harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5716208469409792 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

libaom/av1_dec_fuzzer: Heap-buffer-overflow in read_uncompressed_header

Detailed report: https://oss-fuzz.com/testcase?key=5630956925353984 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: libfuzzerasanlibaom Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7f69291a30a7 Crash State:...

SUSE-SU-2018:3879-1 Security update for tiff

This update for tiff fixes the following issues: Security issues fixed: - CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode in the file tiflzw.c bsc1113672. - CVE-2018-12900: Fixed heap-based buffer overflow in the cpSeparateBufToContigBuf bsc1099257. - CVE-2017-9147: Fixed...

libaom/av1_dec_fuzzer: Stack-buffer-overflow in highbd_dr_prediction_z1_64xN_avx2

Detailed report: https://oss-fuzz.com/testcase?key=5759400271151104 Project: libaom Fuzzer: afllibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: aflasanlibaom Platform Id: linux Crash Type: Stack-buffer-overflow READ 16 Crash Address: 0x7f0cdb2dc3f1 Crash State:...

libxml2/libxml2_xml_reader_for_file_fuzzer: Bad-free in xmlFreeNode

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=5767146915758080 Project: libxml2 Fuzzer: afllibxml2xmlreaderforfilefuzzer Fuzz target binary: libxml2xmlreaderforfilefuzzer Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Bad-free Cras...

skia/api_image_filter: Heap-buffer-overflow in make_fuzz_textblob

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5656916177453056 Project: skia Fuzzer: aflskiaapiimagefilter Fuzz target binary: apiimagefilter Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

Security update for GraphicsMagick (moderate)

This update for GraphicsMagick fixes the following issues: Security issue fixed: - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage of coders/msl.c bsc1113064. Non-security issues fixed: - asanbuild: build ASAN included - debugbuild: build more suitable for debugging This update wa...

open62541/fuzz_binary_decode: Heap-use-after-free in DataValue_clear

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5638857115041792 Project: open62541 Fuzzer: aflopen62541fuzzbinarydecode Fuzz target binary: fuzzbinarydecode Job Type: aflasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ 4...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-1430)

This update for GraphicsMagick fixes the following issues : Security issue fixed : - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage of coders/msl.c bsc1113064. Non-security issues fixed : - asanbuild: build ASAN included - debugbuild: build more suitable for debugging %NASLMINLEV...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-1431)

This update for GraphicsMagick fixes the following issues : Security issue fixed : - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage of coders/msl.c bsc1113064. Non-security issues fixed : - asanbuild: build ASAN included - debugbuild: build more suitable for debugging %NASLMINLEV...

Security update for GraphicsMagick (moderate)

This update for GraphicsMagick fixes the following issues: Security issue fixed: - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage of coders/msl.c bsc1113064. Non-security issues fixed: - asanbuild: build ASAN included - debugbuild: build more suitable for debugging...

Security update for GraphicsMagick (moderate)

This update for GraphicsMagick fixes the following issues: Security issue fixed: - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage of coders/msl.c bsc1113064. Non-security issues fixed: - asanbuild: build ASAN included - debugbuild: build more suitable for debugging...

dav1d/dav1d_fuzzer: Heap-buffer-overflow in setup_tile

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5731769337249792 Project: dav1d Fuzzer: afldav1dfuzzer Fuzz target binary: dav1dfuzzer Job Type: aflasandav1d Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

librawspeed/VC5DecompressorFuzzer: Heap-buffer-overflow in rawspeed::VC5Decompressor::Wavelet::HighPassBand::decode

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5735870561255424 Project: librawspeed Fuzzer: libFuzzerlibrawspeedVC5DecompressorFuzzer Fuzz target binary: VC5DecompressorFuzzer Job Type: libfuzzerasanlibrawspeed Platform Id: linux Crash...

dav1d/dav1d_fuzzer_mt: Heap-buffer-overflow in setup_tile

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5646860283281408 Project: dav1d Fuzzer: libFuzzerdav1dfuzzermt Fuzz target binary: dav1dfuzzermt Job Type: libfuzzerasandav1d Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash...

openvswitch/ofctl_parse_target: Heap-double-free in minimatch_destroy

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5725063685341184 Project: openvswitch Fuzzer: aflopenvswitchofctlparsetarget Fuzz target binary: ofctlparsetarget Job Type: aflasanopenvswitch Platform Id: linux Crash Type: Heap-double-free Crash...

ntpd 4.2.8p10 Out-Of-Bounds Read

Exploit Title: ntpd 4.2.8p10 - Out-of-Bounds Read PoC Bug Discovery: Yihan Lian, a security researcher of Qihoo 360 GearTeam Exploit Author: Magnus Klaaborg Stubman @magnusstubman Website: https://dumpco.re/blog/cve-2018-7182 Vendor Homepage: http://www.ntp.org/ Software Link:...

radare2/ia_fuzz: Heap-buffer-overflow in get_symbols_from_phdr

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5639337379627008 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

libgit2/objects_fuzzer: Heap-buffer-overflow in git__strntol64

Project: https://github.com/libgit2/libgit2.git Detailed report: https://oss-fuzz.com/testcase?key=5667317078294528 Project: libgit2 Fuzzer: libFuzzerlibgit2objectsfuzzer Fuzz target binary: objectsfuzzer Job Type: libfuzzerasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

radare2/ia_fuzz: Heap-use-after-free in sdb_hash_len

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5647847018463232 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...