Threats Tagged 'oss-fuzz'

An UNKNOWN READ crash was reported in the Boost library's regex formatter component by OSS-Fuzz. The crash involves the boost::re_detail_500::basic_regex_formatter template instantiated with std::__1::ostream_iterator<char>. No specific versions are identified as affected, and no patch or remediation information is provided.

A use-after-poison vulnerability was identified in the rx_ip function of the Mongoose library, reported by OSS-Fuzz. This issue involves accessing memory after it has been invalidated, which can lead to undefined behavior or crashes. The vulnerability affects multiple specific versions of Mongoose from 7.9 through 7.23. No official patch or remediation information is provided in the available data, and there are no known exploits in the wild.

A stack overflow vulnerability has been reported in the Boost library within the function boost::read_graphviz_detail::parser::parse_subgraph. The issue was identified by OSS-Fuzz and results in a crash due to stack overflow during parsing operations.

A security exception crash was reported in the Apache Lucene library within the ASCIIFoldingFilter.foldToASCII method. The issue was identified by OSS-Fuzz and results in a security exception during token processing. No specific versions are stated as affected, and no patch or fix information is currently available.

A security exception crash was reported in the Apache Lucene library within the method org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone. The issue was identified by OSS-Fuzz and involves a crash state related to cloning token attribute implementations. No specific versions affected or patch information are provided. There is no evidence of exploitation in the wild.

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376504918 ``` Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.growExact org.apache.lucene.util.ArrayUtil.grow org.apache.lucene.util.BytesRefBuilder.grow ```

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407477665 ``` Crash type: Security exception Crash state: org.apache.lucene.analysis.ckb.SoraniNormalizer.normalize org.apache.lucene.analysis.ckb.SoraniNormalizationFilter.incrementToken org.apache.lucene.analysis.miscellaneous.WordDelimiterGraphFilter.incrementToken ```

A heap-buffer-overflow vulnerability exists in the io_memory_read function of radare2, as reported by OSS-Fuzz. This issue involves an out-of-bounds write operation on the heap during memory read operations. Multiple specific versions of radare2 are affected. There is no CVSS score or vendor advisory available to confirm patch status or exploitation in the wild.

A stack-use-after-return vulnerability has been identified in the check_buffer function of radare2, as reported by OSS-Fuzz. This issue involves reading memory after the stack frame has been returned, which can lead to undefined behavior or potential security risks. Multiple specific versions of radare2 are affected. There is no CVSS score or vendor advisory available to confirm patch status or exploitation in the wild.

A heap-buffer-overflow vulnerability exists in the parse_classes_64 function of radare2, as reported by OSS-Fuzz. This issue causes a read overflow on the heap, potentially leading to memory corruption. Multiple specific versions of radare2 from 5.8.0 through 6.2.0 are affected. No official patch or remediation details are provided in the available data. There are no known exploits in the wild at this time.