clamav/clamav_scanfile_PDF_fuzzer: Crash in pdf_nextobject

Detailed report: https://oss-fuzz.com/testcase?key=5660459970068480 Project: clamav Fuzzer: aflclamavscanfilePDFfuzzer Fuzz target binary: clamavscanfilePDFfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60910001fd8d Crash State: pdfnextobject pdfparseo...

tidy-html5/tidy_fuzzer: Heap-buffer-overflow in prvTidyEncodeCharToUTF8Bytes

Project: https://github.com/htacg/tidy-html5.git Detailed report: https://oss-fuzz.com/testcase?key=5639351547985920 Project: tidy-html5 Fuzzer: afltidyfuzzer Fuzz target binary: tidyfuzzer Job Type: aflasantidy-html5 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

dav1d/dav1d_fuzzer_mt: Memcpy-param-overlap in put_c

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5734069753610240 Project: dav1d Fuzzer: afldav1dfuzzermt Fuzz target binary: dav1dfuzzermt Job Type: aflasandav1d Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

llvm/llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::object::ELFObjectFile<llvm::object::ELFType<

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5650578005295104 Project: llvm Fuzzer: libFuzzerllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ...

graphicsmagick/coder_PICT_fuzzer: Heap-buffer-overflow in ExpandBuffer

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5748073695805440 Project: graphicsmagick Fuzzer: aflcoderPICTfuzzer Fuzz target binary: coderPICTfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ ...

yara/dotnet_fuzzer: Heap-buffer-overflow in dotnet_parse_us

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5725060321509376 Project: yara Fuzzer: libFuzzeryaradotnetfuzzer Fuzz target binary: dotnetfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

harfbuzz/hb-shape-fuzzer: Stack-buffer-overflow in hb_array_t<char const>::cmp

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5642666339991552 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Stack-buffer-overflow...

skia/image_filter_deserialize: Heap-buffer-overflow in Convexicator::BySign

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5700664101961728 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow...

skia/animated_image_decode: Heap-buffer-overflow in swizzle_index_to_n32

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5695054438465536 Project: skia Fuzzer: libFuzzerskiaanimatedimagedecode Fuzz target binary: animatedimagedecode Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

harfbuzz/hb-subset-fuzzer: Heap-buffer-overflow in BEInt<unsigned char, 1>::operator unsigned char

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5686186874503168 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflo...

harfbuzz/hb-subset-fuzzer: Heap-buffer-overflow in BEInt<unsigned int, 4>::operator unsigned int

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5643036478930944 Project: harfbuzz Fuzzer: aflharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

imagemagick/ping_mvg_fuzzer: Heap-buffer-overflow in CopyMagickString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5763296301416448 Project: imagemagick Fuzzer: aflimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow...

mupdf/pdf_fuzzer: Heap-use-after-free in begin_softmask

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5645768816328704 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address: 0x62d00018faf0...

skia/api_mock_gpu_canvas: Heap-buffer-overflow in SkMatrix::setRSXform

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6323754636935168 Project: skia Fuzzer: aflskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

skia/api_mock_gpu_canvas: Heap-use-after-free in SkGlyphRun::eachGlyphToGlyphRun

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5757635266084864 Project: skia Fuzzer: libFuzzerskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash...

SUSE-SU-2018:3911-2 Security update for tiff

This update for tiff fixes the following issues: Security issues fixed: - CVE-2018-12900: Fixed heap-based buffer overflow in the cpSeparateBufToContigBuf bsc1099257. - CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode in the file tiflzw.c bsc1113672. - CVE-2018-18557: Fixe...

skia/image_decode: Heap-buffer-overflow in swizzle_index_to_n32

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5694623532449792 Project: skia Fuzzer: libFuzzerskiaimagedecode Fuzz target binary: imagedecode Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

skia/api_mock_gpu_canvas: Heap-buffer-overflow in make_fuzz_textblob

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5685340631728128 Project: skia Fuzzer: libFuzzerskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

Wireshark - find_signature Heap Out-of-Bounds Read

Wireshark - findsignature Heap Out-of-Bounds Read The following crash due to a heap-based out-of-bounds read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$ ./tshark -nVxr /path/to/file": --- cut --- ==35788==ERROR: AddressSanitizer:...

Wireshark - find_signature Heap Out-of-Bounds Read Vulnerability

The following crash due to a heap-based out-of-bounds read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$ ./tshark -nVxr /path/to/file": --- cut --- ==35788==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x62d0000e4400 at pc...