5689 matches found
libraw:libraw_raf_fuzzer: Crash in libraw_sget4_static
Detailed Report: https://oss-fuzz.com/testcase?key=4861344973455360 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawraffuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000102949e99 Crash State: librawsget4static LibRaw::sget4...
EulerOS 2.0 SP3 : ImageMagick (EulerOS-SA-2022-2615)
According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, whe...
libraw:libraw_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab
Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5021655269507072 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
PT-2025-37617
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-25-generic 25-Ubuntu Description An array-index-out-of-bounds issue was identified in the Linux kernel's AHCI driver. The sata pmp init links function initializes link-pmp up to SATA PMP MAX PORTS, while t...
PT-2022-22529
Name of the Vulnerable Software and Affected Versions OTFCC commit 617837b Description A heap buffer overflow issue was discovered in OTFCC, specifically in commit 617837b, via the /release-x64/otfccdump+0x6b03b5 endpoint. This issue can be exploited, potentially leading to undefined behavior...
DEBIAN-CVE-2022-3358
OpenSSL supports creating a custom cipher via the legacy EVPCIPHERmethnew function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0...
ALPINE-CVE-2022-3358
OpenSSL supports creating a custom cipher via the legacy EVPCIPHERmethnew function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0...
UBUNTU-CVE-2022-3358
OpenSSL supports creating a custom cipher via the legacy EVPCIPHERmethnew function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0...
CVE-2020-14131: Undefined Security Weakness
The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Security Center MiSRC to jointly ensure the safe access of millions of Xiaomi users worldwide Life...
EulerOS 2.0 SP8 : ImageMagick (EulerOS-SA-2022-2464)
According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, whe...
CVE-2022-3358
OpenSSL supports creating a custom cipher via the legacy EVPCIPHERmethnew function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0...
RUSTSEC-2022-0058 Library exclusively intended to inject UB into safe Rust.
Quoting from the crate description: This crate is created purely to inject undefined behavior into stable, safe rust. Specifically, the inconceivable! macro is insta-UB if the ubinconceivable feature is enabled by any reverse dependency. The value this adds is questionable, and hides unsafe code...
Library exclusively intended to inject UB into safe Rust.
Quoting from the crate description: This crate is created purely to inject undefined behavior into stable, safe rust. Specifically, the inconceivable! macro is insta-UB if the ubinconceivable feature is enabled by any reverse dependency. The value this adds is questionable, and hides unsafe code...
PT-2022-37425 · Unknown · Inconceivable Crate
Name of the Vulnerable Software and Affected Versions: inconceivable crate affected versions not specified Description: The issue concerns the introduction of undefined behavior into stable, safe Rust through the inconceivable! macro when the ub inconceivable feature is enabled by any reverse...
GLSA-202209-13 : libaacplus: Denial of Service
The remote host is affected by the vulnerability described in GLSA-202209-13 libaacplus: Denial of Service - auchannel.h in HE-AAC+ Codec aka libaacplus 2.0.2 has a signed integer overflow, which might allow remote attackers to cause a denial of service application crash or possibly have...
PT-2022-37304 · Git +1 · File
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state includes functions such as regcomp, file regcomp, and load 1. No information is...
dbus-broker: a stack buffer over-read if a malicious Exec line is supplied
A stack-based buffer over-read flaw was found in the dbus-broker package. Dbus-Broker depends on c-uitl/c-shquote to parse the DBus service's Exec line, and if a malicious Exec line is supplied, this can lead to a crash or other undefined behaviors...
USN-5619-1: LibTIFF vulnerabilities
It was discovered that LibTIFF was not properly performing the calculation of data that would eventually be used as a reference for bound-checking operations. An attacker could possibly use this issue to cause a denial of service or to expose sensitive information. This issue only affected Ubuntu...
CVE-2022-3213
A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service...
grok:grk_decompress_fuzzer: Incorrect-function-pointer-type in grk::BufferedStream::read
Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5622445242974208 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerubsangrok Platform I...