CVE-2020-14147

An integer overflow in the getnum function in luastruct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox restrictions via a large...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in asepcos_parse_sec_attr

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4787170371174400 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ndpi:fuzz_process_packet: Use-of-uninitialized-value in ndpi_check_dga_name

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4846815202770944 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

dovecot:fuzz-smtp-server: Heap-buffer-overflow in smtp_command_parse_line

Project: https://github.com/dovecot/core.git Detailed Report: https://oss-fuzz.com/testcase?key=6020231943421952 Project: dovecot Fuzzing Engine: afl Fuzz Target: fuzz-smtp-server Job Type: aflasandovecot Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000007100 Cra...

imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6275808921649152 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

minizip:unzip_fuzzer: Stack-buffer-overflow in crc32_z

Project: https://github.com/nmoinvaz/minizip.git Detailed Report: https://oss-fuzz.com/testcase?key=5766806240493568 Project: minizip Fuzzing Engine: libFuzzer Fuzz Target: unzipfuzzer Job Type: libfuzzerasani386minizip Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

cryptofuzz:cryptofuzz-openssl: Heap-buffer-overflow in CryptoPP::xorbuf

Detailed Report: https://oss-fuzz.com/testcase?key=5647824103669760 Project: cryptofuzz Fuzzing Engine: afl Fuzz Target: cryptofuzz-openssl Job Type: aflasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x610000000cf0 Crash State: CryptoPP::xorbuf...

CVE-2020-14147

An integer overflow in the getnum function in luastruct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox restrictions via a large...

CVE-2020-14147

The CVE-2020-14147 issue is a vulnerability in Redis: an integer overflow in the getnum function of lua_struct.c on Redis builds before 6.0.3 can be triggered by processing large numbers in Lua code, leading to memory corruption, a denial of service (application crash), and potentially bypassing ...

ffmpeg:ffmpeg_AV_CODEC_ID_HCA_fuzzer: Index-out-of-bounds in reconstruct_hfr

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5089866596745216 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHCAfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

matio:matio_fuzzer: Crash in Mat_H5ReadFieldNames

Detailed Report: https://oss-fuzz.com/testcase?key=6249571570417664 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fa1ef9ce0f8 Crash State: MatH5ReadFieldNames MatH5ReadGroupInfo...

pcapplusplus:FuzzTarget: Bad-cast to pcpp::IDnsResourcepcpp::DnsLayer::parseResources in pcpp::DnsLayer::DnsLayer

Detailed Report: https://oss-fuzz.com/testcase?key=5781142119907328 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerubsanpcapplusplus Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000021c1c00 Crash State: Bad-cast to...

open62541:fuzz_json_decode: Stack-use-after-scope in parseUnsignedInteger

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=4701111155163136 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash...

open62541:fuzz_json_decode: Stack-use-after-scope in strtoll

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=4628081611636736 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzjsondecode Job Type: aflasanopen62541 Platform Id: linux Crash Type: Stack-use-after-scope WRITE 8 Crash Address:...

draco:draco_decoder_fuzzer: Crash in std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_trait

Project: https://github.com/google/draco.git Detailed Report: https://oss-fuzz.com/testcase?key=5750127758409728 Project: draco Fuzzing Engine: libFuzzer Fuzz Target: dracodecoderfuzzer Job Type: libfuzzerubsandraco Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000002242 Crash...

gdal:ods_fuzzer: Heap-buffer-overflow in OGRFeatureFormatDateTimeBuffer

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5149140702199808 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: odsfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x604000007500 Crash...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_parse_packet_line_info

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5731163196096512 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6100000001fa...

skia:svg_dom: Global-buffer-overflow in SkParse::FindNamedColor

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5124092452929536 Project: skia Fuzzing Engine: afl Fuzz Target: svgdom Job Type: aflasanskia Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000001da0690 Crash State:...

leptonica:pageseg_fuzzer: Heap-buffer-overflow in rasteropGeneralLow

Detailed Report: https://oss-fuzz.com/testcase?key=5183514231439360 Project: leptonica Fuzzing Engine: afl Fuzz Target: pagesegfuzzer Job Type: aflasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x606000000418 Crash State: rasteropGeneralLow rasteropLow...

llvm:clang-fuzzer: Segv on unknown address in clang::CXXRecordDecl::data

Detailed Report: https://oss-fuzz.com/testcase?key=5749294702526464 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::CXXRecordDecl::data HandleDestructionImpl...