ffmpeg:ffmpeg_dem_IAMF_fuzzer: Heap-buffer-overflow in ff_mpeg4audio_get_config_gb

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4833546039525376 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemIAMFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x612000000703 Cras...

PT-2024-40765 · Git +1 · Boringssl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the ssl ctx make profiles function. Technical details...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in void grk::N_AVX2::vscheduler<grk::N_AVX2::DecompressDcShiftIrrev>

Detailed Report: https://oss-fuzz.com/testcase?key=4627634813206528 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void grk::NAVX2::vscheduler...

qpdf:qpdf_fuzzer: Heap-use-after-free in QPDFXRefEntry::getType

Project: https://github.com/qpdf/qpdf.git Detailed Report: https://oss-fuzz.com/testcase?key=4894357298675712 Project: qpdf Fuzzing Engine: libFuzzer Fuzz Target: qpdffuzzer Job Type: libfuzzerasanqpdf Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x506000002bc8 Crash...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::sget2

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5288757864497152 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libraw:libraw_raf_fuzzer: Heap-buffer-overflow in LibRaw::xtrans_interpolate

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5090302665752576 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawraffuzzer Job Type: libfuzzerasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

libavif:avif_decode_fuzzer: Use-of-uninitialized-value in avifSequenceHeaderParse

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=5083243719229440 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: avifdecodefuzzer Job Type: libfuzzermsanlibavif Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

llvm:llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::DWARFUnitIndex::parseImpl

Detailed Report: https://oss-fuzz.com/testcase?key=5965613558005760 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x603000000950 Crash State:...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Memcpy-param-overlap in tsk_fs_load_file_action

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6541397457960960 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsntfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Memcpy-param-overlap Crash...

mtail:vm-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5837710016184320 Project: mtail Fuzzing Engine: libFuzzer Fuzz Target: vm-fuzzer Job Type: libfuzzerasanmtail Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommended...

CVE-2024-27059

In the Linux kernel, the following vulnerability has been resolved: USB: usb-storage: Prevent divide-by-0 error in isd200atacommand The isd200 sub-driver in usb-storage uses the HEADS and SECTORS values in the ATA ID information to calculate cylinder and head values when creating a CDB for READ o...

CVE-2024-27059

CVE-2024-27059 refers to a Linux kernel vulnerability in the usb-storage isd200 sub-driver. The issue arises from using ATA ID values HEADS and SECTORS to derive cylinder/head for READ/WRITE CDBs; division/modulus by zero could occur if either value is 0. The fix blocks binding to devices with AT...

ghostscript:gs_device_pdfwrite_opts_fuzzer: Crash in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=4843874783657984 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwriteoptsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000045e066 Crash State: chunkfreeobject...

cras:cras_fl_media_fuzzer: Use-of-uninitialized-value in validate_bluetooth_device_address

Detailed Report: https://oss-fuzz.com/testcase?key=6559408940187648 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: crasflmediafuzzer Job Type: libfuzzermsancras Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: validatebluetoothdeviceaddress...

ots:ots-fuzzer: Use-of-uninitialized-value in ProcessGeneric

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=6402542306131968 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzermsanots Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

oniguruma:fuzzer: Use-of-uninitialized-value in prs_exp

Detailed Report: https://oss-fuzz.com/testcase?key=6349358873247744 Project: oniguruma Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanoniguruma Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: prsexp prsbranch prsalts Sanitizer: memory MS...

xpdf:fuzz_pdfload: Heap-buffer-overflow in GfxTilingPattern::scanXObjectForBlendMode

Detailed Report: https://oss-fuzz.com/testcase?key=6136561608491008 Project: xpdf Fuzzing Engine: afl Fuzz Target: fuzzpdfload Job Type: aflasanxpdf Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x605000053578 Crash State: GfxTilingPattern::scanXObjectForBlendMode...

ninja:fuzzer: Use-of-uninitialized-value in Lexer::Error

Project: https://github.com/ninja-build/ninja.git Detailed Report: https://oss-fuzz.com/testcase?key=5190727624622080 Project: ninja Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanninja Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

fwupd:uswid_fuzzer: Heap-buffer-overflow in fu_coswid_firmware_parse_entity

Project: https://github.com/fwupd/fwupd.git Detailed Report: https://oss-fuzz.com/testcase?key=5080166375161856 Project: fwupd Fuzzing Engine: libFuzzer Fuzz Target: uswidfuzzer Job Type: libfuzzerasanfwupd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x605000006678...

PT-2024-40695 · Matio · Matio

Name of the Vulnerable Software and Affected Versions: Matio affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs due to a heap-buffer-overflow READ 8 error, involving the Mat VarDuplicate and MatioRead functions in the matio...