Integer overflow

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-encoded header block. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. There are a number of implementation errors in the parsing of...

CVE-2022-24668

CVE-2022-24668 affects the Swift NIO HTTP/2 library (swift-nio-http2) across versions 1.0.0–1.19.1. The root cause is a logic error after frame parsing but before frame handling: ALTSVC and ORIGIN frames, which are not supported, are mishandled via a trap in one code path. This can be exploited b...

CVE-2022-24666

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS fram...

php:php-fuzz-function-jit: Segv on unknown address in zero

Detailed Report: https://oss-fuzz.com/testcase?key=5118775668637696 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: zero zendexecute fuzzerdorequestfrombuffer...

curl:curl_fuzzer_http: Heap-use-after-free in nghttp2_http_record_request_method

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6172464089006080 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerhttp Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf6a03644 Cra...

testing-native-go-fuzzing:fuzz_equals_sql_node: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5697531139457024 Project: testing-native-go-fuzzing Fuzzing Engine: libFuzzer Fuzz Target: fuzzequalssqlnode Job Type: libfuzzerasantesting-native-go-fuzzing Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000035cf4028 Crash State:...

CVE-2022-23594

Tensorflow is an Open Source Machine Learning Framework. The TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect. If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef i...

Stack overflow

Tensorflow is an Open Source Machine Learning Framework. The TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect. If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef i...

CVE-2022-23594 Out of bounds read in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. The TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect. If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef i...

CVE-2022-23594

Tensorflow is an Open Source Machine Learning Framework. The TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect. If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef i...

argo:fuzz_workflow_controller: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4815348191330304 Project: argo Fuzzing Engine: libFuzzer Fuzz Target: fuzzworkflowcontroller Job Type: libfuzzerasanargo Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00001c1df21e Crash State: NULL Sanitizer: address ASAN Recommend...

vlc:vlc-demux-dec-libfuzzer: Heap-buffer-overflow in FragPrepareChunk

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=4712438409330688 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x603000011a90 Cra...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6613347716431872 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

json-java:JsonJavaFuzzer: Uncaught exception in org.json.JSONArray.write

Project: https://github.com/stleary/JSON-java.git Detailed Report: https://oss-fuzz.com/testcase?key=5900100319182848 Project: json-java Fuzzing Engine: libFuzzer Fuzz Target: JsonJavaFuzzer Job Type: libfuzzerasanjson-java Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

unicorn:fuzz_emu_arm_armbe: Crash in helper_uc_tracecode

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5268304019718144 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarmarmbe Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00017fff80...

rdkit:smiles_string_to_mol_fuzzer: Use-of-uninitialized-value in bool SmilesParseOps::parser::parse_polymer_sgroup<std::__1::__wrap_iter<char con

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4703327693176832 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

bls-signatures:cryptofuzz-bls-signatures_optimize_size: Use-of-uninitialized-value in cryptofuzz::module::blst_detail::OpBignumCalc_prime

Project: https://github.com/Chia-Network/bls-signatures.git Detailed Report: https://oss-fuzz.com/testcase?key=5684624024535040 Project: bls-signatures Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-bls-signaturesoptimizesize Job Type: libfuzzermsanbls-signatures Platform Id: linux Crash Type:...

cryptofuzz:cryptofuzz-boringssl-noasm: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6563374131970048 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type:...

xpdf:fuzz_pdfload: Heap-buffer-overflow in Catalog::getPage

Detailed Report: https://oss-fuzz.com/testcase?key=6735595475435520 Project: xpdf Fuzzing Engine: honggfuzz Fuzz Target: fuzzpdfload Job Type: honggfuzzasanxpdf Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60200001e648 Crash State: Catalog::getPage PDFDoc::getLinks...

clamav:clamav_dbload_YARA_fuzzer: Heap-buffer-overflow in cli_strlcat

Detailed Report: https://oss-fuzz.com/testcase?key=6593555471138816 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadYARAfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x602000959531 Crash State: clistrlcat yarayyparse...