24 matches found
EUVD-2018-4866
Malware in sbrugna...
miniz:zip_fuzzer: Use-of-uninitialized-value in tinfl_decompress
Project: https://github.com/richgel999/miniz.git Detailed Report: https://oss-fuzz.com/testcase?key=6255167308169216 Project: miniz Fuzzing Engine: libFuzzer Fuzz Target: zipfuzzer Job Type: libfuzzermsanminiz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
miniz:uncompress2_fuzzer: Use-of-uninitialized-value in tinfl_decompress
Project: https://github.com/richgel999/miniz.git Detailed Report: https://oss-fuzz.com/testcase?key=6207767461888000 Project: miniz Fuzzing Engine: libFuzzer Fuzz Target: uncompress2fuzzer Job Type: libfuzzermsanminiz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
OSV-2020-2242 Heap-buffer-overflow in tinfl_decompress
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28285 Crash type: Heap-buffer-overflow READ 1 Crash state: tinfldecompress mzinflate flbgzipuncompress...
fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Heap-buffer-overflow in tinfl_decompress
Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6354610792693760 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow REA...
c-blosc2:decompress_chunk_fuzzer: Use-of-uninitialized-value in tinfl_decompress
Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=4863557237473280 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompresschunkfuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...
c-blosc2:decompress_fuzzer: Use-of-uninitialized-value in tinfl_decompress
Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5683607154458624 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...
OSV-2020-2151 Use-of-uninitialized-value in tinfl_decompress
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27413 Crash type: Use-of-uninitialized-value Crash state: tinfldecompress mzinflate mzuncompress2...
miniz:uncompress_fuzzer: Use-of-uninitialized-value in tinfl_decompress
Project: https://github.com/richgel999/miniz.git Detailed Report: https://oss-fuzz.com/testcase?key=6236480187662336 Project: miniz Fuzzing Engine: libFuzzer Fuzz Target: uncompressfuzzer Job Type: libfuzzermsanminiz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
OSV-2020-2103 Use-of-uninitialized-value in tinfl_decompress
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26682 Crash type: Use-of-uninitialized-value Crash state: tinfldecompress mzinflate mzuncompress2...
miniz:uncompress_fuzzer: Use-of-uninitialized-value in tinfl_decompress
Project: https://github.com/richgel999/miniz.git Detailed Report: https://oss-fuzz.com/testcase?key=6224532463157248 Project: miniz Fuzzing Engine: libFuzzer Fuzz Target: uncompressfuzzer Job Type: libfuzzermsanminiz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
c-blosc2:decompress_fuzzer: Use-of-uninitialized-value in tinfl_decompress
Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=4921954995535872 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...
c-blosc2:decompress_fuzzer: Heap-buffer-overflow in tinfl_decompress
Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=6033831129513984 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...
c-blosc2:decompress_fuzzer: Heap-buffer-overflow in tinfl_decompress
Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5120916286341120 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
c-blosc2:decompress_fuzzer: Heap-buffer-overflow in tinfl_decompress
Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5957965459488768 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...
CVE-2018-12913
In Miniz 2.0.7, tinfldecompress in miniztinfl.c has an infinite loop because sym2 and counter can both remain equal to zero...
Miniz Infinite Loop Vulnerability
Miniz is a lossless compression library that implements the zlib RFC 1950 and Deflate RFC 1951 compressed data format specification standards. A security vulnerability exists in the 'tinfldecompress' function of the miniztinfl.c file in Miniz version 2.0.7, which stems from the fact that both sym...
Code injection
In Miniz 2.0.7, tinfldecompress in miniztinfl.c has an infinite loop because sym2 and counter can both remain equal to zero...