assimp:assimp_fuzzer_ifc: Bad-cast to std::__shared_weak_count from invalid vptr in std::__1::shared_ptr<Assimp::STEP::EXPRESS::DataType const>::shared_ptr

Detailed Report: https://oss-fuzz.com/testcase?key=4579058511052800 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzerifc Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5615beca3bf0 Crash State: Bad-cast to std::sharedweakcount from invali...

EUVD-2020-3463

Malware in sbrugna...

pcl:ply_reader_fuzzer: Bad-cast to pcl::io::ply::ply_parser::list_property<unsigned int, float> from invalid vptr in std::__1::__shared_ptr_pointer<pcl::io::ply::ply_parser::list_property<unsigned

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=4733380273504256 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002e97c10 Crash...

pcl:ply_reader_fuzzer: Crash in __dynamic_cast

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=6005752884494336 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x001200000418 Crash...

CVE-2021-0703

In SecondStageMain of init.cpp, there is a possible use after free due to incorrect sharedptr usage. This could lead to local escalation of privilege if the attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for...

Design/Logic Flaw

In SecondStageMain of init.cpp, there is a possible use after free due to incorrect sharedptr usage. This could lead to local escalation of privilege if the attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0703

CVE-2021-0703 is an Android 11 vulnerability in the Android runtime component (SecondStageMain in init.cpp) caused by incorrect shared_ptr usage, leading to a use-after-free and local escalation of privilege when an attacker has physical access to the device (no user interaction required). Docume...

pcl:ply_reader_fuzzer: Bad-cast to std::__shared_weak_countstd::__1::shared_ptr<pcl::io::ply::ply_parser::property>::~shared_ptr in std::__1::__vector_base<std::__1::shared_ptr<pcl::io::ply::ply_parser::property>

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=6443473755570176 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002d69590 Crash...

pcl:ply_reader_fuzzer: Crash in std::__1::__function::__value_func<void

Detailed Report: https://oss-fuzz.com/testcase?key=5173660236251136 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000804848 Crash State: std::1::function::valuefuncvoid...

pcl:ply_reader_fuzzer: Bad-cast to std::__shared_weak_count from invalid vptr in std::__1::shared_ptr<pcl::io::ply::ply_parser::property>::~shared_ptr

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=5284369905352704 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000001729650 Crash...

uwebsockets:EpollEchoServer: Bad-cast to std::__shared_weak_countstd::__1::shared_ptr<bool>::~shared_ptr in ofats::any_detail::handler_traits<void>::handler_base<ofats::any_detail::handler

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5678855417364480 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: EpollEchoServer Job Type: libfuzzerubsanuwebsockets Platform Id: linux Crash Type: Bad-cast Crash Address:...

uwebsockets:EpollEchoServer: Bad-cast to std::__shared_weak_count from invalid vptr in std::__1::shared_ptr<bool>::~shared_ptr

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=4735666304974848 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: EpollEchoServer Job Type: libfuzzerubsanuwebsockets Platform Id: linux Crash Type: Bad-cast Crash Address:...

CVE-2020-11105

An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::sharedptr values, using the raw pointer address as a unique identifier. This becomes problematic if an std::sharedptr variable goes out of scope and is freed, and a new std::sharedptr is allocated at the same...

CVE-2020-11105

An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::sharedptr values, using the raw pointer address as a unique identifier. This becomes problematic if an std::sharedptr variable goes out of scope and is freed, and a new std::sharedptr is allocated at the same...

Design/Logic Flaw

An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::sharedptr values, using the raw pointer address as a unique identifier. This becomes problematic if an std::sharedptr variable goes out of scope and is freed, and a new std::sharedptr is allocated at the same...

CVE-2020-11105

An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::sharedptr values, using the raw pointer address as a unique identifier. This becomes problematic if an std::sharedptr variable goes out of scope and is freed, and a new std::sharedptr is allocated at the same...

CVE-2020-11105

CVE-2020-11105 affects USC iLab cereal up to version 1.3.0, where serialization fidelity of std::shared_ptrs can be broken because the library caches shared_ptr raw addresses as identifiers. When a shared_ptr goes out of scope and a new one is allocated at the same address, serialized values may ...

CVE-2020-11105: Release of Invalid Pointer or Reference

An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::sharedptr values, using the raw pointer address as a unique identifier. This becomes problematic if an std::sharedptr variable goes out of scope and is freed, and a new std::sharedptr is allocated at the same...

Release of Invalid Pointer or Reference

An issue was discovered in USC iLab cereal. It employs caching of std::sharedptr values, using the raw pointer address as a unique identifier. This becomes problematic if a std::sharedptr variable goes out of scope and is freed, and a new std::sharedptr is allocated at the same address...

PT-2020-12552

Name of the Vulnerable Software and Affected Versions USC iLab cereal versions 1.3.0 and earlier Description An issue was discovered in USC iLab cereal where it employs caching of std::shared ptr values, using the raw pointer address as a unique identifier. This becomes problematic if an...