gdal:gdal_vector_translate_fuzzer: Heap-use-after-free in OSRRelease

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5445566804328448 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalvectortranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

gdal:gdal_sdts_fuzzer: Heap-buffer-overflow in VSIArchiveFilesystemHandler::SplitFilename

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5265773244776448 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalsdtsfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x5030000084da...

gdal:gdal_fuzzer: Heap-buffer-overflow in void std::__1::vector<unsigned short, std::__1::allocator<unsigned short>>::__co

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4670068138508288 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x516000006c00 Crash...

Denial of Service (DoS)

Overview GDAL is a number of tools for programming and manipulating the GDAL Geospatial Data Abstraction Library. Affected versions of this package are vulnerable to Denial of Service DoS via the GMLASReader class due to improper entity expansion restrictions. Exploiting this vulnerability is...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the GMLASReader class due to improper entity expansion restrictions. Exploiting this vulnerability is possible when parsing specially crafted XML files with recursive entity definitions. Details Denial of Servi...

gdal:gdal_fuzzer: Heap-use-after-free in Page::getAnnots

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5116903314489344 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address: 0xf3601d44 Crash...

gdal:gdal_vector_translate_fuzzer: Stack-buffer-overflow in OGRMiraMonLayer::TranslateFieldsValuesToMM

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6479142315425792 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalvectortranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

gdal:get_jpeg2000_structure_fuzzer: Heap-buffer-overflow in ReadToken

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6028079340781568 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: getjpeg2000structurefuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Denial Of Service (DoS)

fiona is vulnerable Denial of Service DoS. The vulnerability is due to the bundled libjpeg-turbo and gdal components which contain Denial of Service vulnerabilities, which could potentially result in an application crash...

gdal:mitab_tab_fuzzer: Heap-double-free in VSIFree

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6225563541897216 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: mitabtabfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-double-free Crash Address: 0xf5218700 Crash State:...

gdal:mitab_tab_fuzzer: Heap-double-free in ___interceptor_free

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5163426878914560 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: mitabtabfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x5030000145f0 Crash State:...

gdal:ogr_miramon_fuzzer: Heap-buffer-overflow in OGRMiraMonLayer::GetFeature

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6325106042273792 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: ogrmiramonfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0xf72ff80...

gdal:mrf_fuzzer: Heap-buffer-overflow in CPLStrlcpy

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6210366200676352 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: mrffuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf5609156 Crash...

gdal:gdal_translate_fuzzer: Heap-buffer-overflow in std::__1::__wrap_iter<std::__1::basic_string<char, std::__1::char_traits<char>,

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5752107544150016 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

BIT-GDAL-2021-45943

GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...

gdal:gmlas_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5831365541036032 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gmlasfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x00000000 Crash State: NULL Sanitizer: address ASAN Crash...

gdal:mitab_tab_fuzzer: Crash in gdal_SHPReadObject

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6246297497370624 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: mitabtabfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x607f802049d4 Crash State:...

gdal:gdal_fuzzer: Heap-buffer-overflow in Splash::blitTransparent

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6127122829410304 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60200002e5f5 Crash...

Rocky Linux 8 : libtiff (RLSA-2020:4634)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:4634 advisory. - tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer...

gdal:gdal_vector_translate_fuzzer: Heap-buffer-overflow in node_split_rstartree

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5116928135659520 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalvectortranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...