canTot

This is a Python-based CLI framework called "canTot" that is designed for CAN Bus hacking and exploitation. It is similar to an exploit framework but focused on known CAN Bus vulnerabilities or "fun CAN Bus hacks." The framework is made up of several modules, each with its own specific...

lucene:IndexSearchFuzzer: Out-of-memory in IndexSearchFuzzer

Project: https://github.com/apache/lucene.git Detailed Report: https://oss-fuzz.com/testcase?key=6299010245459968 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: IndexSearchFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Out-of-memory exceeds 2560 MB Crash Address: Cras...

serenity:FuzzILBMLoader: Heap-buffer-overflow in Gfx::ILBMImageDecoderPlugin::create

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=4676232954118144 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzILBMLoader Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

lucene:IndexSearchFuzzer: Out-of-memory in IndexSearchFuzzer

Project: https://github.com/apache/lucene.git Detailed Report: https://oss-fuzz.com/testcase?key=4862621562830848 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: IndexSearchFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Out-of-memory exceeds 2560 MB Crash Address: Cras...

Utility per LP token can decrease in some cases.

Lines of code Vulnerability details Impact Utility per LP token can decrease in some cases. Proof of Concept The documentation in contest repo states that Within a timeslice a single block, no set of transactions swaps, deposits, withdrawals should result in a decrease of the utility per LP token...

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5O__chunk_protect

Detailed Report: https://oss-fuzz.com/testcase?key=4582680828968960 Project: hdf5 Fuzzing Engine: afl Fuzz Target: h5extendedfuzzer Job Type: aflasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60f0000003c0 Crash State: H5Ochunkprotect H5Ochunkdelete...

pdfbox:PDFStreamParserFuzzer: Security exception in java.base/sun.nio.cs.UTF_8.newDecoder

Detailed Report: https://oss-fuzz.com/testcase?key=5064976463953920 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/sun.nio.cs.UTF8.newDecoder...

spring-boot:ConfigurationMetadataRepositoryJsonBuilderFuzzer: Security exception in org.json.JSONArray.writeTo

Detailed Report: https://oss-fuzz.com/testcase?key=4861338172915712 Project: spring-boot Fuzzing Engine: libFuzzer Fuzz Target: ConfigurationMetadataRepositoryJsonBuilderFuzzer Job Type: libfuzzerasanspring-boot Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

cpython3:fuzz_sre_match: Use-of-uninitialized-value in _PyFunction_FromConstructor

Project: https://github.com/python/cpython.git Detailed Report: https://oss-fuzz.com/testcase?key=5086904889245696 Project: cpython3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzsrematch Job Type: libfuzzermsancpython3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

graphql-java:GraphqlFuzzer: Security exception with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6117259532435456 Project: graphql-java Fuzzing Engine: libFuzzer Fuzz Target: GraphqlFuzzer Job Type: libfuzzerasangraphql-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL Sanitizer: address ASAN Recommended...

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6259571117916160 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5140311566057472 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

Detailed Report: https://oss-fuzz.com/testcase?key=4814061655949312 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

lucene:IndexSearchFuzzer: Security exception in org.apache.lucene.util.automaton.RegExp.parseConcatExp

Detailed Report: https://oss-fuzz.com/testcase?key=5453887879118848 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: IndexSearchFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

PT-2023-35957 · Git +1 · Kimageformats

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap buffer overflow read issue was identified, as reported by OSS-Fuzz. The crash occurred in the QOIHandler::read function, according to the crash...

kimageformats:kimgio_qoi_fuzzer: Heap-buffer-overflow in QOIHandler::read

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6587481511034880 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioqoifuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

async-http-client:AsyncHttpClientFuzzer: Security exception with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5981271741038592 Project: async-http-client Fuzzing Engine: libFuzzer Fuzz Target: AsyncHttpClientFuzzer Job Type: libfuzzerasanasync-http-client Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL Sanitizer: addres...

pdfbox:PDFStreamParserFuzzer: Security exception in org.apache.pdfbox.pdfparser.BaseParser.parseCOSDictionaryNameValuePair

Detailed Report: https://oss-fuzz.com/testcase?key=6347015754481664 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.analysis.sr.SerbianNormalizationFilter.incrementToken

Project: https://github.com/apache/lucene.git Detailed Report: https://oss-fuzz.com/testcase?key=5157331690979328 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

spring-boot:ConfigurationMetadataRepositoryJsonBuilderFuzzer: Security exception in org.json.JSONArray.writeTo

Detailed Report: https://oss-fuzz.com/testcase?key=4867254330982400 Project: spring-boot Fuzzing Engine: libFuzzer Fuzz Target: ConfigurationMetadataRepositoryJsonBuilderFuzzer Job Type: libfuzzerasanspring-boot Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...