📄 Transmission Torrent Parsing Integer Overflows

Torrent file parsing in Transmission suffers from multiple integer overflow vulnerabilities. I took a look at torrent file parsing in libtransmission, there are a few integer overflows because the trnew/trnew0 allocation wrappers don't handle overflow. define trnewstructtype, nstructs \ structtyp...

glaze:json_generic: Heap-buffer-overflow in void glz::from<10u, std::__1::variant<std::nullptr_t, double, std::__1::basic_st

Project: https://github.com/stephenberry/glaze.git Detailed Report: https://oss-fuzz.com/testcase?key=6395086764310528 Project: glaze Fuzzing Engine: libFuzzer Fuzz Target: jsongeneric Job Type: libfuzzerasanglaze Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address:...

glib:fuzz_variant_binary_byteswap: Heap-buffer-overflow in g_variant_serialised_get_child

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=5580357804359680 Project: glib Fuzzing Engine: honggfuzz Fuzz Target: fuzzvariantbinarybyteswap Job Type: honggfuzzasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...