CVE-2023-52356

A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service...

kernel: objtool: Fix SEGFAULT

A NULL pointer dereference was found in objtool, a build-time tool used during Linux kernel compilation. When findinsn returns NULL on failure, the code proceeds to dereference the NULL pointer, causing objtool to crash with a segmentation fault during kernel build operations...

Moderate: Red Hat Security Advisory: freetype security update

An update for freetype is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Freetype: Segmentation violation via FT_Request_Size

A segmentation fault was found in FreeType’s FTRequestSize function in the ftobjs.c file. This flaw allows an attacker to access a memory location in a way that could cause an application to halt or crash, leading to a denial of service...

FreeType: Segmentation violation via FNT_Size_Request

A segmentation fault was found in the FreeType library. This flaw allows an attacker to attempt access to a memory location in a way that could cause an application to halt or crash, leading to a denial of service...

LibTIFF security vulnerabilities

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A segmentation error vulnerability exists in LibTIFF that stems from the presence of a segmentation error issue, which can be exploited by a...

RHEL 8 : freetype (RHSA-2024:0420)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0420 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual...

scapy:pcap_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6457523632668672 Project: scapy Fuzzing Engine: libFuzzer Fuzz Target: pcapfuzzer Job Type: libfuzzerasanscapy Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

tink:tink_encrypt_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5092839348305920 Project: tink Fuzzing Engine: libFuzzer Fuzz Target: tinkencryptfuzzer Job Type: libfuzzerasantink Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

qpdf:tiffpredictor_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4846796006293504 Project: qpdf Fuzzing Engine: afl Fuzz Target: tiffpredictorfuzzer Job Type: aflasanqpdf Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

nestegg:fuzz: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5163129306677248 Project: nestegg Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasannestegg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

nss:mpi-mulmod: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4617917299752960 Project: nss Fuzzing Engine: libFuzzer Fuzz Target: mpi-mulmod Job Type: libfuzzerasannss Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

libucl:ucl_add_string_fuzzer: Segv on unknown address in ucl_object_free_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5681856183861248 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: uclobjectfreeinternal uclparserfree...

woff2:convert_woff2ttf_fuzzer_new_entry: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4684628745060352 Project: woff2 Fuzzing Engine: libFuzzer Fuzz Target: convertwoff2ttffuzzernewentry Job Type: libfuzzerasanwoff2 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Cras...

zeek:zeek-smtp-fuzzer: Segv on unknown address in zeek::analyzer::smtp::SMTP_Analyzer::DeliverStream

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=4789219251781632 Project: zeek Fuzzing Engine: honggfuzz Fuzz Target: zeek-smtp-fuzzer Job Type: honggfuzzasanzeek Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

expat:xml_parsebuffer_fuzzer_US-ASCII: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4764610116780032 Project: expat Fuzzing Engine: libFuzzer Fuzz Target: xmlparsebufferfuzzerUS-ASCII Job Type: libfuzzerasanexpat Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

Contiki-NG Security Vulnerability

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A security vulnerability exists in Contiki-NG tinyDTLS version 2018-08-30 and prior versions, which stems from a vulnerability in the DTLS server that allows a remote attacker to reuse...

CoreMessaging Service Disclosure

The vulnerability of the CoreMessaging service in the Windows operating system is related to deficiencies in the segmentation of the system’s controlled areas. Exploiting this vulnerability could allow an attacker to disclose protected information...

snappy:snappy_compress_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5737804038471680 Project: snappy Fuzzing Engine: afl Fuzz Target: snappycompressfuzzer Job Type: aflasansnappy Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

piex:fuzzer-piex: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4891840604078080 Project: piex Fuzzing Engine: afl Fuzz Target: fuzzer-piex Job Type: aflasanpiex Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...