imagemagick/encoder_mvg_fuzzer: Use-of-uninitialized-value in GetFillAlpha

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4854591964315648 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/enhance_fuzzer: Use-of-uninitialized-value in EnhanceImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5403929488654336 Project: imagemagick Fuzzer: libFuzzerimagemagickenhancefuzzer Fuzz target binary: enhancefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_miff_fuzzer: Use-of-uninitialized-value in GetXMPProperty

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5177219254059008 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermifffuzzer Fuzz target binary: encodermifffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

gdal/ogr_filesystem_fuzzer: NULL

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5745322799136768 Project: gdal Fuzzer: libFuzzergdalogrfilesystemfuzzer Fuzz target binary: ogrfilesystemfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Null-dereference READ Crash...

macOS process_policy Stack Leak

MacOS processpolicy stack leak through uninitialized field CVE-2017-7154 The syscall processpolicyscope=PROCPOLICYSCOPEPROCESS, action=PROCPOLICYACTIONGET, policy=PROCPOLICYRESOURCEUSAGE, policysubtype=PROCPOLICYRUSAGECPU, attrp=, targetpid=0, targetthreadid= causes 4 bytes of uninitialized kerne...

imagemagick/encoder_vda_fuzzer: Use-of-uninitialized-value in GetMagicInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6001481594437632 Project: imagemagick Fuzzer: libFuzzerimagemagickencodervdafuzzer Fuzz target binary: encodervdafuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

gdal/cad_fuzzer: in CADHandle::getAsLong

Detailed report: https://oss-fuzz.com/testcase?key=6093626703609856 Project: gdal Fuzzer: aflgdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: READ 8 Crash Address: 0x6020000428dd Crash State: CADHandle::getAsLong DWGFileRNUMBER::GetNOD...

librawspeed/FiffParserFuzzer-GetDecoder-Decode: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5591786081746944 Project: librawspeed Fuzzer: libFuzzerlibrawspeedFiffParserFuzzer-GetDecoder-Decode Fuzz target binary: FiffParserFuzzer-GetDecoder-Decode Job Type: libfuzzermsanlibrawspeed...

dlplibs/wpdfuzzer: Use-of-uninitialized-value in __gxx_personality_v0

Detailed report: https://oss-fuzz.com/testcase?key=6568895805652992 Project: dlplibs Fuzzer: libFuzzerdlplibswpdfuzzer Fuzz target binary: wpdfuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gxxpersonalityv0...

dlplibs/bmifuzzer: Use-of-uninitialized-value in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<unsi

Detailed report: https://oss-fuzz.com/testcase?key=5836862116593664 Project: dlplibs Fuzzer: libFuzzerdlplibsbmifuzzer Fuzz target binary: bmifuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::treenodebase&...

dlplibs/wrifuzzer: Use-of-uninitialized-value in __gxx_personality_v0

Detailed report: https://oss-fuzz.com/testcase?key=4921771384897536 Project: dlplibs Fuzzer: libFuzzerdlplibswrifuzzer Fuzz target binary: wrifuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gxxpersonalityv0...

libreoffice/ww8fuzzer: Crash in __dynamic_cast

Detailed report: https://oss-fuzz.com/testcase?key=5595000713773056 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0d29127ab200 Crash State: dynamiccast...

proj4/standard_fuzzer: Crash in pj_read_vgrid_value

Detailed report: https://oss-fuzz.com/testcase?key=5571475164626944 Project: proj4 Fuzzer: libFuzzerproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: libfuzzerasanproj4 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000bfff0530 Crash State: pjreadvgridvalue...

CVE-2017-15228

Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may access data beyond the end of the string...

Tor: Enforce minimum master password complexity

Hi Team, Actual results: There is no password complexity set for Master password in about:preferencessecurity , Because I was able to set my password like 123,123456,www, admin etc which is really common, apart from that we can use spaces as well in master password i was able to set space as my...

CVE-2015-7687

Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service crash or execute arbitrary code via vectors involving reqcavrfysmtp and reqcavrfymta...

librawspeed/RawSpeedFuzzer: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6276046933458944 Project: librawspeed Fuzzer: libFuzzerlibrawspeedRawSpeedFuzzer Fuzz target binary: RawSpeedFuzzer Job Type: libfuzzermsanlibrawspeed Platform Id: linux Crash Type:...

Cloudflare CTO Goes Inside the Cloudbleed Bug

MADRID—John Graham-Cumming presided over a confessional Wednesday at Virus Bulletin 2017. Cloudflare’s chief technology officer was frank and apologetic about February’s Cloudbleed bug, which leaked memory from the content delivery network that included internal private keys and authentication...

wireshark: Global-buffer-overflow in dissect_gtpv2_ie_common

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5241250057814016 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type:...

zstd: Heap-buffer-overflow in ZSTD_storeLastLiterals

Project: https://github.com/facebook/zstd.git Detailed report: https://oss-fuzz.com/testcase?key=4855313356292096 Project: zstd Fuzzer: libFuzzerzstdblockroundtrip Fuzz target binary: blockroundtrip Job Type: libfuzzerasanzstd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Addres...