14499 matches found
PT-2024-40579 · Git +1 · Mruby
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash state includes functions such as udiv, mrb bint mod, and mrb vm exe...
Ouch! allows a segmentation fault due to use of uninitialized memory
When trying to decompress a file using "ouch", we can reach the function "ouch::archive::zip::convertzipdatetime". In the function, there is a unsafe function, "transmute". Once the "transmute" function is called to convert the type of "month" object, the address of the object is changed to the...
GHSA-2WQ5-G96F-MV3V Ouch! allows a segmentation fault due to use of uninitialized memory
When trying to decompress a file using "ouch", we can reach the function "ouch::archive::zip::convertzipdatetime". In the function, there is a unsafe function, "transmute". Once the "transmute" function is called to convert the type of "month" object, the address of the object is changed to the...
mruby:mruby_fuzzer: Segv on unknown address in udiv
Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6700611679092736 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: udiv mpzmdiv...
RUSTSEC-2024-0374 Segmentation fault due to use of uninitialized memory
When trying to decompress a file using "ouch", we can reach the function "ouch::archive::zip::convertzipdatetime". In the function, there is a unsafe function, "transmute". Once the "transmute" function is called to convert the type of "month" object, the address of the object is changed to the...
Segmentation fault due to use of uninitialized memory
When trying to decompress a file using "ouch", we can reach the function "ouch::archive::zip::convertzipdatetime". In the function, there is a unsafe function, "transmute". Once the "transmute" function is called to convert the type of "month" object, the address of the object is changed to the...
mruby:mruby_fuzzer: Segv on unknown address in udiv
Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4764129607352320 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: udiv...
PT-2024-40921 · Ouch · Ouch
Name of the Vulnerable Software and Affected Versions: ouch affected versions not specified Description: The issue arises when attempting to decompress a file using ouch. It involves reaching the function ouch::archive::zip::convert zip date time, where an unsafe function, transmute, is called...
Exploit for Command Injection in Dlink Dns-320L_Firmware
CVE-2024-3273 - D-Link Remote Code Execution RCE Exploit...
K000141126: Multiple FreeType vulnerabilities
Security Advisory Description CVE-2022-27404 FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface. CVE-2017-8287 FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow relate...
qemu:qemu-fuzz-i386-target-generic-fuzz-megaraid: Segv on unknown address in address_space_unmap
Detailed Report: https://oss-fuzz.com/testcase?key=5534266006503424 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-megaraid Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: addressspaceunmap...
K000141078: Multiple SQLite vulnerabilities
Security Advisory Description CVE-2020-11655 SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled. CVE-2019-19646 pragma.c in SQLite through 3.30.1 mishandles NOT NULL...
llamacpp:fuzz_structurally_created: Segv on unknown address in fuzz_structurally_created
Detailed Report: https://oss-fuzz.com/testcase?key=5293059938516992 Project: llamacpp Fuzzing Engine: afl Fuzz Target: fuzzstructurallycreated Job Type: aflasanllamacpp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: fuzzstructurallycreated Sanitizer: address AS...
envoy:ext_authz_grpc_fuzz_test: Segv on unknown address in Envoy::Extensions::HttpFilters::ExtAuthz::Filter::updateLoggingInfo
Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5836362295607296 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: extauthzgrpcfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...
mruby:mruby_fuzzer: Segv on unknown address in mrb_bint_reduce
Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5084180629749760 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...
libzmq:test_bind_fuzzer: Segv on unknown address in test_bind_fuzzer
Detailed Report: https://oss-fuzz.com/testcase?key=5083360966279168 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testbindfuzzer Job Type: libfuzzerasanlibzmq Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: testbindfuzzer Sanitizer: address ASAN Crash...
Updated libtiff packages fix security vulnerability
A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...
MGASA-2024-0287 Updated libtiff packages fix security vulnerability
A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...
RUSTSEC-2024-0404 Unsoundness in anstream
When given a valid UTF8 string "ö\x1b😀", the function in crates/anstream/src/adapter/strip.rs will be confused. The UTF8 bytes are \xc3\xb6 then \x1b then \xf0\x9f\x98\x80. When looping over "non-printable bytes" \x1b\xf0 will be considered as some non-printable sequence. This will produce a brok...