Mozilla: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we...

mruby:mruby_proto_fuzzer: Heap-use-after-free in mrb_funcall_with_block

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4972643922608128 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyprotofuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6190000022...

FirmWire -b Full-System Baseband Firmware Emulation Platform For Fuzzing, Debugging, And Root-Cause Analysis Of Smartphone Baseband Firmwares

FirmWire is a full-system baseband firmware analysis platform that supports Samsung and MediaTek. It enables fuzzing, root-cause analysis, and debugging of baseband firmware images. See theFirmWire documentation to get started! Experiments & Missing Parts? Upon a vendor's request, the current...

Security Vulnerabilities fixed in Firefox 100 — Mozilla

When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks. Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the existin...

libdwarf:fuzz_init_path: Global-buffer-overflow in _dwarf_pathjoinl

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=6727387238236160 Project: libdwarf Fuzzing Engine: honggfuzz Fuzz Target: fuzzinitpath Job Type: honggfuzzasanlibdwarf Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Addres...

Hacking Ham Radio: WinAPRS – Part 3

In part two of this series, we reviewed our WinAPRS software and hardware configuration. We then began reverse engineering WinAPRS and fuzzing it for vulnerabilities using modified open-source software. Finally, we identified a potentially exploitable vulnerability. This installment will dig into...

apache-commons-jxpath:JXPathFuzzer: Uncaught exception in org.apache.commons.jxpath.ri.parser.XPathParser.RelativeLocationPath

Detailed Report: https://oss-fuzz.com/testcase?key=4995565894631424 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

PT-2022-36969

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 8 crash was reported. The crash occurred in the lwan h2 huffman decode for fuzzing function, as indicated by the crash state in...

libreoffice:hwpfuzzer: Heap-use-after-free in hstr2OUString

Detailed Report: https://oss-fuzz.com/testcase?key=6557976455938048 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x603000fc9f20 Crash State: hstr2OUString...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::N_SCALAR::DecompressIrrev::transform

Detailed Report: https://oss-fuzz.com/testcase?key=4702266336083968 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::NSCALAR::DecompressIrrev::transform...

snakeyaml:YamlFuzzer: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject

Detailed Report: https://oss-fuzz.com/testcase?key=5427149240139776 Project: snakeyaml Fuzzing Engine: libFuzzer Fuzz Target: YamlFuzzer Job Type: libfuzzerasansnakeyaml Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

snakeyaml:YamlFuzzer: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode

Detailed Report: https://oss-fuzz.com/testcase?key=4626423186325504 Project: snakeyaml Fuzzing Engine: libFuzzer Fuzz Target: YamlFuzzer Job Type: libfuzzerasansnakeyaml Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

imagemagick:encoder_mng_fuzzer: Heap-use-after-free in CloseBlob

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5822757906022400 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encodermngfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-use-after-free READ 8 Cra...

testing-native-go-fuzzing:parser_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5693012748926976 Project: testing-native-go-fuzzing Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasantesting-native-go-fuzzing Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash Stat...

opensc:fuzz_pkcs15_decode: Crash in sc_pkcs15_decode_pubkey_ec

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5015048570929152 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15decode Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x01007fff8000 Crash...

graphicsmagick:coder_MNG_fuzzer: Use-of-uninitialized-value in ReadOnePNGImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5641595402190848 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

tendermint:fuzz_p2p_secretconnection: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6383553220313088 Project: tendermint Fuzzing Engine: libFuzzer Fuzz Target: fuzzp2psecretconnection Job Type: libfuzzerasantendermint Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in krb_parse

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6165308433367040 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60e00000029e...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_object_dtor_unref_single

Detailed Report: https://oss-fuzz.com/testcase?key=6733247125520384 Project: libucl Fuzzing Engine: afl Fuzz Target: ucladdstringfuzzer Job Type: aflasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6020000027a0 Crash State: uclobjectdtorunrefsingle...

opensc:fuzz_pkcs15init: Heap-buffer-overflow in sc_pkcs15init_delete_by_path

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6181807449571328 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs15init Job Type: aflasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x618000003dfe Crash...