Lucene search
K

29 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/09 3:36 a.m.2 views

Malicious code in perfetto-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38ce51161bf477ac257c50c37a9eebd8410cacfe7c99fdd88acb1ddae307a3cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSV
OSV
added 2024/12/09 3:36 a.m.3 views

MAL-2024-11417 Malicious code in perfetto-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38ce51161bf477ac257c50c37a9eebd8410cacfe7c99fdd88acb1ddae307a3cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSV
OSV
added 2023/02/18 1:0 p.m.18 views

OSV-2023-72 Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56057 Crash type: Heap-buffer-overflow WRITE 4 Crash state: perfetto::traceprocessor::TrackEventParser::ParseTrackDescriptor perfetto::traceprocessor::TrackEventModule::ParseTracePacketData...

7.2AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/02/18 12:0 a.m.1 views

PT-2023-35963 · Perfetto · Perfetto

Name of the Vulnerable Software and Affected Versions: perfetto affected versions not specified Description: The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the perfetto::trace processor::TrackEventParser::ParseTrackDescriptor function, the...

6.8AI score
Exploits0References2
OSV
OSV
added 2022/09/24 12:0 a.m.9 views

OSV-2022-943 UNKNOWN WRITE in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51695 Crash type: UNKNOWN WRITE Crash state: perfetto::traceprocessor::TrackEventParser::ParseTrackDescriptor perfetto::traceprocessor::TrackEventModule::ParsePacket...

7.2AI score
Exploits0References1
OSV
OSV
added 2022/09/07 12:0 a.m.15 views

OSV-2022-854 Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51022 Crash type: Heap-buffer-overflow WRITE 4 Crash state: perfetto::traceprocessor::TrackEventParser::ParseTrackDescriptor perfetto::traceprocessor::TrackEventModule::ParsePacket...

7.2AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/09/07 12:0 a.m.1 views

PT-2022-37254 · Perfetto · Perfetto

Name of the Vulnerable Software and Affected Versions: perfetto affected versions not specified Description: The issue is related to a heap buffer overflow error. Technical details about the error include the crash type being a Heap-buffer-overflow WRITE 4. The error occurs in the following...

7.4AI score
Exploits0References2
OSV
OSV
added 2022/07/05 12:0 a.m.9 views

OSV-2022-531 Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48684 Crash type: Heap-buffer-overflow WRITE 4 Crash state: perfetto::traceprocessor::TrackEventParser::ParseTrackDescriptor perfetto::traceprocessor::TrackEventModule::ParsePacket...

7.2AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/05/31 1:16 p.m.2 views

Malicious code in perfetto-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6100763973b89540aee1624736a341bc237fd9d4e58872345d6b8b8780fc754 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/05/31 1:16 p.m.9 views

MAL-2022-5299 Malicious code in perfetto-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6100763973b89540aee1624736a341bc237fd9d4e58872345d6b8b8780fc754 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
CNNVD
CNNVD
added 2022/03/29 12:0 a.m.1 views

Google perfetto 安全漏洞

Google perfetto is a Google Inc. program for collecting performance information on Android devices via the Android Debug Bridge ADB. Google perfetto suffers from a security vulnerability that originates when a user usually a developer manually invokes the . /tools/run-dev-server script can send...

7.8CVSS7.3AI score0.00015EPSS
Exploits0References2
OSV
OSV
added 2021/11/22 12:0 a.m.9 views

OSV-2021-1605 Heap-use-after-free in perfetto::trace_processor::SliceTracker::GetStackHash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41226 Crash type: Heap-use-after-free READ 8 Crash state: perfetto::traceprocessor::SliceTracker::GetStackHash perfetto::traceprocessor::SliceTracker::StartSlice perfetto::traceprocessor::SliceTracker::Scoped...

7.2AI score
Exploits0References1
OSV
OSV
added 2020/07/10 12:0 a.m.11 views

OSV-2020-769 Heap-buffer-overflow in perfetto::trace_processor::ClockTracker::ConvertSlowpath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23149 Crash type: Heap-buffer-overflow READ 8 Crash state: perfetto::traceprocessor::ClockTracker::ConvertSlowpath perfetto::traceprocessor::ClockTracker::Convert perfetto::traceprocessor::ClockTracker::ToTraceTime...

7.2AI score
Exploits0References1
OSV
OSV
added 2020/07/01 12:0 a.m.15 views

OSV-2020-653 Heap-buffer-overflow in perfetto::base::Hash::Update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14753 Crash type: Heap-buffer-overflow READ 1 Crash state: perfetto::base::Hash::Update perfetto::base::StringView::Hash perfetto::traceprocessor::StringPool::InternString...

7.2AI score
Exploits0References1
OSV
OSV
added 2020/07/01 12:0 a.m.8 views

OSV-2020-518 Global-buffer-overflow in perfetto::trace_processor::ParseSystraceTracePoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13481 Crash type: Global-buffer-overflow READ 1 Crash state: perfetto::traceprocessor::ParseSystraceTracePoint perfetto::traceprocessor::ProtoTraceParser::ParsePrint perfetto::traceprocessor::ProtoTraceParser::ParseFtracePacke...

7.2AI score
Exploits0References1
OSV
OSV
added 2020/07/01 12:0 a.m.20 views

OSV-2020-449 Heap-buffer-overflow in perfetto::trace_processor::FuchsiaTraceParser::ParseTracePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14752 Crash type: Heap-buffer-overflow READ 8 Crash state: perfetto::traceprocessor::FuchsiaTraceParser::ParseTracePacket perfetto::traceprocessor::TraceSorter::SortAndExtractEventsBeyondWindow...

7.2AI score
Exploits0References1
OSV
OSV
added 2020/07/01 12:0 a.m.17 views

OSV-2020-376 Heap-buffer-overflow in perfetto::trace_processor::fuchsia_trace_utils::ReadTimestamp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14767 Crash type: Heap-buffer-overflow READ 8 Crash state: perfetto::traceprocessor::fuchsiatraceutils::ReadTimestamp perfetto::traceprocessor::FuchsiaTraceParser::ParseTracePacket...

7.2AI score
Exploits0References1
ossfuzz
ossfuzz
added 2020/06/07 7:57 a.m.13 views

perfetto:trace_processor_fuzzer: Heap-buffer-overflow in perfetto::trace_processor::ClockTracker::ConvertSlowpath

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed Report: https://oss-fuzz.com/testcase?key=6264709723717632 Project: perfetto Fuzzing Engine: libFuzzer Fuzz Target: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Crash Type: Heap-buffer-overfl...

6.4AI score
Exploits0Affected Software1
ossfuzz
ossfuzz
added 2020/04/28 10:14 a.m.14 views

perfetto:trace_processor_fuzzer: Heap-use-after-free in std::__1::vector<unsigned long, std::__1::allocator<unsigned long> >::begin

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed Report: https://oss-fuzz.com/testcase?key=5636845317914624 Project: perfetto Fuzzing Engine: honggfuzz Fuzz Target: traceprocessorfuzzer Job Type: honggfuzzasanperfetto Platform Id: linux Crash Type: Heap-use-after-fre...

6.4AI score
Exploits0Affected Software1
ossfuzz
ossfuzz
added 2020/01/10 12:8 p.m.13 views

perfetto:trace_processor_fuzzer: Crash in perfetto::trace_processor::TraceStorage::GetIdForVariadicType

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed Report: https://oss-fuzz.com/testcase?key=5687501234896896 Project: perfetto Fuzzing Engine: libFuzzer Fuzz Target: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Crash Type: UNKNOWN READ Crash...

6.8AI score
Exploits0Affected Software1
Rows per page
Query Builder