cryptofuzz:cryptofuzz-openssl-noasm: Use-of-uninitialized-value in EVP_DecryptUpdate

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5736062923571200 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-val...

libheif:file-fuzzer: Crash in slice_segment_header::operator=

Detailed Report: https://oss-fuzz.com/testcase?key=5742814906548224 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasani386libheif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xbebebebe Crash State: slicesegmentheader::operator=...

lwan:template_fuzzer: Heap-buffer-overflow in post_process_template

Project: git://github.com/lpereira/lwan Detailed Report: https://oss-fuzz.com/testcase?key=5745678005567488 Project: lwan Fuzzing Engine: libFuzzer Fuzz Target: templatefuzzer Job Type: libfuzzerasanlwan Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6130000001c0 Cras...

yara:dotnet_fuzzer: Use-of-uninitialized-value in pe_rva_to_offset

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5676620769918976 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: dotnetfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Index-out-of-bounds in cbs_av1_read_skip_mode_params

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5662812550725632 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

TemaTres 3.0 - value Persistent Cross-site Scripting

TemaTres 3.0 - value Persistent Cross-site Scripting Exploit Title: TemaTres 3.0 - 'value' Persistent Cross-site Scripting Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source:...

TemaTres 3.0 - Cross-Site Request Forgery (Add Admin)

TemaTres 3.0 - Cross-Site Request Forgery Add Admin Exploit Title: TemaTres 3.0 — Cross-Site Request Forgery Add Admin Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source:...

TemaTres 3.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: TemaTres 3.0 — Cross-Site Request Forgery Add Admin Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source: https://sourceforge.net/projects/tematres/files/TemaTres%203.0/tematres3.0.zip/download Version: 3.0 CVE : 2019–14345...

libhevc:hevc_dec_fuzzer: Use-of-uninitialized-value in ihevc_recon_4x4_ttype1

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5630411484430336 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzermsanlibhevc Platform Id: linux Crash Type: Use-of-uninitialized-value...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_get_certificate

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5652332327206912 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

matio:matio_fuzzer: Use-of-uninitialized-value in ReadNextStructField

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5652634996572160 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_v1_get_attribute_len

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5650704400384000 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

wabt:wasm2wat_fuzzer: Heap-buffer-overflow in wabt::string_view::compare

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=5195494439780352 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wasm2watfuzzer Job Type: libfuzzerasani386wabt Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Crash Address:...

libavc:avc_dec_fuzzer: Heap-buffer-overflow in ih264d_decode_slice_thread

Project: https://android.googlesource.com/platform/external/libavc Detailed Report: https://oss-fuzz.com/testcase?key=5689831887994880 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

lwan:template_fuzzer: Heap-buffer-overflow in post_process_template

Project: git://github.com/lpereira/lwan Detailed Report: https://oss-fuzz.com/testcase?key=5146255567355904 Project: lwan Fuzzing Engine: libFuzzer Fuzz Target: templatefuzzer Job Type: libfuzzerasanlwan Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6130000001c0 Cras...

Lenovo XClarity Controller (XCC) Stored CSV Injection - US

Lenovo Security Advisory: LEN-29118 Potential Impact: Arbitrary Code Execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6187 Summary Description: A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller XCC that could allow an administrativ...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in bebytes2ushort

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5633829448712192 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

yara:rules_fuzzer: Use-of-uninitialized-value in yr_arena_destroy

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5681595617116160 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: rulesfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libgit2:patch_parse_fuzzer: Heap-buffer-overflow in git_buf_decode_base85

Project: https://github.com/libgit2/libgit2.git Detailed Report: https://oss-fuzz.com/testcase?key=4789150477975552 Project: libgit2 Fuzzing Engine: libFuzzer Fuzz Target: patchparsefuzzer Job Type: libfuzzerasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in derive_collocated_motion_vectors

Detailed Report: https://oss-fuzz.com/testcase?key=5765356846579712 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: derivecollocatedmotionvectors...