pigweed:bredr_dynamic_channel_registry_fuzzer: Heap-use-after-free in bt::l2cap::internal::BrEdrDynamicChannel::OnRxConfigReq

Detailed Report: https://oss-fuzz.com/testcase?key=4533194677878784 Project: pigweed Fuzzing Engine: libFuzzer Fuzz Target: bredrdynamicchannelregistryfuzzer Job Type: libfuzzerasanpigweed Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x5160000003c0 Crash State:...

pigweed:peer_cache_fuzzer: Use-of-uninitialized-value in unsigned long bt::Random<unsigned long>

Detailed Report: https://oss-fuzz.com/testcase?key=6254271758139392 Project: pigweed Fuzzing Engine: libFuzzer Fuzz Target: peercachefuzzer Job Type: libfuzzermsanpigweed Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: unsigned long bt::Random bt::RandomPeerI...

analysisstore (0.0.5), bluesky-browser (0.1.0a1) +14 more potentially affected by CVE-2024-52804 via tornado (5.0.0b1)

tornado PYPI version 5.0.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - analysisstore 0.0.5 - bluesky-browser 0.1.0a1 - conftrak 0.0.6 - foebackend 1.0.0 - foeworkers 1.0.4 - httpwatcher 0.5.2 - legoman =1.0.0, =0.1....

pigweed:detokenize_fuzzer: Use-of-uninitialized-value in pw::tokenizer::Detokenizer::Detokenize

Detailed Report: https://oss-fuzz.com/testcase?key=6486433889058816 Project: pigweed Fuzzing Engine: libFuzzer Fuzz Target: detokenizefuzzer Job Type: libfuzzermsanpigweed Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pw::tokenizer::Detokenizer::Detokenize...

pigweed:encoder_fuzz_test: Use-of-uninitialized-value in pw::protobuf::fuzz::RecursiveFuzzedEncode

Detailed Report: https://oss-fuzz.com/testcase?key=5998708241006592 Project: pigweed Fuzzing Engine: libFuzzer Fuzz Target: encoderfuzztest Job Type: libfuzzermsanpigweed Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pw::protobuf::fuzz::RecursiveFuzzedEncod...

pigweed:uart_transport_fuzzer: Bad-cast to pw::stream::Writer from pw::stream::NullStream in pw::stream::ReaderWriter::operator pw::stream::Writer&

Detailed Report: https://oss-fuzz.com/testcase?key=4832986650247168 Project: pigweed Fuzzing Engine: libFuzzer Fuzz Target: uarttransportfuzzer Job Type: libfuzzerubsanpigweed Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000002c9138 Crash State: Bad-cast to pw::stream::Writer from...

pigweed:encoder_fuzz_test: Use-of-uninitialized-value in constexpr_c_functions.h

Detailed Report: https://oss-fuzz.com/testcase?key=5417308465790976 Project: pigweed Fuzzing Engine: libFuzzer Fuzz Target: encoderfuzztest Job Type: libfuzzermsanpigweed Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: constexprcfunctions.h std::2::basicstrin...

pigweed:detokenize_fuzzer: Use-of-uninitialized-value in pw::tokenizer::Detokenizer::Detokenize

Detailed Report: https://oss-fuzz.com/testcase?key=4827947886051328 Project: pigweed Fuzzing Engine: libFuzzer Fuzz Target: detokenizefuzzer Job Type: libfuzzermsanpigweed Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pw::tokenizer::Detokenizer::Detokenize...

Malicious code in pigweed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa23335d0d2993166e9a0b1d8fe7883cf12ee2fd360e174b7f50828d6d5e0bf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5333 Malicious code in pigweed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa23335d0d2993166e9a0b1d8fe7883cf12ee2fd360e174b7f50828d6d5e0bf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...