libreoffice/htmlfuzzer: Heap-use-after-free in FreetypeFont::AddRef

Detailed report: https://oss-fuzz.com/testcase?key=6320589856833536 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60f0005db9e8 Crash State:...

Two major Canadian banks blackmailed after alleged data breach

While the US was celebrating Memorial Day on Monday, Canada was dealing with an unusual data breach affecting two popular financial institutions: Simplii Financial and Bank of Montreal BMO. The CBC broke the story and updated it throughout the day to mention that some 90,000 customers were possib...

poppler/pdf_fuzzer: Use-of-uninitialized-value in clip01

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5732381972496384 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in FoFiType1::parse

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5072764116402176 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in copyString

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4923503668101120 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in Decrypt::makeFileKey2

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=6307526613139456 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Index-out-of-bounds in BaseCryptStream::BaseCryptStream

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4785085529194496 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzerubsanpoppler Platform Id: linux Crash Type: Index-out-of-bounds...

dlplibs/cdrfuzzer: Use-of-uninitialized-value in libcdr::CDRParserState::_getRGBColor

Detailed report: https://oss-fuzz.com/testcase?key=5767834947813376 Project: dlplibs Fuzzer: libFuzzerdlplibscdrfuzzer Fuzz target binary: cdrfuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

qpid-proton/fuzz-connection-driver: Index-out-of-bounds in pni_inspect_enter

Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=6237435934539776 Project: qpid-proton Fuzzer: libFuzzerqpid-protonfuzz-connection-driver Fuzz target binary: fuzz-connection-driver Job Type: libfuzzerubsanqpid-proton Platform Id: linux Crash...

qpid-proton/fuzz-connection-driver: Negative-size-param in transport_consume

Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=6301141305393152 Project: qpid-proton Fuzzer: aflqpid-protonfuzz-connection-driver Fuzz target binary: fuzz-connection-driver Job Type: aflasanqpid-proton Platform Id: linux Crash Type:...

envoy/h1_capture_fuzz_test: Heap-use-after-free in Envoy::FakeRawConnection::write

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5631359409192960 Project: envoy Fuzzer: aflenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: aflasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Addres...

openssl/server: Heap-use-after-free in ssl_get_prev_session

Project: https://github.com/openssl/openssl.git Detailed report: https://oss-fuzz.com/testcase?key=5673171989561344 Project: openssl Fuzzer: aflopensslserver Fuzz target binary: server Job Type: aflasanopenssl Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x616000001e80...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in Dot11DecryptScanForKeys

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5122206420959232 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

imagemagick/encoder_label_fuzzer: Use-of-uninitialized-value in FxEvaluateSubexpression

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6312993015988224 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

storebrand.no XSS vulnerability

Open Bug Bounty ID: OBB-612298 Description| Value ---|--- Affected Website:| storebrand.no Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

graphicsmagick/coder_8BIMTEXT_fuzzer: Use-of-uninitialized-value in format8BIM

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5699745893842944 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoder8BIMTEXTfuzzer Fuzz target binary: coder8BIMTEXTfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Cras...

imagemagick/encoder_wpg_fuzzer: Use-of-uninitialized-value in SetPixelViaPixelInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6232418819244032 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderwpgfuzzer Fuzz target binary: encoderwpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in dissect_ber_constrained_bitstring

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=4859050050191360 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type:...

imagemagick/ping_mvg_fuzzer: Heap-buffer-overflow in ConvertPrimitiveToPath

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6579574885318656 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

graphicsmagick/coder_DPX_fuzzer: Heap-buffer-overflow in ReadDPXImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5698815739822080 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderDPXfuzzer Fuzz target binary: coderDPXfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...