libreoffice/xlsxfuzzer: Bad-cast to ZipPackageFolder from ZipPackageStream in ZipPackage::getZipFileContents

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5908578138324992 Project: libreoffice Fuzzer: libFuzzerlibreofficexlsxfuzzer Fuzz target binary: xlsxfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/xlsxfuzzer: Bad-cast to ZipPackageFolder from ZipPackageStream in ZipPackageEntry::doSetParent

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5824168877621248 Project: libreoffice Fuzzer: libFuzzerlibreofficexlsxfuzzer Fuzz target binary: xlsxfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/docxfuzzer: Bad-cast to cppuhelper::detail::XExceptionThrower from cppuhelper::detail::XExceptionThrower in cppu::throwException

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6262755737731072 Project: libreoffice Fuzzer: libFuzzerlibreofficedocxfuzzer Fuzz target binary: docxfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/pptfuzzer: Bad-cast to SdrObjGroup from SdrEdgeObj in SvxMSDffManager::ImportGroup

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6243010330230784 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/scrtffuzzer: Bad-cast to cppuhelper::detail::XExceptionThrower from cppuhelper::detail::XExceptionThrower in cppu::throwException

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5060976341680128 Project: libreoffice Fuzzer: libFuzzerlibreofficescrtffuzzer Fuzz target binary: scrtffuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Cras...

libreoffice/ww8fuzzer: Bad-cast to SwRangeRedline from invalid vptr in sw::DocumentRedlineManager::AppendRedline

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4846375079510016 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/ww8fuzzer: Crash in __dynamic_cast

Detailed report: https://oss-fuzz.com/testcase?key=5595000713773056 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0d29127ab200 Crash State: dynamiccast...

libreoffice/ww8fuzzer: Bad-cast to SwRangeRedlinesw::DocumentRedlineManager::AppendRedline;sw::util::SetInDocAndDelete::operator;sw::util::RedlineStack::~RedlineStack

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6730567920910336 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/ww6fuzzer: Bad-cast to const SwFormatDrop from invalid vptr;SwWW8ImplReader::ReadText;SwWW8ImplReader::CoreLoad

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6506538735763456 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/ww6fuzzer: Bad-cast to const SwFormatDropSwWW8ImplReader::ReadText;SwWW8ImplReader::CoreLoad;SwWW8ImplReader::LoadThroughDecryption

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6349321994764288 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/pptfuzzer: Bad-cast to const XLineStartItem from XLineEndItem;EnhancedCustomShape2d::SwapStartAndEndArrow;CorrectCalloutArrows

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5550802748833792 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/ww8fuzzer: Bad-cast to SwRangeRedline from invalid vptr;sw::DocumentRedlineManager::AppendRedline;sw::util::SetInDocAndDelete::operator

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6171633560584192 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/ww8fuzzer: Bad-cast to SwRangeRedlinesw::DocumentRedlineManager::AppendRedline;sw::util::SetInDocAndDelete::operator;sw::util::RedlineStack::~RedlineStack

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6146483976929280 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/lwpfuzzer: Bad-cast to OpenStormBento::CBenObject from OpenStormBento::CUtListElmt;OpenStormBento::CBenTOCReader::ReadTOC;OpenStormBento::CBenTOCReader::ReadLabelAndTOC

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5624999114178560 Project: libreoffice Fuzzer: libFuzzerlibreofficelwpfuzzer Fuzz target binary: lwpfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

CVE-2017-7813

Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed. This usually results in a non-exploitable crash, but can leak a limited amount of information from memory if it matches JavaScript identifier syntax. This...

ALPINE-CVE-2017-12678

In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file...

UBUNTU-CVE-2017-12678

In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file...

CVE-2017-12678

In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file...

DEBIAN-CVE-2017-12678

In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file...

Null pointer dereference

In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file...