hobbes:fuzz-typecheck-expr: Crash in hobbes::castexp::apply

Project: https://github.com/morganstanley/hobbes.git Detailed Report: https://oss-fuzz.com/testcase?key=4848400353525760 Project: hobbes Fuzzing Engine: afl Fuzz Target: fuzz-typecheck-expr Job Type: aflasanhobbes Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x784005ac7000 Crash...

OSV-2026-1196 Heap-buffer-overflow in yylex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=551147457 Crash type: Heap-buffer-overflow WRITE 4 Crash state: yylex yyparse hobbes::runParserOnBuffer...

hobbes:fuzz-parse-expr: Heap-buffer-overflow in yylex

Project: https://github.com/morganstanley/hobbes.git Detailed Report: https://oss-fuzz.com/testcase?key=5314345710714880 Project: hobbes Fuzzing Engine: libFuzzer Fuzz Target: fuzz-parse-expr Job Type: libfuzzerasanhobbes Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

hobbes:fuzz-parse-expr: Stack-buffer-overflow in hobbes::diffRegex

Project: https://github.com/morganstanley/hobbes.git Detailed Report: https://oss-fuzz.com/testcase?key=4831270021693440 Project: hobbes Fuzzing Engine: honggfuzz Fuzz Target: fuzz-parse-expr Job Type: honggfuzzasanhobbes Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

hobbes:fuzz-type-decode: Bad-cast to hobbes::Primitive from hobbes::Switch in std::_Rb_tree<std::shared_ptr<hobbes::Primitive>, std::shared_ptr<hobbes::Primit

Project: https://github.com/morganstanley/hobbes.git Detailed Report: https://oss-fuzz.com/testcase?key=6297348518248448 Project: hobbes Fuzzing Engine: libFuzzer Fuzz Target: fuzz-type-decode Job Type: libfuzzerubsanhobbes Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5c819dfe81e0 Cra...

hobbes:fuzz-type-decode: Heap-buffer-overflow in hobbes::MkRecord::operator==

Project: https://github.com/morganstanley/hobbes.git Detailed Report: https://oss-fuzz.com/testcase?key=4688631038803968 Project: hobbes Fuzzing Engine: libFuzzer Fuzz Target: fuzz-type-decode Job Type: libfuzzerasanhobbes Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

Morgan Stanley Hobbes Out-of-Bounds Read/Write Vulnerability

Morgan Stanley Hobbes is an embedded language compiler and runtime program from Morgan Stanley USA. An out-of-bounds read/write vulnerability exists in Morgan Stanley Hobbes version 2020-05-21 and earlier. The vulnerability stems from a lack of boundary checking in the array implementation. An...

CVE-2020-13656

In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an out-of-bounds OOB read/write vulnerability that leads to both local and remote code via RPC execution...

CVE-2020-13656

In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an out-of-bounds OOB read/write vulnerability that leads to both local and remote code via RPC execution...

Out-of-bounds

In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an out-of-bounds OOB read/write vulnerability that leads to both local and remote code via RPC execution...

CVE-2020-13656

In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an out-of-bounds OOB read/write vulnerability that leads to both local and remote code via RPC execution...

CVE-2020-13656

Morgan Stanley Hobbes contains an out-of-bounds read/write vulnerability in its array implementation, reported up to 2020-05-21. The缺 bound checking flaw allows an attacker to trigger OOB access, enabling code execution via RPC. Affected version details: Hobbes 2020-05-21 and earlier (per CNVD-20...

CVE-2020-13656

In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an out-of-bounds OOB read/write vulnerability that leads to both local and remote code via RPC execution...

CVE-2020-13656: Out-of-bounds Read

In Morgan Stanley Hobbes through 2020-05-21, the array implementation lacks bounds checking, allowing exploitation of an out-of-bounds OOB read/write vulnerability that leads to both local and remote code via RPC execution...

PT-2020-13643

Name of the Vulnerable Software and Affected Versions Morgan Stanley Hobbes versions through 2020-05-21 Description The array implementation in Morgan Stanley Hobbes lacks bounds checking, allowing exploitation of an out-of-bounds OOB read/write issue that leads to both local and remote code...