grok:grk_decompress_fuzzer: Use-of-uninitialized-value with empty stacktrace

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=6517019645968384 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

libbpf:bpf-object-fuzzer: Crash in init_struct_ops_maps

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6347017391308800 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasanlibbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61e100000d27 Crash...

harfbuzz:hb-draw-fuzzer: Heap-buffer-overflow in OT::cff2::accelerator_templ_t<CFF::cff2_private_dict_opset_t, CFF::cff2_private_

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5393832740782080 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-draw-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

selinux:binpolicy-fuzzer: Use-of-uninitialized-value in symhash

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=6552084102905856 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: binpolicy-fuzzer Job Type: libfuzzermsanselinux Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...

selinux:binpolicy-fuzzer: Heap-buffer-overflow in is_decl_requires_met

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5059283511017472 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: binpolicy-fuzzer Job Type: libfuzzerasanselinux Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

fluent-bit:flb-it-fuzz-config_yaml_fuzzer_OSSFUZZ: Segv on unknown address in flb_sds_cat_safe

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4677684101513216 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-configyamlfuzzerOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Segv on unknown address Crash...

libheif:file_fuzzer: Crash in HeifPixelImage::overlay

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5072436592508928 Project: libheif Fuzzing Engine: afl Fuzz Target: filefuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x453de8a42800 Crash State:...

freeimage:load_from_memory_fuzzer: Global-buffer-overflow in libraw_tagtype_dataunit_bytes

Detailed Report: https://oss-fuzz.com/testcase?key=5451562163765248 Project: freeimage Fuzzing Engine: afl Fuzz Target: loadfrommemoryfuzzer Job Type: aflasanfreeimage Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000131baac Crash State: librawtagtypedataunitbyte...

lcms:cms_profile_fuzzer: Use-of-uninitialized-value in cmsMLUsetWide

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=5816403428769792 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsprofilefuzzer Job Type: libfuzzermsanlcms Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...

PT-2023-35568 · Git +1 · Lcms

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash was reported due to an unknown read issue. The crash involves the function cmsIT8GetDataRowColDbl and is related to the file cms cgats fuzzer.c. ...

clamav:clamav_dbload_PDB_fuzzer: Stack-buffer-overflow in parse_regex

Detailed Report: https://oss-fuzz.com/testcase?key=6672149120942080 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadPDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7b885cad9860 Crash State: parseregex parsereg...

flac:fuzzer_tool_flac: Use-of-uninitialized-value in write_callback

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=6109218488582144 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzertoolflac Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick:encoder_j2c_fuzzer: Segv on unknown address in opj_jp2_read_header

Detailed Report: https://oss-fuzz.com/testcase?key=4517827836772352 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderj2cfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: opjjp2readheader ReadJP2Image...

ASB-A-278303745

In discoverythread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-243463593

In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

Malware in fuzzer-gui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in fuzzer-gui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b32a7fd36a831bd074988f7054a6dca65651d07aafc8d97dc75c6f907a59895 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8402 Malicious code in fuzzer-gui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b32a7fd36a831bd074988f7054a6dca65651d07aafc8d97dc75c6f907a59895 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in Calc_Length

Detailed Report: https://oss-fuzz.com/testcase?key=6362513849319424 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62a0002e79e0 Crash State: CalcLengt...

kimageformats:kimgio_heif_fuzzer: Global-buffer-overflow in read_coding_unit

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5359676860268544 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash...