CVE-2021-0959

In jitmemoryregion.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID:...

CVE-2021-0959

In jitmemoryregion.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID:...

php:php-fuzz-tracing-jit: Segv on unknown address in zero

Detailed Report: https://oss-fuzz.com/testcase?key=5098168402968576 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-tracing-jit Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: zero zendexecute fuzzerdorequestfrombuffer...

PT-2022-9138

Name of the Vulnerable Software and Affected Versions Android versions Android-12 Description The issue is caused by a logic error in the code of jit memory region.cc, which could lead to a bypass of memory restrictions. This could result in local escalation of privilege, with user execution...

openSUSE 15 Security Update : MozillaThunderbird (openSUSE-SU-2021:1635-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1635-1 advisory. - An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failures in JITted code...

PT-2021-27999

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 4 crash has been reported. The crash state includes zend jit fetch dim r helper, zero, and zend execute. No information is...

php:php-fuzz-function-jit: Heap-use-after-free in zend_jit_fetch_dim_r_helper

Detailed Report: https://oss-fuzz.com/testcase?key=5513940338081792 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x606000011c68 Crash State: zendjitfetchdimrhelper zero...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2021:4150-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4150-1 advisory. - Update to version 91.4 MFSA 2021-54 bsc1193485 - CVE-2021-43536: URL leakage when navigating while executing asynchronous function -...

php:php-fuzz-tracing-jit: Heap-use-after-free in zend_hash_reverse_apply

Detailed Report: https://oss-fuzz.com/testcase?key=6650085318983680 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf47098f4 Crash State: zendhashreverseapply...

php:php-fuzz-tracing-jit: Crash in zend_unclean_zval_ptr_dtor

Detailed Report: https://oss-fuzz.com/testcase?key=6478236563931136 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f98bbe92800 Crash State: zenduncleanzvalptrdtor zendhashdelelex...

php:php-fuzz-tracing-jit: Segv on unknown address in zero

Detailed Report: https://oss-fuzz.com/testcase?key=5995746541830144 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: zero zendexecute fuzzerdorequestfrombuffer...

php:php-fuzz-function-jit: Crash in zero

Detailed Report: https://oss-fuzz.com/testcase?key=6415004149088256 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00010a4d1dbf Crash State: zero zendexecute fuzzerdorequestfrombuff...

php:php-fuzz-function-jit: Heap-use-after-free in zend_jit_fetch_dim_w_helper

Detailed Report: https://oss-fuzz.com/testcase?key=5155906311028736 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x606000011f08 Crash State: zendjitfetchdimwhelper zero...

php:php-fuzz-tracing-jit: Heap-use-after-free in zend_jit_fast_concat_tmp_helper

Detailed Report: https://oss-fuzz.com/testcase?key=5746907494875136 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xda80080c Crash State: zendjitfastconcattmphelper...

php:php-fuzz-function-jit: Segv on unknown address in ZEND_FREE_SPEC_TMPVAR_HANDLER

Detailed Report: https://oss-fuzz.com/testcase?key=4604600544526336 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: ZENDFREESPECTMPVARHANDLER fuzzerexecuteex...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2021:3969-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3969-1 advisory. The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed:...

php:php-fuzz-tracing-jit: Heap-use-after-free in ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_CONST_HANDLER

Detailed Report: https://oss-fuzz.com/testcase?key=6660036808540160 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x60d000000bb0 Crash State:...

php:php-fuzz-function-jit: Segv on unknown address in zend_fetch_debug_backtrace

Detailed Report: https://oss-fuzz.com/testcase?key=6102401535311872 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-function-jit Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: zendfetchdebugbacktrace...

Updated php packages fix security vulnerability

Header injection via defaultmimetype / defaultcharset mbstring may use pointer from some previous request Unexpected behavior with arrays and JIT Special character is breaking the path in xml function CVE-2021-21707 XMLReader::getParserProperty may throw with a valid property...

php:php-fuzz-tracing-jit: Heap-use-after-free in zval_ptr_dtor_nogc

Detailed Report: https://oss-fuzz.com/testcase?key=5757745240866816 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6060000125c0 Crash State: zvalptrdtornogc...