The store method allows you to store the same token twice

This issue has been created to upgrade a QA report submission to a medium severity finding. From 0x1f8b: The store method allows you to store the same token twice in NestedRecords.solL130 To do this you must first call storenftId,tokenA,0,reserve and then storenftId,tokenA,100000,reserve because ...

libreoffice:sftfuzzer: Heap-buffer-overflow in vcl::StreamToMemory

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5146764930318336 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: sftfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in MarkSaltChargeGroups2

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=5544616407990272 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: inchiinputfuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

dlplibs:cdrfuzzer: Container-overflow in libcdr::CDRSplineData::create

Detailed Report: https://oss-fuzz.com/testcase?key=5738130454478848 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: cdrfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address: 0x6060000049d8 Crash State: libcdr::CDRSplineData::create...

opensips:fuzz_msg_parser: Heap-buffer-overflow in parse_msg

Project: https://github.com/OpenSIPS/opensips.git Detailed Report: https://oss-fuzz.com/testcase?key=4898289158324224 Project: opensips Fuzzing Engine: libFuzzer Fuzz Target: fuzzmsgparser Job Type: libfuzzerasanopensips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

bitcoin-core:wallet_notifications: Use-of-uninitialized-value in CExtKey::SetSeed

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=4609738862624768 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: walletnotifications Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

openh264:decoder_fuzzer: Index-out-of-bounds in WelsDec::WelsInitRefList

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=6445159338868736 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerubsanopenh264 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

graphicsmagick:coder_SVG_fuzzer: Use-of-uninitialized-value in xmlParseInternalSubset

Detailed Report: https://oss-fuzz.com/testcase?key=5033510363070464 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderSVGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: xmlParseInternalSubset...

opencv:core_fuzzer: Incorrect-function-pointer-type in cv::split

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=5696253281828864 Project: opencv Fuzzing Engine: libFuzzer Fuzz Target: corefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Crash...

open62541:fuzz_json_decode_encode: Heap-buffer-overflow in extensionObjectOrder

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5663845975195648 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzjsondecodeencode Job Type: aflasanopen62541 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

libcoap:pdu_parse_fuzzer: Heap-buffer-overflow in coap_split_uri_sub

Detailed Report: https://oss-fuzz.com/testcase?key=5641741171032064 Project: libcoap Fuzzing Engine: libFuzzer Fuzz Target: pduparsefuzzer Job Type: libfuzzerasanlibcoap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x612000000a46 Crash State: coapspliturisub...

imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Detailed Report: https://oss-fuzz.com/testcase?key=5924485696454656 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

libplist:jplist_fuzzer: Heap-buffer-overflow in parse_primitive

Project: https://github.com/libimobiledevice/libplist.git Detailed Report: https://oss-fuzz.com/testcase?key=6639076466360320 Project: libplist Fuzzing Engine: libFuzzer Fuzz Target: jplistfuzzer Job Type: libfuzzerasanlibplist Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

WordPress 5.9 Cross Site Scripting

Document Title: =============== Wordpress = 5.9 Cross-Site Scripting Reflected Authenticated Credits & Authors: ================== Taurus Omar [email protected] Disclosure Type: ================ Independent Security Research Release Date: ============= 2022-31-01 Vulnerability Disclosure...

Intel IPP Cryptography Advisory (Used in Intel SGX) - Lenovo Support US

No description provided...

libcoap:pdu_parse_fuzzer: Heap-buffer-overflow in coap_split_uri_sub

Project: https://github.com/obgm/libcoap.git Detailed Report: https://oss-fuzz.com/testcase?key=5110183854997504 Project: libcoap Fuzzing Engine: afl Fuzz Target: pduparsefuzzer Job Type: aflasanlibcoap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x612000000a46 Crash...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-buffer-overflow in onig_node_str_cat

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4749992680620032 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_object_dtor_unref_single

Detailed Report: https://oss-fuzz.com/testcase?key=5638180240490496 Project: libucl Fuzzing Engine: afl Fuzz Target: ucladdstringfuzzer Job Type: aflasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x602000002af0 Crash State: uclobjectdtorunrefsingle...

libecc:cryptofuzz-libecc: Use-of-uninitialized-value in nn_check_initialized

Project: https://github.com/ANSSI-FR/libecc.git Detailed Report: https://oss-fuzz.com/testcase?key=6084559232434176 Project: libecc Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-libecc Job Type: libfuzzermsanlibecc Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

php:php-fuzz-execute: Use-of-uninitialized-value in string_case_compare_function

Detailed Report: https://oss-fuzz.com/testcase?key=5164925062873088 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: stringcasecomparefunction...