gdal:shape_fuzzer: Negative-size-param in OGRSimpleCurve::setNumPoints

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4866204202041344 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: shapefuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

gdal:gdal_filesystem_fuzzer: Heap-use-after-free in XRef::~XRef

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6330078109499392 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfilesystemfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

gdal:gdal_filesystem_fuzzer: Heap-use-after-free in Object::free

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6051802329776128 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfilesystemfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

AZL-45195 CVE-2023-3618 affecting package gdal 3.6.3-2

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tiffax3.c, resulting in a denial of service...

AZL-43888 CVE-2023-3618 affecting package gdal 3.6.3-5

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tiffax3.c, resulting in a denial of service...

gdal:mitab_mif_fuzzer: Heap-buffer-overflow in utf8ToUtf16

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5609298328420352 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: mitabmiffuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0xf4502150...

gdal:ogr_fuzzer: Heap-use-after-free in GMLHandler::endElementGeometry

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5762439728988160 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6030000204b8 Crash...

gdal:gml_fuzzer: Heap-buffer-overflow in GMLHandler::endElementGeometry

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5480437914140672 Project: gdal Fuzzing Engine: afl Fuzz Target: gmlfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6060000084d0 Crash State:...

gdal:filename_fuzzer: Crash in CPLCalloc

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4890814158602240 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: filenamefuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x24000000 Crash State:...

Ubuntu 16.04 ESM : LibTIFF vulnerabilities (USN-5841-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5841-1 advisory. It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted...

gdal:gml_fuzzer: Heap-use-after-free in CPLDestroyXMLNode

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6453324275908608 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gmlfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf55144b8 Crash...

gdal:gml_fuzzer: Heap-buffer-overflow in GMLHandler::startElementGeometry

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5980899364962304 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gmlfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60300000b258 Crash...

gdal:gdal_fuzzer: Container-overflow in inflate

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6192607070126080 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Container-overflow READ Crash Address: 0x7fcf3582a900 Crash...

gdal:gdal_fuzzer: Container-overflow in PNGDataset::LoadWholeImage

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6109985463730176 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address: 0x629000005200 Crash...

gdal:gdal_fuzzer: Container-overflow in PNGDataset::LoadWholeImage

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5527552179699712 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: gdalfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address: 0x7fa49410e800 Crash...

The vulnerability of the PCIDSK::CPCIDSKFile::ReadFromFile function in the GDAL geospatial data translator library allows a attacker to cause a service failure.

The vulnerability of the PCIDSK::CPCIDSKFile::ReadFromFile function in the GDAL geospatial data transformation library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

gdal:gdal_filesystem_fuzzer: Heap-buffer-overflow in NITFImageAccess

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6146100772077568 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: gdalfilesystemfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address:...

GDAL: Heap Buffer Overflow

Background GDAL is a geospatial data abstraction library. Description GDAL does not sufficiently sanitize input when loading PCIDSK binary segments. Impact Loading crafted PCIDSK data via GDAL could result in denial of service. Workaround There is no known workaround at this time. Resolution All...

GLSA-202210-15 : GDAL: Heap Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-202210-15 GDAL: Heap Buffer Overflow - GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and...

gdal:filename_fuzzer: Stack-buffer-overflow in SENTINEL2Dataset::Open

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4834019741401088 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: filenamefuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0xffdf9bfc...