harfbuzz:hb-shape-fuzzer: Heap-buffer-overflow in OT::hb_ot_apply_context_t::skipping_iterator_t::next

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5317682696421376 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-shape-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x616000001b...

PT-2022-35001 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the use of an unlocked iterator in the SDMA update of the drm/amdgpu module. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

Nginx 资源管理错误漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx, Inc. njs is one of the scripting language components that supports extended NGINX functionality. A security vulnerability exists in Nginx NJS version 0.7.2, which stems from heap-based...

PT-2022-5322 · Nginx · Nginx Njs

Name of the Vulnerable Software and Affected Versions: Nginx NJS version 0.7.2 Description: The issue is related to a heap-use-after-free bug caused by an illegal memory copy in the njs json parse iterator call function at njs json.c. This bug can be exploited by a remote attacker to execute...

go-json-iterator:fuzz_json: Crash in reflect.Value.Elem

Detailed Report: https://oss-fuzz.com/testcase?key=4977879394156544 Project: go-json-iterator Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzerasango-json-iterator Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00001e46dafc Crash State: reflect.Value.Elem Sanitizer...

PT-2022-37319 · Git +1 · Skia

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the SkPath::Iter::next function, SkStroke::strokePat...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-buffer-overflow in APFSBtreeNodeIterator<APFSBtreeNode<apfs_omap_key, apfs_omap_value> > APFSBtreeN

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5267986709086208 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

libvpx:vpx_dec_fuzzer_vp9: Segv on unknown address in std::__Fuzzer::pair<std::__Fuzzer::__hash_iterator<std::__Fuzzer::__hash_node<st

Detailed Report: https://oss-fuzz.com/testcase?key=5824217953730560 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxdecfuzzervp9 Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

GSD-2022-1003905 f2fs: fix dereference of stale list iterator after loop body

f2fs: fix dereference of stale list iterator after loop body This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003742 f2fs: fix dereference of stale list iterator after loop body

f2fs: fix dereference of stale list iterator after loop body This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003561 f2fs: fix dereference of stale list iterator after loop body

f2fs: fix dereference of stale list iterator after loop body This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003325 f2fs: fix dereference of stale list iterator after loop body

f2fs: fix dereference of stale list iterator after loop body This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003031 f2fs: fix dereference of stale list iterator after loop body

f2fs: fix dereference of stale list iterator after loop body This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002690 f2fs: fix dereference of stale list iterator after loop body

f2fs: fix dereference of stale list iterator after loop body This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002652 misc: fastrpc: fix list iterator in fastrpc_req_mem_unmap_impl

misc: fastrpc: fix list iterator in fastrpcreqmemunmapimpl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-32168

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a dereference of a stale list iterator after a loop body in the f2fs component. This problem was introduced in version v4.12 and is fixed in version v4.19.247. The...

PT-2022-32005

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description A potential issue exists due to the dereference of a stale list iterator after a loop body. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-31824

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to a dereference of a stale list iterator after a loop body in the f2fs component. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-31588

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a dereference of a stale list iterator after a loop body in the f2fs component. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-31294

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to a dereference of a stale list iterator after a loop body in the f2fs component. The actual impact and attack plausibility have not yet been proven. Recommendations For...