OSV-2021-269 Stack-use-after-return in sta_prop_equal_fn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30192 Crash type: Stack-use-after-return READ 6 Crash state: stapropequalfn wmemmapinsert dissectieeeNUMBERcommon...

PT-2021-28040

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported, identified as a Stack-use-after-return READ 6 issue. The crash state involves several functions, including sta prop equal fn, wm...

wireshark:fuzzshark_ip_proto-udp: Stack-use-after-return in sta_prop_equal_fn

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=4975614442471424 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux...

CentOS 8 : tigervnc (CESA-2020:1497)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1497 advisory. - tigervnc: Stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder CVE-2019-15691 - tigervnc: Heap buffer overflow triggered from...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.12 and fixes at least the following security issues: fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPL...

CVE-2021-3347

An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458...

CVE-2021-3347

CVE-2021-3347 is a Linux kernel use-after-free in PI futex fault handling that could allow a local user to crash the kernel or escalate privileges. Multiple connected advisories confirm the issue and indicate fixes have been released across distributions (e.g., generic kernel updates and kernel l...

CVE-2021-3347

An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458...

ffmpeg:ffmpeg_BSF_AV1_METADATA_fuzzer: Stack-use-after-return in cbs_av1_write_obu

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5931515701755904 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFAV1METADATAfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-use-after-return WRITE 1 Crash Addres...

OSV-2018-106 Stack-use-after-return in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10082 Crash type: Stack-use-after-return READ 1 Crash state: BEInt::operator unsigned short OT::CoverageFormat2::Iter::more OT::SingleSubstFormat2::closure...

PT-2021-27463

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported, identified as a Stack-use-after-return READ 1 type. The crash state involves several function calls, including BEInt::operator...

php:php-fuzz-unserialize: Stack-use-after-return in zval_get_type

Detailed Report: https://oss-fuzz.com/testcase?key=4532420363812864 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-unserialize Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Stack-use-after-return READ 1 Crash Address: 0x7f3a73cf7308 Crash State: zvalgettype...

ASB-A-158063095

In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

selinux:secilc-fuzzer: Stack-use-after-return in cil_copy_expr

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5316920295424000 Project: selinux Fuzzing Engine: afl Fuzz Target: secilc-fuzzer Job Type: aflasanselinux Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address:...

OSV-2020-2254 Stack-use-after-return in insert_pin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28383 Crash type: Stack-use-after-return READ 1 Crash state: insertpin detectidkey scpkcs15emutcosinitex...

PT-2020-22182

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported, identified as a Stack-use-after-return READ 1 type. The crash state involves several functions: insert pin, detect idkey, and sc...

WS-2020-0306

OpenSC before 0.22.0-rc1 is vulnerable to stack-use-after-return in insertpin on src/libopensc/pkcs15-tcos.c...

serenity:FuzzICOLoader: Stack-use-after-return in AK::Vector<unsigned char, 0ul>::clear_with_capacity

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=4888328016756736 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzICOLoader Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address...

qemu:qemu-fuzz-i386-target-virtio-blk-fuzz: Stack-use-after-return in tracked_request_begin

Detailed Report: https://oss-fuzz.com/testcase?key=5702858460364800 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-virtio-blk-fuzz Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Stack-use-after-return WRITE 8 Crash Address: 0x7fe5791212c8 Crash State:...

OSV-2020-2131 Stack-use-after-return in solidity::smtutil::CHCSmtLib2Interface::querySolver

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26997 Crash type: Stack-use-after-return READ 8 Crash state: solidity::smtutil::CHCSmtLib2Interface::querySolver solidity::smtutil::CHCSmtLib2Interface::query solidity::frontend::CHC::query...