11422 matches found
PT-2022-37267 · Git +1 · Hunspell
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read, which occurs in the PfxEntry::test condition function, called by PfxEntry::checkword and...
PT-2022-37262 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-underflow read error. Technical details about the crash include the functions gs type2 interpret, copied type1 gly...
hunspell:affdicfuzzer: Stack-buffer-overflow in PfxEntry::test_condition
Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=5030975893012480 Project: hunspell Fuzzing Engine: afl Fuzz Target: affdicfuzzer Job Type: aflasanhunspell Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7ffc62a7c898...
CVE-2022-36660
xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pcivtrndnotify...
ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-underflow in gs_type2_interpret
Detailed Report: https://oss-fuzz.com/testcase?key=5883482550697984 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7fc19708641c Crash State:...
CVE-2022-36660
CVE-2022-36660 affects xhyve at commit dfbe09b, with a stack buffer overflow in the pci_vtrnd_notify() component. The advisory signals a high-severity impact (CVSS 3.1: 9.8) through network access, no user interaction, and high impact to confidentiality, integrity, and availability. A temporary m...
CVE-2022-36660
xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pcivtrndnotify...
CVE-2022-36660
xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pcivtrndnotify...
CVE-2022-36660
xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pcivtrndnotify...
Amazon Linux 2022 : libtiff, libtiff-devel, libtiff-static (ALAS2022-2022-094)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-094 advisory. A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a hea...
CVE-2022-36660: Out-of-bounds Write
xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pcivtrndnotify...
ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-underflow in gs_type1_piece_codes
Detailed Report: https://oss-fuzz.com/testcase?key=6048427783356416 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7fff06cf82dc Crash State:...
OSV-2022-842 Stack-buffer-overflow in wc_Shake256_Final
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50946 Crash type: Stack-buffer-overflow WRITE Crash state: wcShake256Final wced448signmsgex wced448signmsg...
PT-2022-37248 · Git +1 · Wolfssl
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details include the involvement of specific function names such as wc Shake256 Final, wc...
cryptofuzz:cryptofuzz-boringssl: Stack-buffer-overflow in wc_Shake256_Final
Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5623509891547136 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Stack-buffer-overflow WRITE...
cryptofuzz:cryptofuzz-boringssl-noasm: Stack-buffer-overflow in wc_Sha3_512_Final
Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5049072880320512 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Stack-buffer-overflow...
cryptofuzz:cryptofuzz-boringssl-noasm: Stack-buffer-overflow in wc_Sha3_256_Final
Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=4523566678278144 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Stack-buffer-overflow...
wolfssl:cryptofuzz-normal-math: Stack-buffer-overflow in wc_Shake256_Final
Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5057208924110848 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-normal-math Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Addres...
Denial Of Service (DoS)
libtiff.so is vulnerable to denial of service. The vulnerability exists due to the stack buffer overflow in the main function of tiffcp.c, allowing an attacker to crash the application by providing a maliciously crafted TIFF file to the tiffcp tool...