OSV-2021-1386 Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<true>&& uWS::TemplatedApp<true>::

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39355 Crash type: Container-overflow READ 1 Crash state: std::1::function::func&& uWS::TemplatedApp:: uWS::TopicTree::publish uWS::TemplatedApp::publish...

PT-2021-27824

Name of the Vulnerable Software and Affected Versions uWS affected versions not specified Description The issue is related to a crash caused by a container-overflow read. Technical details include a crash state involving uWS::TemplatedApp and uWS::TopicTree. The publish function of uWS::TopicTree...

PT-2021-27820

Name of the Vulnerable Software and Affected Versions uWS affected versions not specified Description A crash occurs due to a container-overflow read issue. The crash is related to the publish function in uWS::TemplatedApp and uWS::TopicTree. Recommendations At the moment, there is no information...

Stack overflow

uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree called from uWS::TopicTree::unsubscribeAll. NOTE: the vendor's position is that this is "a minor issue or not even an issue at all" because the developer of an application that uses uWebSockets should no...

CVE-2020-36406: Out-of-bounds Write

uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree called from uWS::TopicTree::unsubscribeAll. NOTE: the vendor's position is that this is "a minor issue or not even an issue at all" because the developer of an application that uses uWebSockets should no...

PT-2020-21944

Name of the Vulnerable Software and Affected Versions uWS affected versions not specified Description The issue is related to a stack-buffer-overflow crash in the uWS library. Specifically, the crash occurs in the uWS::TopicTree::trimTree and uWS::TopicTree::unsubscribeAll functions, located in t...

uwebsockets:TopicTree: Index-out-of-bounds in uWS::TopicTree::publish

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5926030899150848 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: TopicTree Job Type: libfuzzerubsanuwebsockets Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

uwebsockets:MockedBroadcastingEchoServer: Heap-buffer-overflow in uWS::TopicTree::publish

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5725321316007936 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: MockedBroadcastingEchoServer Job Type: libfuzzerasanuwebsockets Platform Id: linux Crash Type: Heap-buffer-overfl...