47 matches found
Malicious code in @zalastax/nolb-miniz (npm)
The package @zalastax/nolb-miniz was found to contain malicious code. --- Credit: OpenSSF source...
EUVD-2018-10302
Malware in sbrugna...
EUVD-2018-4866
Malware in sbrugna...
Malicious code in @zalastax/nolb-miniz (npm)
The package @zalastax/nolb-miniz was found to contain malicious code...
MAL-2025-12390 Malicious code in @zalastax/nolb-miniz (npm)
The package @zalastax/nolb-miniz was found to contain malicious code...
miniz:zip_fuzzer: Heap-buffer-overflow in mz_zip_mem_read_func
Project: https://github.com/richgel999/miniz.git Detailed Report: https://oss-fuzz.com/testcase?key=5362290995036160 Project: miniz Fuzzing Engine: libFuzzer Fuzz Target: zipfuzzer Job Type: libfuzzerasanminiz Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x507000000144...
miniz:zip_fuzzer: Heap-buffer-overflow in mz_zip_mem_read_func
Project: https://github.com/richgel999/miniz.git Detailed Report: https://oss-fuzz.com/testcase?key=5262100548091904 Project: miniz Fuzzing Engine: libFuzzer Fuzz Target: zipfuzzer Job Type: libfuzzerasanminiz Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x5040000000be...
miniz Integer Overflow DoS
The vulnerability of the miniz data compression library is related to integer overflows during the processing of file headers. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
PT-2022-5382
Name of the Vulnerable Software and Affected Versions miniz affected versions not specified Description The issue is related to an integer overflow when processing file headers in the miniz data compression library. This can be exploited by a remote attacker to cause a denial of service...
miniz:compress_fuzzer: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5538040913723392 Project: miniz Fuzzing Engine: libFuzzer Fuzz Target: compressfuzzer Job Type: libfuzzerubsanminiz Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00010001769d Crash State: NULL Sanitizer: undefined UBSAN Recommended...
miniz:zip_fuzzer: Use-of-uninitialized-value in tinfl_decompress
Project: https://github.com/richgel999/miniz.git Detailed Report: https://oss-fuzz.com/testcase?key=6255167308169216 Project: miniz Fuzzing Engine: libFuzzer Fuzz Target: zipfuzzer Job Type: libfuzzermsanminiz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
miniz:uncompress2_fuzzer: Use-of-uninitialized-value in tinfl_decompress
Project: https://github.com/richgel999/miniz.git Detailed Report: https://oss-fuzz.com/testcase?key=6207767461888000 Project: miniz Fuzzing Engine: libFuzzer Fuzz Target: uncompress2fuzzer Job Type: libfuzzermsanminiz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
miniz:zip_fuzzer: Use-of-uninitialized-value in mz_zip_compute_crc32_callback
Project: https://github.com/richgel999/miniz.git Detailed Report: https://oss-fuzz.com/testcase?key=6421976188715008 Project: miniz Fuzzing Engine: libFuzzer Fuzz Target: zipfuzzer Job Type: libfuzzermsanminiz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
miniz:uncompress_fuzzer: Use-of-uninitialized-value in tinfl_decompress
Project: https://github.com/richgel999/miniz.git Detailed Report: https://oss-fuzz.com/testcase?key=6236480187662336 Project: miniz Fuzzing Engine: libFuzzer Fuzz Target: uncompressfuzzer Job Type: libfuzzermsanminiz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
miniz:uncompress_fuzzer: Use-of-uninitialized-value in tinfl_decompress
Project: https://github.com/richgel999/miniz.git Detailed Report: https://oss-fuzz.com/testcase?key=6224532463157248 Project: miniz Fuzzing Engine: libFuzzer Fuzz Target: uncompressfuzzer Job Type: libfuzzermsanminiz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
CVE-2018-12913
In Miniz 2.0.7, tinfldecompress in miniztinfl.c has an infinite loop because sym2 and counter can both remain equal to zero...
LuPng in Heap Buffer Overflow Vulnerability
LuPng is a PNG format decoder/encoder. A heap buffer overflow vulnerability exists in the 'insertByte' function of the miniz/lupng.c file in LuPng 2017-03-10 and earlier versions, which can be exploited by an attacker to execute arbitrary code or cause a denial of service...
LuPng buffer overflow vulnerability (CNVD-2019-09763)
LuPng is a PNG format decoder/encoder. A heap buffer overflow vulnerability exists in the 'insertByte' function of the miniz/lupng.c file in LuPng 2017-03-10 and earlier versions, which can be exploited by an attacker to execute arbitrary code or cause a denial of service...
LuPng Buffer Over-Read Vulnerability
LuPng is a PNG format decoder/encoder. A heap buffer over-read vulnerability exists in the 'internalPrintf' function of the miniz/lupng.c file in LuPng 2017-03-10 and earlier versions, which can be exploited by an attacker to execute arbitrary code or cause a denial of service...
