arrow:parquet-arrow-fuzz: Crash in parquet::LevelDecoder::SetData

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5138681717587968 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffff3cdb09f Cra...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in int arrow::util::RleDecoder::GetBatchWithDictSpaced<double>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5201887160958976 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x61f0001a4200 Crash...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::internal::CountSetBits

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5651311318269952 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

arrow:arrow-ipc-stream-fuzz: Crash in arrow::ipc::internal::FieldFromFlatbuffer

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5185274653179904 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61c100f9e0b8 Crash State:...

arrow:arrow-ipc-file-fuzz: Crash in arrow::ipc::RecordBatchFileReader::RecordBatchFileReaderImpl::ReadDictionaries

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5707423356813312 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-file-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x617100000891 Crash...

arrow:arrow-ipc-stream-fuzz: Object-size in arrow::UnionType::UnionType

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5634103970103296 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: Object-size Crash Address: Crash State:...

arrow:arrow-ipc-stream-fuzz: Global-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5682204130934784 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::internal::CountSetBits

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5675895545397248 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::Status arrow::internal::ValidateArrayVisitor::ValidateListArray<arrow::Li

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6321355259904000 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

arrow:arrow-ipc-stream-fuzz: Global-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5661776796712960 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000002b252b8...

arrow:arrow-ipc-stream-fuzz: Crash in arrow::Array::IsNull

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5738372907925504 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0001034c49e4 Cras...

arrow:arrow-ipc-stream-fuzz: Crash in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5837681544396800 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61e0003d1558 Crash...

arrow:arrow-ipc-stream-fuzz: Crash in arrow::ipc::internal::FieldFromFlatbuffer

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5712457209479168 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61e100356534 Crash State:...

arrow:arrow-ipc-file-fuzz: Segv on unknown address in arrow::ipc::ReadMessage

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5672148874297344 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-file-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State...

arrow:arrow-ipc-stream-fuzz: Crash in arrow::ipc::internal::FieldFromFlatbuffer

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5183404614352896 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x617100000b38 Crash...

arrow:arrow-ipc-stream-fuzz: Heap-use-after-free in arrow::internal::CountSetBits

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5713881930661888 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x62d001776978 Cra...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::UnionType::UnionType

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5435281763467264 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

arrow:arrow-ipc-stream-fuzz: Crash in arrow::Status arrow::internal::ValidateArrayVisitor::ValidateListArray<arrow::La

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5191432679981056 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x625001e8f4b0 Crash State:...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4813040122068992 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

Security Bulletin: Multiple vulnerabilities CVE-2019-12410, CVE-2019-12408 in arrow package

Summary Multiple vulnerabilities CVE-2019-12410, CVE-2019-12408 in arrow package Vulnerability Details CVEID: CVE-2019-12410 DESCRIPTION: While investigating UBSAN errors in it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data...