tmux:input-fuzzer: Stack-buffer-overflow in input_osc_52

Project: https://github.com/tmux/tmux.git Detailed Report: https://oss-fuzz.com/testcase?key=5373399976771584 Project: tmux Fuzzing Engine: libFuzzer Fuzz Target: input-fuzzer Job Type: libfuzzerasantmux Platform Id: linux Crash Type: Stack-buffer-overflow READ 9 Crash Address: 0x7f9ff605a1a8 Cra...

libvips:jpegsave_file_fuzzer: Index-out-of-bounds in jxl::ComputeSigma

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5674253141278720 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavefilefuzzer Job Type: libfuzzerubsanlibvips Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

tmux:input-fuzzer: Index-out-of-bounds in input_osc_52

Project: https://github.com/tmux/tmux.git Detailed Report: https://oss-fuzz.com/testcase?key=5346807518986240 Project: tmux Fuzzing Engine: libFuzzer Fuzz Target: input-fuzzer Job Type: libfuzzerubsantmux Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: inputosc52...

pycrypto:fuzz_hash: Crash in block_finalize

Detailed Report: https://oss-fuzz.com/testcase?key=5990587850948608 Project: pycrypto Fuzzing Engine: libFuzzer Fuzz Target: fuzzhash Job Type: libfuzzerasanpycrypto Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x232720726f662064 Crash State: blockfinalize ALGdealloc PyDECREF Sanitizer:...

binutils:fuzz_as: Crash in dwarf2_directive_filename

Detailed Report: https://oss-fuzz.com/testcase?key=5608655132688384 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000ce208e44 Crash State: dwarf2directivefilename dwarf2directivefile...

VotingEscrow's merge and withdraw aren't available for approved users

Lines of code Vulnerability details Users who are approved, but do not own a particular NFT, are supposed to be eligible to call merge and withdraw from the NFT. Currently burn, used by merge and withdraw to remove the NFT from the system, will revert unless the sender is the owner of NFT as the...

binutils:fuzz_nm: Crash in filter_symbols

Detailed Report: https://oss-fuzz.com/testcase?key=6395570707628032 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzznm Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000dfff8000 Crash State: filtersymbols displayrelfile displayfile...

USN-5400-1: MySQL vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.29 in Ubuntu 20.04 LTS, Ubuntu 21.10, and Ubuntu...

Update now! Nvidia released fixes for 10 flaws in Windows GPU drivers

Multiple NVIDIA graphic card models have been found to have flaws in their GPU drivers, with six medium-and four high-severity ratings. Last Monday, the company released a software security update for NVIDIA GPU Display Driver to address the vulnerabilities. If exploited, they could lead to denia...

USN-5397-1: curl vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Patrick Monnerat discovered that curl incorrectly handled certain OAUTH2. An attacker could possibly use this issue to access sensitive information. CVE-2022-22576 Harry Sintonen discovered that curl...

ConvexCurveLPVault's _transferYield can become stuck with zero reward transfer

Lines of code Vulnerability details Now there are no checks for the amounts to be transferred via transferYield and processTreasury. As reward token list is external and an arbitrary token can end up there, in the case when such token doesn't allow for zero amount transfers, the reward retrieval...

Ciphertext Side Channels on AMD SEV - Lenovo Support US

No description provided...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 13 security fixes, including: 1316990 High CVE-2022-1633: Use after free in Sharesheet. Reported by Khalil Zhani on 2022-04-18 1314908 High CVE-2022-1634: Use after free in Browser UI. Reported by Khalil Zhani on 2022-04-09 1319797 High CVE-2022-1635...

opencv:imdecode_fuzzer: Heap-buffer-overflow in opj_jp2_apply_pclr

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=6062373577818112 Project: opencv Fuzzing Engine: afl Fuzz Target: imdecodefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x632000016800 Crash...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_object_dtor_unref_single

Detailed Report: https://oss-fuzz.com/testcase?key=6479086303707136 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6090000f4e50 Crash State: uclobjectdtorunrefsingl...

libreoffice:svmfuzzer: Heap-buffer-overflow in OutputDevice::GetCaretPositions

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5382462252908544 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: svmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

Missing support for ERC20 with fee

Lines of code Vulnerability details Impact Contract AaveV3YieldSource allows depositing tokens via supplyTokenTo function. Amount of tokens to transfer is based on passed argument depositAmount and is missing support for tokens with built-in fees. One of the popular tokens that implements such a...

SonicOS Content Filtering Service and SNMP feature affected by multiple vulnerabilities

SonicOS is affected by the below listed multiple medium severity vulnerabilities, organizations running previous versions of SonicOS should upgrade to new firmware release versions.CVE-2022-22275 - Improper Restriction of TCP Communication Channel Potentially Resulting in DoSSeverity 5.3 Medium...

clamav:clamav_dbload_CRB_fuzzer: Crash in fp_cmp_mag

Detailed Report: https://oss-fuzz.com/testcase?key=4511194414710784 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCRBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61d000012848 Crash State: fpcmpmag crtmgrtrustlistlookup...

mysql-server:fuzz_initfile: Heap-use-after-free in ut_allocator<os_event>::allocate

Detailed Report: https://oss-fuzz.com/testcase?key=5206910330077184 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x60a0000192c8 Crash State:...