kimageformats:kimgio_ora_fuzzer: Dynamic-stack-buffer-overflow in QHash<QString, KArchiveEntry*>::const_iterator::const_iterator

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5156923753234432 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioorafuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 8 Crash Addres...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-use-after-free in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSJObjBtreeNode>::

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5594044976726016 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsapfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-buffer-overflow in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSBtreeNode<apfs_o

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4864418583281664 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsapfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Cras...

lodepng:lodepng_fuzzer: Dynamic-stack-buffer-overflow in std::__1::__wrap_iter<unsigned char*>::__wrap_iter

Project: https://github.com/lvandeve/lodepng.git Detailed Report: https://oss-fuzz.com/testcase?key=5171113607954432 Project: lodepng Fuzzing Engine: afl Fuzz Target: lodepngfuzzer Job Type: aflasanlodepng Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 8 Crash Address:...

sql-parser:fuzz_sql_parse: Dynamic-stack-buffer-overflow in std::__1::__wrap_iter<hsql::Expr**>::__wrap_iter

Project: https://github.com/hyrise/sql-parser.git Detailed Report: https://oss-fuzz.com/testcase?key=6653515308072960 Project: sql-parser Fuzzing Engine: afl Fuzz Target: fuzzsqlparse Job Type: aflasansql-parser Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 8 Crash Address:...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.JSONPath.deepScan

Detailed Report: https://oss-fuzz.com/testcase?key=5823969121927168 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.deepScan...

Updated librsvg packages fix a security vulnerability

This update patches the vendored smallvec Rust crate in librsvg to fix a security vulnerability: The Iterator implementation mishandles destructors, leading to a double free CVE-2021-25900...

go-json-iterator:fuzz_json: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5305722079412224 Project: go-json-iterator Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzerasango-json-iterator Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Cra...

XStream: Unsafe deserizaliation of com.sun.tools.javac.processing.JavacProcessingEnvironment NameProcessIterator

A flaw was found in xstream. A remote attacker may be able to load and execute arbitrary code from a remote host only by manipulating the processed input stream. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Crash in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSBtreeNode<apfs_o

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5125802023845888 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62100001653f...

go-json-iterator:fuzz_json: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4548583476035584 Project: go-json-iterator Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzerasango-json-iterator Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Cra...

In the standard library in Rust before 1.52.0 the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again.

...

In the standard library in Rust before 1.51.0 the Zip implementation calls __iterator_get_unchecked() for the same index more than once when nested. This bug can lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.

...

CVE-2021-28879

In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again...

In the standard library in Rust before 1.52.0 a double free can occur in the Vec::from_iter function if freeing the element panics.

...

Rust Buffer Overflow Vulnerability (CNVD-2021-31918)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in reorder crate for Rust 2021-02-24 and earlier versions, which stems from a swap index write operation that oversteps its bounds if the len returned by the iterator is to...

Rust buffer overflow vulnerability (CNVD-2021-29835)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in reorder crate for Rust 2021-02-24 and earlier, which stems from the fact that swapindex may return uninitialized values if the len returned by the iterator is too large...

ALPINE-CVE-2021-31162

In the standard library in Rust before 1.52.0, a double free can occur in the Vec::fromiter function if freeing the element panics...

draco:draco_pc_decoder_fuzzer: Heap-use-after-free in std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st

Project: https://github.com/google/draco.git Detailed Report: https://oss-fuzz.com/testcase?key=5214384524754944 Project: draco Fuzzing Engine: libFuzzer Fuzz Target: dracopcdecoderfuzzer Job Type: libfuzzerasandraco Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

Rust 资源管理错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in the standard library in versions of Rust prior to 1.53.0, which stems from a double release that occurs in the Vec::fromiter function. No details of the...