simd:simd_load_fuzzer: Crash in Simd::Base::ImageJpegLoader::FromStream

Project: https://github.com/ermig1979/Simd.git Detailed Report: https://oss-fuzz.com/testcase?key=6715856182181888 Project: simd Fuzzing Engine: afl Fuzz Target: simdloadfuzzer Job Type: aflasansimd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62907161ce29 Crash State:...

simd:simd_load_fuzzer: Heap-use-after-free in Simd::Base::ImageJpegLoader::FromStream

Detailed Report: https://oss-fuzz.com/testcase?key=6287482038648832 Project: simd Fuzzing Engine: libFuzzer Fuzz Target: simdloadfuzzer Job Type: libfuzzerasansimd Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6290027bf80c Crash State:...

CVE-2020-13388

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...

CVE-2020-13388: Improper Neutralization of Special Elements used in an OS Command

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...