wolfssl:fuzzer-wolfssh-client-randomize: Heap-buffer-overflow in BundlePacket

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6341560443469824 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-client-randomize Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 9...

SUSE CVE-2017-10699

avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy with a wrong size, leading to a denial of service application crash or possibly code execution...

SUSE CVE-2017-10979

An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in radcoalesce" - this allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code...

ffmpeg:ffmpeg_AV_CODEC_ID_RKA_fuzzer: Heap-buffer-overflow in decode_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5946874155892736 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDRKAfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x7f7ada19252...

libavc:svc_dec_fuzzer: Heap-buffer-overflow in isvcd_populate_res_prms

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=4547867143700480 Project: libavc Fuzzing Engine: afl Fuzz Target: svcdecfuzzer Job Type: aflasanlibavc Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_AV_CODEC_ID_BINK_fuzzer: Heap-buffer-overflow in fill_block16_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6013915371012096 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDBINKfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash...

libjpeg-turbo:libjpeg_turbo_fuzzer_dev: Heap-buffer-overflow in rgb_rgb_convert

Detailed Report: https://oss-fuzz.com/testcase?key=4809239764008960 Project: libjpeg-turbo Fuzzing Engine: afl Fuzz Target: libjpegturbofuzzerdev Job Type: aflasanlibjpeg-turbo Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x612000000746 Crash State: rgbrgbconvert...

Why Did the OpenSSL Punycode Vulnerability Happen

Some room-temperature takes on yesterdays not-quite-RCE vulnerabilities in OpenSSL 3.0, and on what there is to learn about safe cryptography engineering. A recap Yesterday OpenSSL published version 3.0.7, which was pre-announced to contain a fix for a CRITICAL vulnerability, the first one since...

libraw:libraw_nef_fuzzer: Heap-buffer-overflow in LibRaw::kodak_rgb_load_raw

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6646042577993728 Project: libraw Fuzzing Engine: afl Fuzz Target: librawneffuzzer Job Type: aflasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x63300001b780 Cras...

ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_fuzzer: Heap-buffer-overflow in dng_decode_jpeg

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4849108968144896 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTIFFfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

PT-2022-37843

Уязвимость функции write overflow field в модуле include/linux/fortify-string.h ядра операционной системы Linux связана с чтением памяти за границами выделенного буфера. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

cryptofuzz:cryptofuzz-boringssl-noasm: Stack-buffer-overflow in wc_Sha3_256_Final

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=4523566678278144 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Stack-buffer-overflow...

ffmpeg:ffmpeg_AV_CODEC_ID_SPEEDHQ_fuzzer: Heap-buffer-overflow in ff_put_pixels_clamped_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6153490086363136 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSPEEDHQfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Addres...

libredwg:llvmfuzz: Heap-buffer-overflow in decode_preR13_section_hdr

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5171141819367424 Project: libredwg Fuzzing Engine: honggfuzz Fuzz Target: llvmfuzz Job Type: honggfuzzasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

xs:xst: Heap-buffer-overflow in fxGetNextEntity

Detailed Report: https://oss-fuzz.com/testcase?key=5872899101163520 Project: xs Fuzzing Engine: libFuzzer Fuzz Target: xst Job Type: libfuzzerasanxs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x631000010808 Crash State: fxGetNextEntity fxGetNextTokenJSXChild...

qemu:qemu-fuzz-i386-target-generic-fuzz-am53c974: Heap-buffer-overflow in scsi_disk_emulate_write_data

Detailed Report: https://oss-fuzz.com/testcase?key=5170622128324608 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-am53c974 Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7f0dfce95000 Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBVPX_VP9_fuzzer: Heap-buffer-overflow in vp9_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5437551174877184 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDLIBVPXVP9fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

qemu:qemu-fuzz-i386-target-generic-fuzz-sdhci-v3: Heap-buffer-overflow in sdhci_write

Detailed Report: https://oss-fuzz.com/testcase?key=6006343922745344 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-sdhci-v3 Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x615000023280 Crash State:...

binutils:fuzz_as: Global-buffer-overflow in fb_label_name

Detailed Report: https://oss-fuzz.com/testcase?key=5767094109601792 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow WRITE 1 Crash Address: 0x0000026c0bf8 Crash State: fblabelname readasourcefile...

clamav:clamav_dbload_CDB_fuzzer: Heap-buffer-overflow in repeat

Detailed Report: https://oss-fuzz.com/testcase?key=5002050507767808 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7f96224a6ea8 Crash State: repeat pere...