poppler/pdf_fuzzer: Use-of-uninitialized-value in Decrypt::makeFileKey2

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=6307526613139456 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

poppler/pdf_fuzzer: Index-out-of-bounds in BaseCryptStream::BaseCryptStream

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4785085529194496 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

dlplibs/cdrfuzzer: Use-of-uninitialized-value in libcdr::CDRParserState::_getRGBColor

Detailed report: https://oss-fuzz.com/testcase?key=5767834947813376 Project: dlplibs Fuzzer: libFuzzerdlplibscdrfuzzer Fuzz target binary: cdrfuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

qpid-proton/fuzz-connection-driver: Index-out-of-bounds in pni_inspect_enter

Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=6237435934539776 Project: qpid-proton Fuzzer: libFuzzerqpid-protonfuzz-connection-driver Fuzz target binary: fuzz-connection-driver Job Type: libfuzzerubsanqpid-proton Platform Id: linux Crash...

qpid-proton/fuzz-connection-driver: Negative-size-param in transport_consume

Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=6301141305393152 Project: qpid-proton Fuzzer: aflqpid-protonfuzz-connection-driver Fuzz target binary: fuzz-connection-driver Job Type: aflasanqpid-proton Platform Id: linux Crash Type:...

envoy/h1_capture_fuzz_test: Heap-use-after-free in Envoy::FakeRawConnection::write

Detailed report: https://oss-fuzz.com/testcase?key=5631359409192960 Project: envoy Fuzzer: aflenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: aflasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6170000de020 Crash State:...

openssl/server: Heap-use-after-free in ssl_get_prev_session

Project: https://github.com/openssl/openssl.git Detailed report: https://oss-fuzz.com/testcase?key=5673171989561344 Project: openssl Fuzzer: aflopensslserver Fuzz target binary: server Job Type: aflasanopenssl Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x616000001e80...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in Dot11DecryptScanForKeys

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=5122206420959232 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type:...

imagemagick/encoder_label_fuzzer: Use-of-uninitialized-value in FxEvaluateSubexpression

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6312993015988224 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

storebrand.no XSS vulnerability

Open Bug Bounty ID: OBB-612298 Description| Value ---|--- Affected Website:| storebrand.no Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

graphicsmagick/coder_8BIMTEXT_fuzzer: Use-of-uninitialized-value in format8BIM

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5699745893842944 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoder8BIMTEXTfuzzer Fuzz target binary: coder8BIMTEXTfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Cras...

imagemagick/encoder_wpg_fuzzer: Use-of-uninitialized-value in SetPixelViaPixelInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6232418819244032 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderwpgfuzzer Fuzz target binary: encoderwpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in dissect_ber_constrained_bitstring

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=4859050050191360 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark...

imagemagick/ping_mvg_fuzzer: Heap-buffer-overflow in ConvertPrimitiveToPath

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6579574885318656 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

graphicsmagick/coder_DPX_fuzzer: Heap-buffer-overflow in ReadDPXImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5698815739822080 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderDPXfuzzer Fuzz target binary: coderDPXfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

librawspeed/TiffDecoderFuzzer-ArwDecoder: Use-of-uninitialized-value in rawspeed::TiffEntry::TiffEntry

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6192213462614016 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-ArwDecoder Fuzz target binary: TiffDecoderFuzzer-ArwDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

dlplibs/cdrfuzzer: Heap-buffer-overflow in libcdr::CDRStylesCollector::collectBmp

Detailed report: https://oss-fuzz.com/testcase?key=6291912840445952 Project: dlplibs Fuzzer: afldlplibscdrfuzzer Fuzz target binary: cdrfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000002bf3 Crash State:...

libreoffice/lwpfuzzer: Bad-cast to XFTextStyle from XFParaStyle in LwpFrib::RegisterStyle

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5179243848794112 Project: libreoffice Fuzzer: libFuzzerlibreofficelwpfuzzer Fuzz target binary: lwpfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

imagemagick/ping_png_fuzzer: Heap-use-after-free in read_user_chunk_callback

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6139944834695168 Project: imagemagick Fuzzer: libFuzzerimagemagickpingpngfuzzer Fuzz target binary: pingpngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_mng_fuzzer: Use-of-uninitialized-value in Magick_RenderingIntent_from_PNG_RenderingIntent

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6350986827268096 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmngfuzzer Fuzz target binary: pingmngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...