6716 matches found
OSV-2021-561 UNKNOWN WRITE in wuffs_base__pixel_swizzler__bgr__bgra_premul__src
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32451 Crash type: UNKNOWN WRITE Crash state: wuffsbasepixelswizzlerbgrbgrapremulsrc wuffsbasepixelswizzlerswizzleinterleavedfromslice fuzz...
OSV-2021-560 Uncaught exception in java.base/java.lang.ClassLoader.defineClass0
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32439 Crash type: Uncaught exception Crash state: java.base/java.lang.ClassLoader.defineClass0 java.base/java.lang.System$2.defineClass java.base/java.lang.invoke.MethodHandles$Lookup$ClassDefiner.defineClass...
OSV-2021-559 Uncaught exception in java.base/java.nio.CharBuffer.wrap
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32405 Crash type: Uncaught exception Crash state: java.base/java.nio.CharBuffer.wrap java.base/sun.nio.cs.StreamDecoder.implRead java.base/sun.nio.cs.StreamDecoder.read...
OSV-2021-558 Uncaught exception in java.base/java.nio.Buffer.<init>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32399 Crash type: Uncaught exception Crash state: java.base/java.nio.Buffer. java.base/java.nio.CharBuffer. java.base/java.nio.HeapCharBuffer...
OSV-2021-557 Heap-use-after-free in copy_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32375 Crash type: Heap-use-after-free READ 1 Crash state: copystring douncompressblock processblock...
OSV-2021-555 Uncaught exception in java.base/java.util.concurrent.ConcurrentHashMap.putVal
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32395 Crash type: Uncaught exception Crash state: java.base/java.util.concurrent.ConcurrentHashMap.putVal java.base/java.util.concurrent.ConcurrentHashMap.put com.fasterxml.jackson.core.util.InternCache.intern...
OSV-2021-553 Heap-buffer-overflow in read_color_line
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32421 Crash type: Heap-buffer-overflow READ 1 Crash state: readcolorline readpaint ttfacegetpaint...
OSV-2021-552 Uncaught exception in java.base/java.lang.ClassLoader.defineClass0
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32407 Crash type: Uncaught exception Crash state: java.base/java.lang.ClassLoader.defineClass0 java.base/java.lang.System$2.defineClass java.base/java.lang.invoke.MethodHandles$Lookup$ClassDefiner.defineClass...
CVE-2021-28099
In Netflix OSS Hollow, since the Files.existsparent is run before creating the directories, an attacker can pre-create these directories with wide permissions. Additionally, since an insecure source of randomness is used, the file names to be created can be deterministically calculated...
Design/Logic Flaw
In Netflix OSS Hollow, since the Files.existsparent is run before creating the directories, an attacker can pre-create these directories with wide permissions. Additionally, since an insecure source of randomness is used, the file names to be created can be deterministically calculated...
CVE-2021-28099
The provided connected documents confirm CVE-2021-28099 affects Netflix OSS Hollow. The vulnerability arises because Hollow calls Files.exists(parent) before creating directories, enabling an attacker who can create directories to pre-create the target directory with wide permissions. Additionall...
CVE-2021-28099
In Netflix OSS Hollow, since the Files.existsparent is run before creating the directories, an attacker can pre-create these directories with wide permissions. Additionally, since an insecure source of randomness is used, the file names to be created can be deterministically calculated...
OSV-2021-543 Heap-use-after-free in dxf_objects_read
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32275 Crash type: Heap-use-after-free READ 2 Crash state: dxfobjectsread dwgreaddxf llvmfuzz.c...
OSV-2021-542 Heap-buffer-overflow in luaG_getfuncline
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32279 Crash type: Heap-buffer-overflow READ 1 Crash state: luaGgetfuncline luaGrunerror luaDgrowstack...
OSV-2021-540 Heap-buffer-overflow in g_array_append_vals
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32249 Crash type: Heap-buffer-overflow READ Crash state: garrayappendvals gbytearrayappend fuefifirmwarevolumewrite...
OSV-2021-536 Heap-use-after-free in cil_reset_classpermission
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177 Crash type: Heap-use-after-free READ 8 Crash state: cilresetclasspermission cilresetclasspermsset cilresetclasspermslist...
OSV-2021-535 Heap-buffer-overflow in encode_3dsolid
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32165 Crash type: Heap-buffer-overflow READ 4 Crash state: encode3dsolid dwgencodeBODYprivate dwgencodeBODY...
OSV-2021-534 Container-overflow in tesseract::ExtractResults16
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32142 Crash type: Container-overflow WRITE Crash state: tesseract::ExtractResults16 tesseract::PartialMatrixDotVector16 tesseract::matrixDotVector...
OSV-2021-530 UNKNOWN WRITE in g_array_append_vals
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32131 Crash type: UNKNOWN WRITE Crash state: garrayappendvals gbytearrayappend fuefifirmwarefilesystemwrite...