bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

llvm:clang-fuzzer: Heap-use-after-free in clang::Parser::ParseCastExpression

Detailed Report: https://oss-fuzz.com/testcase?key=4707380489420800 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x50600000dd20 Crash State: clang::Parser::ParseCastExpression...

llvm:clang-fuzzer: Use-after-poison in GetFullTypeForDeclarator

Detailed Report: https://oss-fuzz.com/testcase?key=6543921859854336 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Use-after-poison WRITE 16 Crash Address: 0x52100009b160 Crash State: GetFullTypeForDeclarator...

CVE-2024-37880

The Kyber reference implementation before 9b8d306, when compiled by LLVM Clang through 18.x with some common optimization options, has a timing side channel that allows attackers to recover an ML-KEM 512 secret key in minutes. This occurs because polyfrommsg in poly.c does not prevent Clang from...

CVE-2024-37880

The Kyber reference implementation before 9b8d306, when compiled by LLVM Clang through 18.x with some common optimization options, has a timing side channel that allows attackers to recover an ML-KEM 512 secret key in minutes. This occurs because polyfrommsg in poly.c does not prevent Clang from...

CVE-2024-37880: Observable Discrepancy

The Kyber reference implementation before 9b8d306, when compiled by LLVM Clang through 18.x with some common optimization options, has a timing side channel that allows attackers to recover an ML-KEM 512 secret key in minutes. This occurs because polyfrommsg in poly.c does not prevent Clang from...

CVE-2024-37880

The CVE affects the Kyber reference implementation prior to 9b8d306. The vulnerability is a timing side channel where poly_frommsg in poly.c can yield a vulnerable secret-dependent branch when compiled with LLVM Clang (through 18.x) with common optimizations, enabling attackers to recover an ML-K...

CVE-2024-37880

The Kyber reference implementation before 9b8d306, when compiled by LLVM Clang through 18.x with some common optimization options, has a timing side channel that allows attackers to recover an ML-KEM 512 secret key in minutes. This occurs because polyfrommsg in poly.c does not prevent Clang from...

llvm:clang-objc-fuzzer: Use-of-uninitialized-value in clang::CharLiteralParser::CharLiteralParser

Detailed Report: https://oss-fuzz.com/testcase?key=6599944396210176 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::CharLiteralParser::CharLiteralParser...

llvm:clang-objc-fuzzer: Use-of-uninitialized-value in clang::StringLiteralParser::init

Detailed Report: https://oss-fuzz.com/testcase?key=5743921619140608 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::StringLiteralParser::init...

llvm:clang-fuzzer: Use-of-uninitialized-value in X86_64ABIInfo::computeInfo

Detailed Report: https://oss-fuzz.com/testcase?key=4905123874209792 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: X8664ABIInfo::computeInfo...

llvm:clang-fuzzer: Heap-use-after-free in clang::Sema::CppLookupName

Detailed Report: https://oss-fuzz.com/testcase?key=4833803916935168 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x615000006c08 Crash State: clang::Sema::CppLookupName...

llvm:clang-fuzzer: Segv on unknown address in clang::Expr::skipRValueSubobjectAdjustments

Detailed Report: https://oss-fuzz.com/testcase?key=4893097812295680 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Expr::skipRValueSubobjectAdjustments...

llvm:clang-fuzzer: Segv on unknown address in clang::FunctionProtoType::FunctionProtoType

Detailed Report: https://oss-fuzz.com/testcase?key=5650857535471616 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::FunctionProtoType::FunctionProtoType...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::getCurBlock

Detailed Report: https://oss-fuzz.com/testcase?key=5718959311814656 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::getCurBlock...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::getCurLambda

Detailed Report: https://oss-fuzz.com/testcase?key=5639017945366528 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::getCurLambda...

llvm:clang-fuzzer: Segv on unknown address in clang::CXXRecordDecl::data

Detailed Report: https://oss-fuzz.com/testcase?key=5673340807413760 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::CXXRecordDecl::data getDefaultInitValue...

llvm:clang-fuzzer: Segv on unknown address in clang::Decl::AccessDeclContextSanity

Detailed Report: https://oss-fuzz.com/testcase?key=5644750535524352 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Decl::AccessDeclContextSanity LookupDirect...