PT-2023-17969 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-13 Description: In the xmlParseTryOrFinish function of parser.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution...

hunspell:affdicfuzzer: Heap-buffer-overflow in AffixMgr::compound_check

Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=6507738394656768 Project: hunspell Fuzzing Engine: libFuzzer Fuzz Target: affdicfuzzer Job Type: libfuzzerasanhunspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

CVE-2023-0969 Global read overflow in Z/IP Gateway

A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory...

libxml2:xml: Global-buffer-overflow in xmlDictLookup

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4699711567953920 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzerasani386libxml2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

UBUNTU-CVE-2023-2977

A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardoshaveverifyrcpackage. The attacker can supply a smart card package with malformed ASN1 context. The cardoshaveverifyrcpackage function scans the ASN1 buffer for 2 tags, where remaining lengt...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_check_punycode_string

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4762941808050176 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000000c0...

openexr:openexr_exrcorecheck_fuzzer: Heap-buffer-overflow in internal_huf_decompress

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=4854741231075328 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcorecheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in NetworkInterface::dissectPacket

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=4520845977190400 Project: ntopng Fuzzing Engine: afl Fuzz Target: fuzzdissectpacket Job Type: aflasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61d000003100 Crash...

openexr:openexr_exrcorecheck_fuzzer: Heap-buffer-overflow in libdeflate_zlib_decompress_ex

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=4927979927764992 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcorecheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Cra...

openexr:openexr_exrcorecheck_fuzzer: Stack-buffer-overflow in DwaCompressor_readChannelRules

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=6514127842181120 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcorecheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Stack-buffer-overfl...

liblouis:fuzz_translate_generic: Heap-buffer-overflow in _lou_stringHash

Project: https://github.com/liblouis/liblouis.git Detailed Report: https://oss-fuzz.com/testcase?key=4759594577297408 Project: liblouis Fuzzing Engine: afl Fuzz Target: fuzztranslategeneric Job Type: aflasanliblouis Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

mysql-server:fuzz_initfile: Heap-buffer-overflow in my_ismbchar_utf8

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=6162994488016896 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

hdf5:h5_read_fuzzer: Heap-buffer-overflow in H5F_get_checksums

Detailed Report: https://oss-fuzz.com/testcase?key=6668431385821184 Project: hdf5 Fuzzing Engine: afl Fuzz Target: h5readfuzzer Job Type: aflasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000003a8f Crash State: H5Fgetchecksums H5Ocacheverifychksum H5Cprote...

graphicsmagick:coder_TOPOL_fuzzer: Heap-buffer-overflow in WriteTopoLImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6172181787967488 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderTOPOLfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in ZSTD_decompressSequencesLong_bmi2

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5980444691922944 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Addres...

libredwg:llvmfuzz: Heap-buffer-overflow in bit_utf8_to_TU

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5924490852040704 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

suricata:fuzz_applayerparserparse: Heap-buffer-overflow in HtpRequestBodyHandleMultipart

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=6022481168433152 Project: suricata Fuzzing Engine: afl Fuzz Target: fuzzapplayerparserparse Job Type: aflasansuricata Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

wolfssl:fuzzer-wolfssl-client: Heap-buffer-overflow in GetDateInfo

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4914558627348480 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-client Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

wolfssl:fuzzer-wolfssl-x509: Heap-buffer-overflow in ParseCertRelative

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5272339217776640 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-x509 Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libxml2:html: Global-buffer-overflow in htmlParseDocument

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5774657637974016 Project: libxml2 Fuzzing Engine: honggfuzz Fuzz Target: html Job Type: honggfuzzasanlibxml2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...