libjpeg-turbo:compress_fuzzer: Use-after-poison in compress.cc

Detailed Report: https://oss-fuzz.com/testcase?key=5300535141138432 Project: libjpeg-turbo Fuzzing Engine: afl Fuzz Target: compressfuzzer Job Type: aflasanlibjpeg-turbo Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x768d8efc4005 Crash State: compress.cc LLVMFuzzerRunDriv...

libwebp:[email protected]: Heap-buffer-overflow in AddGreenToBlueAndRed_AVX2

Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=5210650793279488 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type:...

elfutils:fuzz-libdwfl: Heap-buffer-overflow in gelf_getshdr

Detailed Report: https://oss-fuzz.com/testcase?key=5433808192339968 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzerasanelfutils Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x516000000bac Crash State: gelfgetshdr...

wolfssl:fuzzer-wolfssl-client-randomize: Heap-use-after-free in ProcessReplyEx

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5082775967629312 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-client-randomize Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-use-after-free READ 3 Cras...

lcms:cms_transform_all_fuzzer: Heap-buffer-overflow in _cmsMAT3per

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=5218775393239040 Project: lcms Fuzzing Engine: afl Fuzz Target: cmstransformallfuzzer Job Type: aflasanlcms Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x603000000298...

git:fuzz-commit-graph: Crash with empty stacktrace

Project: https://github.com/git/git.git Detailed Report: https://oss-fuzz.com/testcase?key=5037060053925888 Project: git Fuzzing Engine: libFuzzer Fuzz Target: fuzz-commit-graph Job Type: libfuzzerasangit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61b000024000 Crash State: NULL...

gcloud-go:fuzz_parse_query: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6406236741435392 Project: gcloud-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsequery Job Type: libfuzzerasangcloud-go Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ffde6b0b780 Crash State: NULL Sanitizer: address ASAN...

Updated libjpeg packages fix security vulnerabilities

The updated packages fix security vulnerabilities: A signed integer overflow and subsequent segfault that occurred when attempting to decompress images with more than 715827882 pixels using the 64-bit C version of TJBench. Out-of-bounds write in tjDecompressToYUV2 and tjDecompressToYUVPlanes...