dlplibs:cdrfuzzer: Heap-buffer-overflow in inflate_fast

Detailed Report: https://oss-fuzz.com/testcase?key=6420517591056384 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: cdrfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6100000002fb Crash State: inflatefast inflate...

libredwg:llvmfuzz: Stack-buffer-overflow in dynapi_set_helper

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4655335396212736 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

upb:file_descriptor_parsenew_fuzzer: Crash in upb_strtable_next2

Detailed Report: https://oss-fuzz.com/testcase?key=6067008199852032 Project: upb Fuzzing Engine: libFuzzer Fuzz Target: filedescriptorparsenewfuzzer Job Type: libfuzzerubsanupb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000100000001 Crash State: upbstrtablenext2 removefiledef...

libredwg:llvmfuzz: Crash in json_common_entity_data

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4923703810457600 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerubsanlibredwg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000034313109 Crash...

Critical Auth Bypass Bug Reported in Cisco Wireless LAN Controller Software

Cisco has released patches to contain a critical security vulnerability affecting the Wireless LAN Controller WLC that could be abused by an unauthenticated, remote attacker to take control of an affected system. Tracked as CVE-2022-20695, the issue has been rated 10 out of 10 for severity and...

quickjs:fuzz_eval: Heap-buffer-overflow in JS_CallInternal

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=4717990756614144 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzeval Job Type: libfuzzerasanquickjs Platform Id: linux Crash Type:...

libbpf:bpf-object-fuzzer: Heap-buffer-overflow in bpf_object__close

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6197297506025472 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasani386libbpf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

poppler:pdf_fuzzer: Use-of-uninitialized-value in Splash::pipeRun

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5979736116953088 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_object_dtor_unref_single

Detailed Report: https://oss-fuzz.com/testcase?key=6733247125520384 Project: libucl Fuzzing Engine: afl Fuzz Target: ucladdstringfuzzer Job Type: aflasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6020000027a0 Crash State: uclobjectdtorunrefsingle...

ThinkPad BIOS Vulnerabilities - Lenovo Support US

No description provided...

Citrix Endpoint Management (XenMobile Server) Security Bulletin for CVE-2021-44519, CVE-2021-44520, and CVE-2022-26151

Vulnerabilities have been discovered in Citrix Endpoint Management XenMobile Server, which, collectively, may allow a XenMobile console user with either anadmin role or a custom role that has ‘Create Support Bundles’ enabled,to gain root access to the underlying OS. CVE-ID| Description| CWE|...

mysql-server:fuzz_initfile: Heap-use-after-free in ut_allocator<os_event>::allocate

Detailed Report: https://oss-fuzz.com/testcase?key=5135473808375808 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6060000b8228 Crash State:...

libraw:libraw_nef_fuzzer: Use-of-uninitialized-value in LibRaw::parse_sinar_ia

Detailed Report: https://oss-fuzz.com/testcase?key=4549292544622592 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::parsesinaria LibRaw::identify...

gstreamer:typefind: Heap-buffer-overflow in gst_sub_parse_data_format_autodetect

Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer https://gitlab.freedesktop.org/gstreamer/gstreamer.git Detailed Report: https://oss-fuzz.com/testcase?key=4713285385060352 Project: gstreamer Fuzzing Engine: honggfuzz Fuzz Target: typefind Job Type: honggfuzzasangstreamer Platform...

NonCustodialPSM.mint ignores mint buffer reduced amount, mostly disabling mint rate control

Lines of code Vulnerability details Impact VOLT minting rate control doesn't happen when RateLimited's doPartialAction is true as NonCustodialPSM doesn't use the returned amount value, minting the full amount even when it was reduced by current mint buffer size limitation. There are two issues wi...

setMinter() in vcon.sol missing important checks can lead to loss of minting ability

Lines of code Vulnerability details Impact The setMinter function in Vcon.sol lacks both zero address checks and a proper ownership transfer pattern. I am submitting this as a medium-severity issue separate from similar low-severity instances due to this example's effect on the entire protocol. I...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in Imf_3_1::memstream_read

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5394457752633344 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow RE...

libvips:jpegsave_file_fuzzer: Heap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessPaddingRow

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5062021311234048 Project: libvips Fuzzing Engine: honggfuzz Fuzz Target: jpegsavefilefuzzer Job Type: honggfuzzasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

libraw:libraw_fuzzer: Index-out-of-bounds in DHT::get_hv_rbg

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4834098805342208 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

IdeaRE RefTree Path Traversal

=============================================================================== title: IdeaRE RefTree Download Path Traversal product: IdeaRE RefTree =============================================================================== EXECUTIVE SUMMARY RefTree is a web application made for managing...