OSV-2021-1731 Memcpy-param-overlap in gs_fapi_do_char

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42656 Crash type: Memcpy-param-overlap Crash state: gsfapidochar pdfifapibuildchar showproceed...

PT-2021-27969

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Memcpy-param-overlap. The crash state involves several function calls, including gs fapi do char, pdfi...

ghostscript:gstoraster_fuzzer: Memcpy-param-overlap in gs_fapi_do_char

Detailed Report: https://oss-fuzz.com/testcase?key=6377410830925824 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x6310000008a8,0x6311121e08a8 and 0x631000086680,...

In AdvanceCOMP 2.1 png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size which results in an attempted memcpy to write into a buffer that is too small. (There is also a heap-based buffer over-read.)

...

Clementine 缓冲区错误漏洞

Clementine is a multi-platform music player for individual developers running on GNU/Linux, Mac OS X and Windows operating systems. a denial of service vulnerability exists in Clementine Music Player prior to 1.3.1, which stems from a vulnerability to read access conflicts when block data is move...

assimp:assimp_fuzzer: Memcpy-param-overlap in unzReadCurrentFile

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6521292621217792 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

PT-2021-27937

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type known as Memcpy-param-overlap. The crash state involves several functions: pdfi set input stream, zPDFstream, and gs...

WS-2021-0583

In ghostscript there is Memcpy-param-overlap in pdfisetinputstream...

ghostscript:gstoraster_fuzzer: Memcpy-param-overlap in pdfi_set_input_stream

Detailed Report: https://oss-fuzz.com/testcase?key=4781511948238848 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x631000054979,0x631000054980 and 0x63100005497f,...

The vulnerability of the ngx_memcpy function in the OpenResty web server, related to buffer overflows, allows attackers to cause a service failure.

The vulnerability of the memcpy-param-overlap function in the OpenResty web server is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service interruptions...

OSV-2021-1565 Memcpy-param-overlap in parquet::DeltaByteArrayDecoder::GetInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40902 Crash type: Memcpy-param-overlap Crash state: parquet::DeltaByteArrayDecoder::GetInternal parquet::DeltaByteArrayDecoder::DecodeArrow parquet::internal::ByteArrayChunkedRecordReader::ReadValuesSpaced...

PT-2021-27892

Name of the Vulnerable Software and Affected Versions parquet affected versions not specified Description The issue is related to a crash type known as Memcpy-param-overlap. It occurs in the parquet::DeltaByteArrayDecoder::GetInternal function, which is called by...

arrow:parquet-arrow-fuzz: Memcpy-param-overlap in parquet::DeltaByteArrayDecoder::GetInternal

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5068267832606720 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x624000027576,0x6241000275...

RHEL 8 : python-pillow (RHSA-2021:4149)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:4149 advisory. The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal...

CentOS 8 : python-pillow (CESA-2021:4149)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4149 advisory. - python-pillow: Buffer over-read in PCX image reader CVE-2020-35653 - python-pillow: Buffer over-read in SGI RLE image reader CVE-2020-35655 -...

Heap-based Buffer Overflow in zyantific/zydis

As discussed in the report at https://www.huntr.dev/bounties/96b0a482-7041-45b1-9327-c6a4a8f32d3a/, I am re-opening the report here for proper tracking. Description Hello, we hope you're doing well during these challenging times. Whilst testing zydis built from commit 077b185 with Clang12 + ASan ...

PT-2021-4988

Name of the Vulnerable Software and Affected Versions OpenResty affected versions not specified Description The issue is related to a buffer overflow in the memcpy-param-overlap function of the OpenResty web server. Exploitation of this issue could allow an attacker to cause a denial of service...

in squell/id3

Description Hello, I hope you're doing well. Whilst testing id3 built from commit 896d42a, we discovered crafted input which triggers a negative-size-param size=-1 error when when calling memcpy, causing the software to crash. Proof of Concept First... Second... echo...

CVE-2021-41794

ogsfqdnparse in Open5GS 1.0.0 through 2.3.3 inappropriately trusts a client-supplied length value, leading to a buffer overflow. The attacker can send a PFCP Session Establishment Request with "internet" as the PDI Network Instance. The first character is interpreted as a length value to be used ...

Buffer overflow

ogsfqdnparse in Open5GS 1.0.0 through 2.3.3 inappropriately trusts a client-supplied length value, leading to a buffer overflow. The attacker can send a PFCP Session Establishment Request with "internet" as the PDI Network Instance. The first character is interpreted as a length value to be used ...