libvips:jpegsave_buffer_fuzzer: Heap-buffer-overflow in attach_xmp_blob

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5673786296238080 Project: libvips Fuzzing Engine: afl Fuzz Target: jpegsavebufferfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

cryptofuzz:cryptofuzz-openssl-noasm: Heap-buffer-overflow in aria_set_encrypt_key

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5665634448310272 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzerasani386cryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

graphicsmagick:coder_TIFF_fuzzer: Use-of-uninitialized-value in TIFFYCbCrtoRGB

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5681613295321088 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in strncpy

Detailed Report: https://oss-fuzz.com/testcase?key=5131488567230464 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f152a437530 Crash State: strncpy...

gdal:mitab_mif_fuzzer: Heap-buffer-overflow in DGNFreeElement

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5076592979607552 Project: gdal Fuzzing engine: libFuzzer Fuzz target: mitabmiffuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0xf4f03080...

gdal:cad_fuzzer: Crash in CADBuffer::Read2B

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5724503157506048 Project: gdal Fuzzing engine: libFuzzer Fuzz target: cadfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x1520c46d Crash State:...

aspell/aspell_fuzzer: Heap-buffer-overflow in acommon::DecodeDirect<unsigned short>::decode

Project: https://github.com/gnuaspell/aspell.git Detailed report: https://oss-fuzz.com/testcase?key=5704942551040000 Project: aspell Fuzzer: libFuzzeraspellfuzzer Fuzz target binary: aspellfuzzer Job Type: libfuzzerasanaspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Addres...

imagemagick/ping_mng_fuzzer: Use-of-uninitialized-value in ScaleQuantumToChar

Detailed report: https://oss-fuzz.com/testcase?key=5724110990082048 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmngfuzzer Fuzz target binary: pingmngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

clamav/clamav_scanmap_fuzzer: Index-out-of-bounds in real_scansis

Detailed report: https://oss-fuzz.com/testcase?key=5165813392211968 Project: clamav Fuzzer: libFuzzerclamavscanmapfuzzer Fuzz target binary: clamavscanmapfuzzer Job Type: libfuzzerubsanclamav Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: realscansis cliscansis...

Code injection

cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning SEC-90...

CVE-2016-10824

CVE-2016-10824 affects cPanel prior to 55.9999.141. The vulnerability enables unauthenticated arbitrary code execution via DNS NS entry poisoning. Public details in the provided connected sources are limited to the affected version and impact; no root-cause specifics or remediation steps are desc...

cryptofuzz/cryptofuzz-openssl: Heap-buffer-overflow in aria_set_encrypt_key

Project: https://github.com/guidovranken/cryptofuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5654646873391104 Project: cryptofuzz Fuzzer: libFuzzercryptofuzzcryptofuzz-openssl Fuzz target binary: cryptofuzz-openssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type:...

qpdf/dct_fuzzer: Use-of-uninitialized-value in ycck_cmyk_convert

Project: https://github.com/qpdf/qpdf.git Detailed report: https://oss-fuzz.com/testcase?key=5632990870241280 Project: qpdf Fuzzer: libFuzzerqpdfdctfuzzer Fuzz target binary: dctfuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...

openthread/ncp-uart-received-fuzzer: Stack-buffer-overflow in ot::NetworkData::Leader::IsStableUpdated

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5630599882080256 Project: openthread Fuzzer: libFuzzeropenthreadncp-uart-received-fuzzer Fuzz target binary: ncp-uart-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash...

imagemagick/encoder_eps_fuzzer: Stack-buffer-overflow in ConstantString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5726208135790592 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderepsfuzzer Fuzz target binary: encoderepsfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_bmp_fuzzer: Use-of-uninitialized-value in cmsMLUgetASCII

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5742789528125440 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderbmpfuzzer Fuzz target binary: encoderbmpfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

libsass/data_context_fuzzer: Heap-buffer-overflow in std::__1::vector<std::__1::vector<Sass::SharedImpl<Sass::ComplexSelector>, std::

Project: https://github.com/sass/libsass.git Detailed report: https://oss-fuzz.com/testcase?key=5161915090731008 Project: libsass Fuzzer: libFuzzerlibsassdatacontextfuzzer Fuzz target binary: datacontextfuzzer Job Type: libfuzzerasanlibsass Platform Id: linux Crash Type: Heap-buffer-overflow READ...

freeimage/load_from_memory_fuzzer: Heap-buffer-overflow in _MemoryReadProc

Detailed report: https://oss-fuzz.com/testcase?key=5088386304442368 Project: freeimage Fuzzer: aflfreeimageloadfrommemoryfuzzer Fuzz target binary: loadfrommemoryfuzzer Job Type: aflasanfreeimage Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 6 Crash Address: 0x6140000001f8 Crash State...

jsonnet/convert_jsonnet_fuzzer: Crash in Interpreter::evaluate

Project: https://github.com/google/jsonnet.git Detailed report: https://oss-fuzz.com/testcase?key=5706027058593792 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzerubsanjsonnet Platform Id: linux Crash Type: UNKNOWN READ Cra...

imagemagick/ping_epi_fuzzer: Heap-buffer-overflow in ReadPSInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5753467974451200 Project: imagemagick Fuzzer: libFuzzerimagemagickpingepifuzzer Fuzz target binary: pingepifuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...