5930 matches found
inchi:inchi_input_fuzzer: Heap-buffer-overflow in make_a_copy_of_t_group_info
Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=5207605756952576 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: inchiinputfuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...
skia-ftz:image_filter_deserialize_width: Heap-buffer-overflow in void SkMatrixConvolutionImageFilter::filterPixels<RepeatPixelFetcher>
Detailed Report: https://oss-fuzz.com/testcase?key=6273580669468672 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: imagefilterdeserializewidth Job Type: libfuzzerasanskia-ftz Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x61e000001770 Crash State: void...
CVE-2022-3659
Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. Chromium security severity: Medium...
Design/Logic Flaw
Use after free in import in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2022-3311
Use after free in import in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
Design/Logic Flaw
Incorrect security UI in full screen in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Medium...
Double free
Use after free in logging in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2022-3312
Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restrictions via physical access to the device. Chromium security severity: Medium...
CVE-2022-3308
Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2022-3658
CVE-2022-3658 affects Google Chrome on Chrome OS, specifically the Feedback service. Description: Use-after-free in Feedback service can lead to heap corruption when a user installs a malicious extension via UI interaction. Impact: potential arbitrary code execution or system compromise as noted ...
CVE-2022-3312
CVE-2022-3312 affects Google Chrome on ChromeOS, where VPN input handling had insufficient validation of untrusted input before version 106.0.5249.62. The underlying issue is in VPN-related code, enabling a local attacker with physical access to bypass managed device restrictions. The evidence co...
CVE-2022-3658
Use after free in Feedback service on Chrome OS in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interaction. Chromium security severity: Medium...
CVE-2022-3314
Use after free in logging in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
radare2:ia_fuzz: Heap-buffer-overflow in parse_classes_64
Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5367698431541248 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...
pandas:fuzz_python_parser: Heap-buffer-overflow in __ac_X31_hash_string
Detailed Report: https://oss-fuzz.com/testcase?key=4960754033360896 Project: pandas Fuzzing Engine: libFuzzer Fuzz Target: fuzzpythonparser Job Type: libfuzzerasanpandas Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7f474ee02800 Crash State: acX31hashstring khgetstrb...
gstreamer:gst-discoverer: Heap-buffer-overflow in parse_subrip
Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer https://gitlab.freedesktop.org/gstreamer/gstreamer.git Detailed Report: https://oss-fuzz.com/testcase?key=5563135285395456 Project: gstreamer Fuzzing Engine: libFuzzer Fuzz Target: gst-discoverer Job Type: libfuzzerasangstreamer...
suricata:fuzz_mimedecparseline: Segv on unknown address in MimeDecDeInitParser
Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5539502479507456 Project: suricata Fuzzing Engine: afl Fuzz Target: fuzzmimedecparseline Job Type: aflasansuricata Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...
ruby:fuzz_ruby_gems: Heap-buffer-overflow in onig_vsnprintf_with_pattern
Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5441719479173120 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzrubygems Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6030000828f0 Cras...
libraw:libraw_fuzzer: Heap-buffer-overflow in LibRaw::hat_transform
Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5371189602418688 Project: libraw Fuzzing Engine: afl Fuzz Target: librawfuzzer Job Type: aflasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62900000440c Crash...
