qemu:qemu-fuzz-i386-target-generic-fuzz-rtl8139: Stack-buffer-underflow in flatview_write_continue

Detailed Report: https://oss-fuzz.com/testcase?key=6417628110913536 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-rtl8139 Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Stack-buffer-underflow READ Crash Address: 0x7ffe7530fda0 Crash State:...

imagemagick:ping_tiff64_fuzzer: Stack-buffer-overflow in _TIFFVGetField

Detailed Report: https://oss-fuzz.com/testcase?key=5330314666311680 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingtiff64fuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0xffc69370 Crash State: TIFFVGetField...

Ransom Lockbit 3.0 MVID-2022-0620 Buffer Overflow

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/38745539b71cf201bb502437f891d799.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Ransom Lockbit 3.0 Vulnerability: Local Unicode Buffer Overflow SEH Description: The...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in LookupDict2

Detailed Report: https://oss-fuzz.com/testcase?key=5951744827326464 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f84a5488288 Crash State: LookupDict2 LookupDictLi...

CVE-2022-34835

In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the doi2cmd function...

OSV-2022-520 Stack-buffer-overflow in sc_asn1_read_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48476 Crash type: Stack-buffer-overflow READ 1 Crash state: scasn1readtag scasn1findtag cardoslistfiles...

OSV-2022-519 Stack-buffer-overflow in LookupThousands

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48470 Crash type: Stack-buffer-overflow WRITE Crash state: LookupThousands LookupNum3 TranslateNumber...

PT-2022-37060

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. The crash state indicates involvement of functions such as sc asn1 read tag, sc asn1 find tag,...

PT-2022-37059

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the functions LookupThousands, LookupNum3, and...

Das U-Boot 缓冲区错误漏洞

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A security vulnerability exists in Das U-Boot version 2022.07-rc5 and earlier versions, which stems from...

opensc:fuzz_card: Stack-buffer-overflow in sc_asn1_read_tag

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6302608886726656 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzcard Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fffc05c78f3...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in LookupThousands

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=4950865177346048 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

Denial Of Service (DoS)

gpac is vulnerable to denial of service DoS attacks. A stack buffer overflow in src/utils/error.c leads to a denial of service vulnerability...

Security update for dbus-broker (moderate)

openSUSE Security Update: Security update for dbus-broker Announcement ID: openSUSE-SU-2022:10030-1 Rating: moderate References: 1200332 1200333 Cross-References: CVE-2022-31212 CVE-2022-31213 CVSS scores: CVE-2022-31212 SUSE: 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L CVE-2022-31213 SUSE:...

Updated libtiff packages fix security vulnerability

Heap-buffer-overflow in TIFFReadRawDataStriped in tiffinfo.c. CVE-2022-1354 Stack-buffer-overflow in tiffcp.c in main. CVE-2022-1355 Out-of-bounds read in LZWDecode. CVE-2022-1622, CVE-2022-1623...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-1937)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-3054-1 : sleuthkit - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3054 advisory. - In The Sleuth Kit TSK 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660procdir in tsk/fs/iso9660dent.c in libtskfs.a, as...

Debian: Security Advisory (DLA-3054-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GPAC MP4Box Denial of Service Vulnerability

GPAC is a multimedia framework. A denial of service vulnerability exists in GPAC MP4Box version 1.1.0, which originates from a stack buffer overflow at src/utils/error.c:1769 that can be exploited by an attacker to cause a denial of service...

duckdb:parse_fuzz_test: Stack-buffer-overflow in duckdb::utf8proc_next_grapheme

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=5082369452802048 Project: duckdb Fuzzing Engine: honggfuzz Fuzz Target: parsefuzztest Job Type: honggfuzzasanduckdb Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...