Bug#964552: [Security Issue][liblivemedia] stack buffer overflow in liblivemedia

2020-07-08 Thread Xiaobo Xiang
0000000-0.01\r\n\r\n' % sessionId s.send(payload) time.sleep(0.1) print(s.recv(0x1)) while True: pass ``` Best Regards, Xiaobo Xiang

Bug#861738: [bug report][libpodofo]heap based overflow in ReadXRefStreamEntry

2017-05-03 Thread Xiaobo Xiang
Package: libpodofo Version: 0.9.5 [summary] I've found a heap based buffer overflow in libpodofo using libFuzzer. PdfXRefStreamParserObject::ReadXRefStreamEntry(src/base/PdfXRefStreamParserObject.cpp:224) [details] in function PdfXRefStreamParserObject::ReadXRefTable(), the program get nW[] array

[Podofo-users] Fwd: heap overflow in podofo's pdf parser

2017-04-24 Thread Xiaobo Xiang
Hi, I've found a heap overflow bug in podofo library during my fuzzing with libFuzzer. My wrapper just simply called PdfMemDocument doc( filename ); It crashed when parsing a crafted pdf file. the crash log is as follows: ==17463==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x620