11020 matches found
readstat/fuzz_format_sas7bdat: Heap-buffer-overflow in sas_read4
Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=4846481717067776 Project: readstat Fuzzer: libFuzzerreadstatfuzzformatsas7bdat Fuzz target binary: fuzzformatsas7bdat Job Type: libfuzzerasanreadstat Platform Id: linux Crash Type:...
readstat/fuzz_format_por: Index-out-of-bounds in read_missing_value_record
Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5652147318816768 Project: readstat Fuzzer: libFuzzerreadstatfuzzformatpor Fuzz target binary: fuzzformatpor Job Type: libfuzzerubsanreadstat Platform Id: linux Crash Type: Index-out-of-bounds Cra...
readstat/fuzz_format_sas7bcat: Heap-buffer-overflow in readstat_convert
Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5673098437722112 Project: readstat Fuzzer: aflreadstatfuzzformatsas7bcat Fuzz target binary: fuzzformatsas7bcat Job Type: aflasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow READ ...
harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in hb_font_t::em_scale
Detailed report: https://oss-fuzz.com/testcase?key=5638729035677696 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: hbfontt::emscale...
libaom/av1_dec_fuzzer_threaded: Use-of-uninitialized-value in av1_upsample_intra_edge_high_c
Detailed report: https://oss-fuzz.com/testcase?key=5139632361046016 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzerthreaded Fuzz target binary: av1decfuzzerthreaded Job Type: libfuzzermsanlibaom Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
libaom/av1_dec_fuzzer: Use-of-uninitialized-value in inv_txfm2d_add_facade
Detailed report: https://oss-fuzz.com/testcase?key=5077054955978752 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: libfuzzermsanlibaom Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: invtxfm2daddfacade...
libaom/av1_dec_fuzzer: Heap-buffer-overflow in av1_convolve_2d_copy_sr_sse2
Detailed report: https://oss-fuzz.com/testcase?key=5099766910812160 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: libfuzzerasanlibaom Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x63300000005c Crash State:...
Mozilla Firefox 64 Information Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2018-041 Product: Firefox Manufacturer: Mozilla Affected Versions: = 64 Tested Versions: 61, 62, 63, 64 Vulnerability Type: Information Exposure CWE-200 Risk Level: Medium Solution Status: Open Manufacturer Notification: 2018-07-19...
Joomla YoutubeGallery 4.5.8 Database Disclosure / SQL Injection
Exploit Title : Joomla YoutubeGallery Components 4.5.8 Database Disclosure and SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 18/01/2019 Vendor Homepage : joomlaboat.com Software Information Links : extensions.joomla.org/extension/youtube-gallery/...
openthread/ip6-send-fuzzer: Index-out-of-bounds in ot::Coap::Message::ParseHeader
Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5162663452082176 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux Crash Type:...
harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in AAT::KerxSubTableFormat4<AAT::KerxSubTableHeader>::driver_context_t::transition
Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5667182741028864 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow...
Joomla Simple RSS Feed Reader mod_jw_srfr 3.6.0 Open Redirection
Exploit Title : Joomla Simple RSS Feed Reader modjwsrfr 3.6.0 Modules Open Redirect Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/01/2019 Vendor Homepage : joomlaworks.net Software Download Links : joomlaworks.net/downloads/?f=modjwsrfr-v3.6.0j2.5-3.x.zip...
clamav/clamav_scanfile_PE_fuzzer: Heap-buffer-overflow in unaspack
Detailed report: https://oss-fuzz.com/testcase?key=5673520888020992 Project: clamav Fuzzer: aflclamavscanfilePEfuzzer Fuzz target binary: clamavscanfilePEfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60200000700d Crash State: unaspack...
imagemagick/ping_mvg_fuzzer: Crash in RelinquishMagickMemory
Detailed report: https://oss-fuzz.com/testcase?key=5762201575489536 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff9 Crash State:...
skia/api_raster_n32_canvas: Use-of-uninitialized-value in SkPerlinNoiseShaderImpl::PaintingData::stitch
Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5644642953986048 Project: skia Fuzzer: libFuzzerskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...
skia/api_raster_n32_canvas: Use-of-uninitialized-value in float const& SkTMin<float>
Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5698138449379328 Project: skia Fuzzer: libFuzzerskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...
AudioCode 400HD Cross Site scripting
CVE-2018-10091 Stored XSS vulnerabilities in AudioCode IP phones Description The AudioCodes 400HD series of IP phones is a range of easy-to-use, feature-rich desktop devices for the service provider hosted services, enterprise IP telephony and contact center markets. Most of user inputs in the CG...
imagemagick/encoder_ept3_fuzzer: Use-of-uninitialized-value in WriteBlob
Detailed report: https://oss-fuzz.com/testcase?key=5085775568306176 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderept3fuzzer Fuzz target binary: encoderept3fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
Synaptics Pointing Device Driver Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-24573 Potential Impact: Code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-16098 Summary Description: A researcher reported to Lenovo an unquoted search path vulnerability was found in Synaptics Pointing Device drivers of some...