bloaty:fuzz_target: Crash in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/google/bloaty.git Detailed Report: https://oss-fuzz.com/testcase?key=5090236586852352 Project: bloaty Fuzzing Engine: libFuzzer Fuzz Target: fuzztarget Job Type: libfuzzerubsanbloaty Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5b19eed80051 Crash State:...

libdwarf:fuzz_crc_32: Heap-buffer-overflow in _dwarf_macho_load_dwarf_sections

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=4931308642172928 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzcrc32 Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

Linux Distros Unpatched Vulnerability : CVE-2019-19648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the machoparsefile functionality in macho/macho.c of YARA 3.11.0, commandsize may be inconsistent with the real size. A specially crafted MachO file can caus...

libdwarf:fuzz_init_path: Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5486726493372416 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitpath Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

Important: golang

Issue Overview: An out of bounds read vulnerability was found in debug/macho of the Go standard library. When using the debug/macho standard library stdlib and malformed binaries are parsed using Open or OpenFat, it can cause golang to attempt to read outside of a slice array causing a panic when...

PT-2019-15900

Name of the Vulnerable Software and Affected Versions YARA version 3.11.0 Description The issue arises from inconsistent command size in the macho parse file functionality, which can lead to out-of-bounds memory access when a specially crafted MachO file is processed. This can result in a Denial ...

YARA has unspecified vulnerabilities

YARA is a set of tools used to help software researchers identify and categorize malware samples. A security vulnerability exists in the machoparsefile function of the macho/macho.c file in YARA version 3.11.0. The vulnerability can be exploited by an attacker to cause out-of-bounds memory access...