unrar/unrar_fuzzer: Use-of-uninitialized-value in __gxx_personality_v0

Detailed report: https://oss-fuzz.com/testcase?key=6499224389681152 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gxxpersonalityv0 UnwindRaiseException...

unrar/unrar_fuzzer: Use-of-uninitialized-value in ExtractUnixLink30

Detailed report: https://oss-fuzz.com/testcase?key=6412241369825280 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ExtractUnixLink30 ExtractSymlink...

unrar/unrar_fuzzer: Use-of-uninitialized-value in IsRelativeSymlinkSafe

Detailed report: https://oss-fuzz.com/testcase?key=4800962913894400 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: IsRelativeSymlinkSafe ExtractUnixLink3...

unrar/unrar_fuzzer: Use-of-uninitialized-value in CharToWide

Detailed report: https://oss-fuzz.com/testcase?key=6710332971024384 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CharToWide Archive::GetComment...

librawspeed/RawParserFuzzer-GetDecoder-Decode: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6696296816574464 Project: librawspeed Fuzzer: libFuzzerlibrawspeedRawParserFuzzer-GetDecoder-Decode Fuzz target binary: RawParserFuzzer-GetDecoder-Decode Job Type: libfuzzermsanlibrawspeed...

unrar/unrar_fuzzer: Use-of-uninitialized-value in Archive::GetComment

Detailed report: https://oss-fuzz.com/testcase?key=5413862464552960 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Archive::GetComment Archive::ViewComme...

librawspeed/SonyArw2DecompressorFuzzer: Crash in cfree

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6578947841064960 Project: librawspeed Fuzzer: libFuzzerlibrawspeedSonyArw2DecompressorFuzzer Fuzz target binary: SonyArw2DecompressorFuzzer Job Type: libfuzzerubsanlibrawspeed Platform Id:...

libreoffice/scrtffuzzer: Index-out-of-bounds in ScCompiler::IsReference

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5247280077602816 Project: libreoffice Fuzzer: libFuzzerlibreofficescrtffuzzer Fuzz target binary: scrtffuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type:...

librawspeed/TiffDecoderFuzzer-NefDecoder: Heap-buffer-overflow in rawspeed::NefDecoder::decodeMetaDataInternal

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5659211817025536 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-NefDecoder Fuzz target binary: TiffDecoderFuzzer-NefDecoder Job Type: libfuzzerasanlibrawspeed Platform Id:...

PSFTPd Windows FTP Server 10.0.4 Build 729 - Log Injection / Use-After-Free Vulnerability

Exploit for windows platform in category dos / poc Multiple Vulnerabilities in PSFTPd Windows FTP Server ===================================================== Overview -------- Confirmed Affected Versions: 10.0.4 Build 729 Confirmed Patched Versions: None Vendor: Sergei Pleis Softwareentwicklung...

libreoffice/scrtffuzzer: Heap-buffer-overflow in ScCompiler::NextSymbol

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5665914566475776 Project: libreoffice Fuzzer: libFuzzerlibreofficescrtffuzzer Fuzz target binary: scrtffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

llvm/llvm-special-case-list-fuzzer: Heap-buffer-overflow in p_ere

Detailed report: https://oss-fuzz.com/testcase?key=5534705328848896 Project: llvm Fuzzer: libFuzzerllvmllvm-special-case-list-fuzzer Fuzz target binary: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61d0004f2cd8...

open62541/fuzz_binary_message: Heap-buffer-overflow in Operation_addNode_finish

Detailed report: https://oss-fuzz.com/testcase?key=4952054897311744 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60f000000690 Crash...

Symantec Endpoint Protection 12.1.6 Tamper Protection Bypass

Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CVE-2017-6331-SYMANTEC-ENDPOINT-PROTECTION-TAMPER-PROTECTION-BYPASS.txt + ISR: ApparitionSec Vendor: ======= www.symantec.com Product: =========== Symantec Endpoint...

gdal/gtiff_fuzzer: Heap-buffer-overflow in OJPEGReadBufferFill

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6459680978108416 Project: gdal Fuzzer: libFuzzergdalgtifffuzzer Fuzz target binary: gtifffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

curl/curl_fuzzer_ftp: Heap-buffer-overflow in setcharset

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=4902707686014976 Project: curl Fuzzer: libFuzzercurlfuzzerftp Fuzz target binary: curlfuzzerftp Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Symantec Endpoint Protection 12.1 - Tamper-Protection Bypass

Symantec Endpoint Protection 12.1 - Tamper-Protection Bypass + Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CVE-2017-6331-SYMANTEC-ENDPOINT-PROTECTION-TAMPER-PROTECTION-BYPASS.txt + ISR: ApparitionSec Vendor: =======...

gdal/gtiff_fuzzer: Crash in TIFFFillTile

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6518095486124032 Project: gdal Fuzzer: libFuzzergdalgtifffuzzer Fuzz target binary: gtifffuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ff53c4aaa40 Cras...

libreoffice/scrtffuzzer: Index-out-of-bounds in ScCompiler::IsReference

Detailed report: https://oss-fuzz.com/testcase?key=4565444439572480 Project: libreoffice Fuzzer: libFuzzerlibreofficescrtffuzzer Fuzz target binary: scrtffuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: ScCompiler::IsReferen...

yara/rules_fuzzer: Use-of-uninitialized-value in _yr_atoms_choose

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5753694386651136 Project: yara Fuzzer: libFuzzeryararulesfuzzer Fuzz target binary: rulesfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...