OSV-2020-388 Stack-use-after-return in bool OT::Coverage::serialize<hb_map_iter_t<hb_map_iter_t<hb_filter_iter_t<OT::Co

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14786 Crash type: Stack-use-after-return READ 4 Crash state: bool OT::Coverage::serializehbmapiterthbmapiterthbfilteritertOT::Co bool OT::SingleSubstFormat1::serializehbmapiterthbmapiterthbfilterite bool...

OSV-2020-364 Stack-use-after-return in ihevcd_process_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17601 Crash type: Stack-use-after-return READ 4 Crash state: ihevcdprocessthread clone...

OSV-2020-343 Stack-use-after-return in ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13741 Crash type: Stack-use-after-return READ 1 Crash state: ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage ot::MeshCoP::ChannelMaskTlv::GetChannelMask ot::MeshCoP::ChannelMaskTlv::GetChannelMask...

PT-2020-22320

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Stack-use-after-return READ 4. The crash state involves several functions: OSSL PARAM get int32, md5 sha...

PT-2020-22448

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of Stack-use-after-return WRITE 1. The crash state involves functions such as sdb itoa, parse resource directory. No...

PT-2020-22439

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Stack-use-after-return READ 8. The crash state involves the ihievcd process thread and start thread...

PT-2020-22273

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Stack-use-after-return READ 4. The crash state involves the ihievcd process thread and clone functions. ...

PT-2020-22261

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurs due to a stack-use-after-return READ 1 issue. The crash involves the GetChannelPage function in MeshCoP::ChannelMaskEntryBase, and the...

PT-2020-22290

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported, identified as a Stack-use-after-return READ 4 issue. The crash involves the serialization of certain components, including...

open62541:fuzz_json_decode: Stack-use-after-scope in parseUnsignedInteger

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=4701111155163136 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash...

open62541:fuzz_json_decode: Stack-use-after-scope in strtoll

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=4628081611636736 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzjsondecode Job Type: aflasanopen62541 Platform Id: linux Crash Type: Stack-use-after-scope WRITE 8 Crash Address:...

envoy:codec_impl_fuzz_test: Stack-use-after-scope in Envoy::Http::Http1::ConnectionImpl::readDisable

Detailed Report: https://oss-fuzz.com/testcase?key=5716313302630400 Project: envoy Fuzzing Engine: afl Fuzz Target: codecimplfuzztest Job Type: aflasanenvoy Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address: 0x7f5c31653660 Crash State:...

Moderate: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2019-14024

Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8917, MSM8953, Nicobar, QM215, Rennell, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR2130...

Code injection

Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8917, MSM8953, Nicobar, QM215, Rennell, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR2130...

CVE-2019-14024

Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8917, MSM8953, Nicobar, QM215, Rennell, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR2130...

CVE-2019-14024

CVE-2019-14024 is a stack-use-after-scope issue in the NFC card-emulation use case (Qualcomm Snapdragon NFC). Linked sources identify the affected area as Qualcomm NFC components and note publication in Qualcomm’s security bulletin with a quest for patches (QC-2494103). The CVE is referenced in R...

PT-2020-9450

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions in MSM8917, MSM8953, Nicobar, QM215, Rennell, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR2130 Description: A possible stack-use-after-scope issue exists in the NFC u...

CVE-2019-14024: Use After Free

Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8917, MSM8953, Nicobar, QM215, Rennell, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR2130...

CVE-2019-15691

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...