WS-2021-0585

In ghostscript there is Negative-size-param in generalendcidrangefunc...

ghostscript:gstoraster_fuzzer: Negative-size-param in general_endcidrange_func

Detailed Report: https://oss-fuzz.com/testcase?key=5139487338921984 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: generalendcidrangefunc...

assimp:assimp_fuzzer: Memcpy-param-overlap in unzReadCurrentFile

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6521292621217792 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

PT-2021-27937

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type known as Memcpy-param-overlap. The crash state involves several functions: pdfi set input stream, zPDFstream, and gs...

WS-2021-0583

In ghostscript there is Memcpy-param-overlap in pdfisetinputstream...

ghostscript:gstoraster_fuzzer: Memcpy-param-overlap in pdfi_set_input_stream

Detailed Report: https://oss-fuzz.com/testcase?key=4781511948238848 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x631000054979,0x631000054980 and 0x63100005497f,...

The vulnerability of the ngx_memcpy function in the OpenResty web server, related to buffer overflows, allows attackers to cause a service failure.

The vulnerability of the memcpy-param-overlap function in the OpenResty web server is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service interruptions...

CVE-2021-43698

phpWhois last update Jun 30 2021 is affected by a Cross Site Scripting XSS vulnerability. In file example.php, the exit function will terminate the script and print the message to the user. The message will contain $GET'query' then there is a XSS vulnerability...

libreoffice:fodtfuzzer: Negative-size-param in void rtl::str::newReplaceStrAt<_rtl_uString, char16_t>

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6219861508882432 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: fodtfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Negative-size-param Crash Address:...

OSV-2021-1565 Memcpy-param-overlap in parquet::DeltaByteArrayDecoder::GetInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40902 Crash type: Memcpy-param-overlap Crash state: parquet::DeltaByteArrayDecoder::GetInternal parquet::DeltaByteArrayDecoder::DecodeArrow parquet::internal::ByteArrayChunkedRecordReader::ReadValuesSpaced...

PT-2021-27892

Name of the Vulnerable Software and Affected Versions parquet affected versions not specified Description The issue is related to a crash type known as Memcpy-param-overlap. It occurs in the parquet::DeltaByteArrayDecoder::GetInternal function, which is called by...

arrow:parquet-arrow-fuzz: Memcpy-param-overlap in parquet::DeltaByteArrayDecoder::GetInternal

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5068267832606720 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x624000027576,0x6241000275...

PT-2021-4988

Name of the Vulnerable Software and Affected Versions OpenResty affected versions not specified Description The issue is related to a buffer overflow in the memcpy-param-overlap function of the OpenResty web server. Exploitation of this issue could allow an attacker to cause a denial of service...

libvips:mosaic_fuzzer: Memcpy-param-overlap in vips_foreign_load_jxl_header

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5889145076056064 Project: libvips Fuzzing Engine: honggfuzz Fuzz Target: mosaicfuzzer Job Type: honggfuzzasanlibvips Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

Open Redirect in blogifierdotnet/blogifier

Description Open redirect at login page due to unchecked "returnUrl" param Proof of Concept 1. Go to demo page link http://demo.blogifier.net/admin/login/?returnUrl=https://google.com 2. Login using demo account and see that you are redirected to google.com Impact This vulnerability is capable of...

PT-2021-27822

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a negative-size-param, as reported by OSS-Fuzz. The crash occurs in the Imf 3 1::memstream read function, which i...

WS-2021-0579

sleuthkit - 4.11.1 has a Negative-size-param in ntfsattrwalkspecial...

PT-2021-27817

Name of the Vulnerable Software and Affected Versions ntfs affected versions not specified Description The issue is related to a crash caused by a negative-size-param, which occurs in the ntfs attr walk special, tsk fs attr walk, and ntfs proc attrseq functions. Recommendations At the moment, the...

openexr:openexr_exrcheck_fuzzer: Negative-size-param in Imf_3_1::memstream_read

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5235723234574336 Project: openexr Fuzzing Engine: honggfuzz Fuzz Target: openexrexrcheckfuzzer Job Type: honggfuzzasanopenexr Platform Id: linux Crash Type: Negative-size-param Cra...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Negative-size-param in ntfs_attr_walk_special

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5756145092919296 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsntfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Negative-size-param Crash Addres...