CVE-2019-15691

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...

CVE-2019-15691

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...

Stack overflow

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...

CVE-2019-15691

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...

CVE-2019-15691

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...

CVE-2019-15691

TigerVNC is affected by CVE-2019-15691 due to a stack use-after-return in ZRLEDecoder when a decoding routine unwinds with a freed stack variable. Affected product: TigerVNC prior to version 1.10.1 (remote server/client). Impact per sources: exploitation could potentially lead to remote code exec...

CVE-2019-15691

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack...

envoy:header_map_impl_fuzz_test: Stack-use-after-scope in Envoy::TrieLookupTable<Envoy::Http::HeaderMapImpl::StaticLookupResponse

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5746385563680768 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: headermapimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Stack-use-after-scope READ 1 Crash Address:...

libhevc:hevc_dec_fuzzer: Stack-use-after-return in ihevcd_process_thread

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5176835272343552 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Stack-use-after-return RE...

libhevc:hevc_dec_fuzzer: Stack-use-after-return in ihevcd_process_thread

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5728826448936960 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasanlibhevc Platform Id: linux Crash Type: Stack-use-after-return READ 8...

libhevc:hevc_dec_fuzzer: Stack-use-after-return in ihevcd_process_thread

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5108935064813568 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasanlibhevc Platform Id: linux Crash Type: Stack-use-after-return READ 8...

libhevc:hevc_dec_fuzzer: Stack-use-after-return in ihevcd_process_thread

Detailed Report: https://oss-fuzz.com/testcase?key=5755310228111360 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address: 0xf64c5c28 Crash State: ihevcdprocessthread clon...

njs/njs_process_script_fuzzer: Stack-use-after-return in compile_regex

Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5682963594870784 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Stack-use-after-return READ 2 Crash Addres...

openssl/client: Stack-use-after-return in OSSL_PARAM_get_int32

Project: https://github.com/openssl/openssl.git Detailed report: https://oss-fuzz.com/testcase?key=5648601105039360 Project: openssl Fuzzer: aflopensslclient Fuzz target binary: client Job Type: aflasanopenssl Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address:...

harfbuzz/hb-subset-fuzzer: Stack-use-after-return in bool OT::Coverage::serialize<hb_map_iter_t<hb_map_iter_t<hb_filter_iter_t<OT::Co

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5634197349203968 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type:...

chakra: Stack-use-after-return in Js::NarrowStringToWide

Detailed report: https://oss-fuzz.com/testcase?key=5668803167387648 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Stack-use-after-return READ Crash Address: 0x7f9fb8b97920 Crash State: Js::NarrowStringToWide Js::WabtInterface::EntryConvertWast2Wasm...

openthread/ip6-send-fuzzer: Stack-use-after-return in ot::MeshCoP::ChannelMaskEntryBase::GetChannelPage

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5153373483958272 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type:...

libpng-proto/png_transforms_fuzzer: Stack-use-after-return in OSS_FUZZ_png_safe_execute

Detailed report: https://oss-fuzz.com/testcase?key=5756860290826240 Project: libpng-proto Fuzzer: libFuzzerlibpng-protopngtransformsfuzzer Fuzz target binary: pngtransformsfuzzer Job Type: libfuzzerasanlibpng-proto Platform Id: linux Crash Type: Stack-use-after-return WRITE 8 Crash Address:...

radare2/ia_fuzz: Stack-use-after-return in sdb_itoa

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5735397466832896 Project: radare2 Fuzzer: aflradare2iafuzz Fuzz target binary: iafuzz Job Type: aflasanradare2 Platform Id: linux Crash Type:...

jsc: Stack-use-after-scope in JSC::MarkedBlock::vm

Detailed report: https://oss-fuzz.com/testcase?key=5635965041770496 Project: jsc Fuzzer: jsfuzzer Job Type: asanjsc Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address: 0x7fffb7b6bed8 Crash State: JSC::MarkedBlock::vm JSC::JSObject JSC::jsCast JSC::asObject Sanitizer: addres...