gdal:gtiff_fuzzer: Heap-buffer-overflow in Fax4Decode

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6308121394544640 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: gtifffuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x615000000c80 Cra...

gdal:mrf_fuzzer: Heap-buffer-overflow in Lerc1NS::blockread

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5094848431128576 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: mrffuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6160000014f8 Crash...

gdal:gtiff_fuzzer: Heap-buffer-overflow in Fax3Decode2D

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5139548596862976 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: gtifffuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x615000000c80 Cra...

gdal:gtiff_fuzzer: Heap-buffer-overflow in Fax3Decode2D

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5428642430320640 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: gtifffuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x615000000c80 Cra...

gdal:lvbag_fuzzer: Heap-buffer-overflow in OGR_RawField_IsUnset

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5186645136769024 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: lvbagfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000038b0 Cras...

gdal:ods_fuzzer: Heap-buffer-overflow in OGRFeatureFormatDateTimeBuffer

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5149140702199808 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: odsfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x604000007500 Crash...

gdal:lvbag_fuzzer: Crash in [heap]

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5267766755196928 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: lvbagfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000cf60484 Crash State: heap...

gdal:gdal_translate_fuzzer: Heap-buffer-overflow in GDALResampleChunk32R_Mode

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5677488700391424 Project: gdal Fuzzing Engine: afl Fuzz Target: gdaltranslatefuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x603000017490 Crash...

gdal:lvbag_fuzzer: Crash in lookup

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5678310783975424 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: lvbagfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x619005000016 Crash State: lookup...

gdal:lvbag_fuzzer: Heap-use-after-free in doContent

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5653474951036928 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: lvbagfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address: 0x61d000003dd0 Crash...

gdal:lvbag_fuzzer: Heap-use-after-free in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5717169316036608 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: lvbagfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x625000010554 Crash...

Arbitrary Code Execution

sqlite is vulnerable to arbitrary code execution. The vulnerability exists as the getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly...

gdal:wasp_fuzzer: Crash in pj_vlog

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5721450167402496 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: waspfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x633000020000 Crash State: pjvlog...

gdal:gdal_fuzzer: Heap-use-after-free in int std::__1::__cxx_atomic_fetch_sub<int>

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5695392407879680 Project: gdal Fuzzing Engine: afl Fuzz Target: gdalfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address: 0x608000019148 Crash State: int...

gdal:gdal_translate_fuzzer: Heap-buffer-overflow in CPLErr GDALResampleChunk32R_AverageT<unsigned char, int>

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5637015229169664 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

gdal:gdal_fuzzer: Heap-buffer-overflow in Fax3Decode2D

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6232557395116032 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x615000003c00 Cras...

gdal:gdal_fuzzer: Heap-buffer-overflow in Fax3Decode2D

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5760884355104768 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0xf2707a80 Cras...

Debian DLA-2147-1 : gdal security update

tifgetimage.c in LibTIFF, as used in GDAL has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a 'Negative-size-param' condition. For Debian 8 'Jessie', this problem has been fixed in version 1.10.1+dfsg-8+deb8u2. We recommend that you...

Debian: Security Advisory (DLA-2147-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2147-1] gdal security update

Package : gdal Version : 1.10.1+dfsg-8+deb8u2 CVE ID : CVE-2019-17546 tifgetimage.c in LibTIFF, as used in GDAL has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition. For Debian 8 "Jessie", this problem...