ffmpeg: Heap-buffer-overflow in xwd_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4866094172995584 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDXWDfuzzer Fuzz target binary: ffmpegAVCODECIDXWDfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

ffmpeg: Heap-buffer-overflow in ff_htmlmarkup_to_ass

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5520132195483648 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDSAMIfuzzer Fuzz target binary: ffmpegAVCODECIDSAMIfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

dlplibs: Crash in librevenge::IStorage::load

Detailed report: https://oss-fuzz.com/testcase?key=5488429968130048 Project: dlplibs Fuzzer: afldlplibsbmifuzzer Fuzz target binary: bmifuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x619800000f78 Crash State: librevenge::IStorage::load...

file: Heap-buffer-overflow in cdf_getuint32

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=4658680639258624 Project: file Fuzzer: aflfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: aflasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x611000000dc1 Cra...

wireshark: Stack-use-after-return in add_tagged_field

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=6172256742932480 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Stack-use-after-return...

wireshark: Heap-buffer-overflow in OALMarshal_UncompressValue

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5900099865542656 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow RE...

WebKit operationSpreadGeneric Universal Cross Site Scripting

WebKit: UXSS via operationSpreadGeneric Once a spread operation is optimized, the function |operationSpreadGeneric| will be called from then on. But operationSpreadGeneric's trying to get a JSGlobalObject from the argument of a spread operation. It seems that that optimization is not implemented ...

WebKit operationSpreadGeneric Universal Cross Site Scripting Vulnerability

WebKit suffers from a universal cross site scripting vulnerability in operationSpreadGeneric. WebKit: UXSS via operationSpreadGeneric Once a spread operation is optimized, the function |operationSpreadGeneric| will be called from then on. But operationSpreadGeneric's trying to get a JSGlobalObjec...

dlplibs: Global-buffer-overflow in StarEncoding::read

Detailed report: https://oss-fuzz.com/testcase?key=6608338966020096 Project: dlplibs Fuzzer: libFuzzerdlplibssdwfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000a9d1dc Crash State: StarEncoding::read StarEncoding::convert...

dlplibs: Global-buffer-overflow in computeBMPDataOffset

Detailed report: https://oss-fuzz.com/testcase?key=5669948070297600 Project: dlplibs Fuzzer: libFuzzerdlplibsvsdfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000096a278 Crash State: computeBMPDataOffset...

dlplibs: Stack-buffer-overflow in StarWriterStruct::DatabaseName::read

Detailed report: https://oss-fuzz.com/testcase?key=5177092629069824 Project: dlplibs Fuzzer: libFuzzerdlplibssdwfuzzer Fuzz target binary: sdwfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7f3a03d7f378 Crash State:...

libxml2: Use-of-uninitialized-value in xmlParseDocument

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=6440880716120064 Project: libxml2 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Fuzz target binary: libxml2xmlreadmemoryfuzzer Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type:...

librevenge: Crash in librevenge::IStorage::load

Detailed report: https://oss-fuzz.com/testcase?key=5356949551972352 Project: librevenge Fuzzer: afllibrevengeolefuzzer Fuzz target binary: olefuzzer Job Type: aflasanlibrevenge Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x619800000f78 Crash State: librevenge::IStorage::load...

OpenSSH On Cygwin SFTP Client Directory Traversal Vulnerability

Portable OpenSSH supports running on Cygwin. However, the SFTP client only filters out forward slashes in dolsreaddir and the directory names "." and ".." in downloaddirinternal. On Windows, including in Cygwin, backslashes can a lso be used for directory traversal. OpenSSH on Cygwin: directory...

nss: Crash in fexpand

Project: https://hg.mozilla.org/projects/nss Detailed report: https://oss-fuzz.com/testcase?key=6677346901819392 Project: nss Fuzzer: libFuzzernsstls-server Fuzz target binary: tls-server Job Type: libfuzzerasannss Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x604000030000 Crash...

grpc: Heap-use-after-free in grpc_call_destroy

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5414767311192064 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address:...

ffmpeg: Crash in ff_vp3_idct_put_sse2

Detailed report: https://oss-fuzz.com/testcase?key=5030788946984960 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDVP6Ffuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDVP6Ffuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7f2edced7540 Crash...

grpc: Crash in gpr_free

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5637166455586816 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000002717 Crash...

file: Heap-buffer-overflow in is_tar

Project: https://github.com/file/file.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5719138181840896 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ Cra...

file: Attempting free in apprentice_map

Project: https://github.com/file/file.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5095269284708352 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Attempting free Crash Address...