libsndfile:sndfile_alt_fuzzer: Use-of-uninitialized-value in alac_decode

Detailed Report: https://oss-fuzz.com/testcase?key=4563150486700032 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilealtfuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: alacdecode alacdecodeblock alacse...

libsndfile:sndfile_fuzzer: Heap-buffer-overflow in copyPredictorTo24

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=5092501698117632 Project: libsndfile Fuzzing Engine: honggfuzz Fuzz Target: sndfilefuzzer Job Type: honggfuzzasanlibsndfile Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

PT-2013-2656

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to an integer overflow in the alac decode close function, which can be triggered by a large number of samples per frame in Apple Lossless Audio Codec ALAC data. This leads to an...