OSV-2020-343 Stack-use-after-return in ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13741 Crash type: Stack-use-after-return READ 1 Crash state: ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage ot::MeshCoP::ChannelMaskTlv::GetChannelMask ot::MeshCoP::ChannelMaskTlv::GetChannelMask...

open62541:fuzz_json_decode: Stack-use-after-scope in parseUnsignedInteger

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=4701111155163136 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash...

open62541:fuzz_json_decode: Stack-use-after-scope in strtoll

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=4628081611636736 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzjsondecode Job Type: aflasanopen62541 Platform Id: linux Crash Type: Stack-use-after-scope WRITE 8 Crash Address:...

envoy:codec_impl_fuzz_test: Stack-use-after-scope in Envoy::Http::Http1::ConnectionImpl::readDisable

Detailed Report: https://oss-fuzz.com/testcase?key=5716313302630400 Project: envoy Fuzzing Engine: afl Fuzz Target: codecimplfuzztest Job Type: aflasanenvoy Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address: 0x7f5c31653660 Crash State:...

Moderate: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2019-14024

Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8917, MSM8953, Nicobar, QM215, Rennell, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR2130...

Code injection

Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8917, MSM8953, Nicobar, QM215, Rennell, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR2130...

CVE-2019-14024

Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8917, MSM8953, Nicobar, QM215, Rennell, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR2130...

CVE-2019-14024

CVE-2019-14024 is a stack-use-after-scope issue in the NFC card-emulation use case (Qualcomm Snapdragon NFC). Linked sources identify the affected area as Qualcomm NFC components and note publication in Qualcomm’s security bulletin with a quest for patches (QC-2494103). The CVE is referenced in R...

CVE-2019-14024: Use After Free

Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8917, MSM8953, Nicobar, QM215, Rennell, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR2130...

CVE-2019-15691

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...

CVE-2019-15691

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...

CVE-2019-15691

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...

CVE-2019-15691

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...

Stack overflow

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...

CVE-2019-15691

TigerVNC is affected by CVE-2019-15691 due to a stack use-after-return in ZRLEDecoder when a decoding routine unwinds with a freed stack variable. Affected product: TigerVNC prior to version 1.10.1 (remote server/client). Impact per sources: exploitation could potentially lead to remote code exec...

CVE-2019-15691

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...

CVE-2019-15691

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...

envoy:header_map_impl_fuzz_test: Stack-use-after-scope in Envoy::TrieLookupTable<Envoy::Http::HeaderMapImpl::StaticLookupResponse

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5746385563680768 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: headermapimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Stack-use-after-scope READ 1 Crash Address:...

libhevc:hevc_dec_fuzzer: Stack-use-after-return in ihevcd_process_thread

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5176835272343552 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Stack-use-after-return RE...