to require synchronous updates because the file descriptor is...

pcre2:pcre2_fuzzer_4l: Use-of-uninitialized-value in jit_compile

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed Report: https://oss-fuzz.com/testcase?key=6060318117134336 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer4l Job Type: libfuzzermsanpcre2 Platform Id: linux Crash Type:...

mruby:mruby_fuzzer: Crash in mrb_bint_2comp

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5364806959300608 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x56c81d78c67c Crash State:...

h3:fuzzerPolygonToCellsExperimental: Heap-buffer-overflow in polygonToCellsExperimental

Project: https://github.com/uber/h3.git Detailed Report: https://oss-fuzz.com/testcase?key=4869048531222528 Project: h3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzerPolygonToCellsExperimental Job Type: libfuzzerasanh3 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

edk2:TestPeiUsb: Stack-buffer-overflow in GetExpectedDescriptor

Detailed Report: https://oss-fuzz.com/testcase?key=4753026965897216 Project: edk2 Fuzzing Engine: libFuzzer Fuzz Target: TestPeiUsb Job Type: libfuzzerasanedk2 Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7d4eb80119c3 Crash State: GetExpectedDescriptor...

Stable Channel Update for Desktop

The Stable channel has been updated to 129.0.6668.100/.101 for Windows, Mac and 129.0.6668.100 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

imagemagick:encoder_tiff_fuzzer: Heap-buffer-overflow in putcontig8bitYCbCr22tile

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5312182553739264 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertifffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...