Mozilla: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11

The Mozilla Foundation Security Advisory describes this flaw as: The Mozilla Fuzzing Team reporting potential vulnerabilities present in Firefox 101 and Firefox ESR 91.10. Some of these bugs showed evidence of memory corruption, and we presume that with enough effort, some of these could have bee...

freetype2:cff: Use-of-uninitialized-value in tt_apply_mvar

Detailed Report: https://oss-fuzz.com/testcase?key=5872154513637376 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: cff Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ttapplymvar cffmetricsadjust...

apache-commons-configuration:YAMLConfigurationWriteFuzzer: Uncaught exception in org.yaml.snakeyaml.constructor.SafeConstructor$ConstructYamlMap.construct

Detailed Report: https://oss-fuzz.com/testcase?key=5765799788281856 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

graphicsmagick:coder_BIGTIFF_fuzzer: Use-of-uninitialized-value in AssociateAlphaRegion

Detailed Report: https://oss-fuzz.com/testcase?key=4770230422863872 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderBIGTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: AssociateAlphaRegion...

Security Vulnerabilities fixed in Firefox 102 — Mozilla

A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks. This bug only affects Firefox for Linux. Other operating systems are unaffected. Session history navigations may...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.CommentsInserter.insertComments

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6284278100525056 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

ruby:fuzz_ruby_gems: Use-after-poison in rb_str_format

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4825843578306560 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzrubygems Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7f6fcaef2db0 Crash...

ruby:fuzz_ruby_gems: Use-after-poison in rb_num2long

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4524954906918912 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzrubygems Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7f06749e2c68 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_fuzzer: Heap-buffer-overflow in dng_decode_jpeg

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6149705769287680 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDTIFFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x6290000092...

GooFuzz - Tool To Perform Fuzzing With An OSINT Approach, Managing To Enumerate Directories, Files, Subdomains Or Parameters Without Leaving Evidence On The Target's Server With Google Dorking

Credits Author: M3n0sD0n4ld Twitter: @DavidUton Description: GooFuzz is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories without making requests to the web server. Download and install: $ git clone...

rdkit:smiles_string_to_mol_fuzzer: Object-size in SmilesParseOps::parser::finalizePolymerSGroup

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4786987247206400 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Object-size Crash Address: Crash State:...

duckdb:parse_fuzz_test: Stack-buffer-overflow in duckdb::utf8proc_next_grapheme

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=5082369452802048 Project: duckdb Fuzzing Engine: honggfuzz Fuzz Target: parsefuzztest Job Type: honggfuzzasanduckdb Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

duckdb:parse_fuzz_test: Segv on unknown address in duckdb::ExpressionBinder::BindExpression

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=4806399030329344 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: parsefuzztest Job Type: libfuzzerasanduckdb Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

libical:libical_fuzzer: Stack-buffer-overflow in simple_str_to_doublestr

Project: https://github.com/libical/libical.git Detailed Report: https://oss-fuzz.com/testcase?key=6656638058102784 Project: libical Fuzzing Engine: afl Fuzz Target: libicalfuzzer Job Type: aflasanlibical Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7fffdf0a53c0...

systemd:fuzz-network-parser: Heap-double-free in config_parse_nft_set_context

Detailed Report: https://oss-fuzz.com/testcase?key=5385039841460224 Project: systemd Fuzzing Engine: afl Fuzz Target: fuzz-network-parser Job Type: aflasansystemd Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x6030000001c0 Crash State: configparsenftsetcontext...

systemd:fuzz-network-parser: Heap-double-free in nft_set_context_free_many

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=6592078156529664 Project: systemd Fuzzing Engine: honggfuzz Fuzz Target: fuzz-network-parser Job Type: honggfuzzasansystemd Platform Id: linux Crash Type: Heap-double-free Crash Address:...

libzmq:test_connect_ws_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4893005077676032 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testconnectwsfuzzer Job Type: libfuzzerasanlibzmq Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Regressed:...

ffmpeg:ffmpeg_AV_CODEC_ID_MPEG4_fuzzer: Heap-buffer-overflow in avg_qpel16_mc01_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5745039940124672 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMPEG4fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7f28ab09b8...

tmux:input-fuzzer: Index-out-of-bounds in input_osc_52

Project: https://github.com/tmux/tmux.git Detailed Report: https://oss-fuzz.com/testcase?key=5346807518986240 Project: tmux Fuzzing Engine: libFuzzer Fuzz Target: input-fuzzer Job Type: libfuzzerubsantmux Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: inputosc52...

ffmpeg:ffmpeg_AV_CODEC_ID_CDGRAPHICS_fuzzer: Heap-buffer-overflow in cdg_scroll

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5690504626438144 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDCDGRAPHICSfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...