Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Summary PIL/BdfFontFile.py bdfchar lines 84–88 reads the BBX width height field from a BDF font file and passes the dimensions directly to Image.new without calling Image.decompressionbombcheck. This completely bypasses Pillow's documented decompression bomb protection. Image.open enforces...

ghostscript:gs_device_pxlmono_fuzzer: Memcpy-param-overlap in FT_Stream_TryRead

Detailed Report: https://oss-fuzz.com/testcase?key=6297116250603520 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepxlmonofuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x6310000f2a78,0x6310000f2e78 and...

poppler:qt_pdf_fuzzer: Use-of-uninitialized-value in _bdf_readstream

Detailed Report: https://oss-fuzz.com/testcase?key=5966568824635392 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target: qtpdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bdfreadstream bdfloadfont BDFFaceInit...