llvm:clang-objc-fuzzer: Segv on unknown address in clang::Sema::PushDeclContext

Detailed Report: https://oss-fuzz.com/testcase?key=5710973226975232 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::PushDeclContext...

CVE-2013-7171

Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on the /tmp directory which could allow remote attackers to execute arbitrary code with root privileges...

CVE-2013-7171

CVE-2013-7171 affects Slackware 14.0/14.1 and Slackware LLVM 3.0-i486-2, 3.3-i486-2, where world-writable /tmp permissions could let a remote attacker execute arbitrary code with root privileges. Root cause identified as improper /tmp directory permissions; no specific patch/version or remediatio...

qt5-qtbase security and bug fix update

qt5-qtbase 5.11-1-7 - Move libQt5EglFSDeviceIntegration lib out of the -devel subpkg Resolves: bz1692970 - Fix QImage allocaion failure Resolve: bz1667860 - Fix double free in QXmlStreamReader Resolve: bz1667858 - Fix segmentation fault on malformed BMP file Resolve: bz1667859 5.11.1-6 - Create a...

FreeBSD-SA-19:26.mcu

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-19:26.mcu Security Advisory The FreeBSD Project Topic: Intel CPU Microcode Update Category: 3rd party Module: Intel CPU microcode Announced: 2019-11-12 Credits:...

Apple Xcode llvm component code execution vulnerability

Apple Xcode is the United States Apple Apple company's set of integrated development environment for developers, it is mainly used for the development of Mac OS X and iOS applications. LLVM Low Level Virtual Machine is a set of LLVM team developed a framework for framing the compiler compiler...

About the security content of Xcode 11.2

About the security content of Xcode 11.2 This document describes the security content of Xcode 11.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

llvm:clang-objc-fuzzer: Heap-use-after-free in clang::TokenLexer::Lex

Detailed Report: https://oss-fuzz.com/testcase?key=5647561683107840 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address: 0x634000002840 Crash State: clang::TokenLexer::Lex...

llvm:clang-objc-fuzzer: Use-of-uninitialized-value in clang::tok::isAnnotation

Detailed Report: https://oss-fuzz.com/testcase?key=5642424365350912 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::tok::isAnnotation...

CVE-2019-2986

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: LLVM Interpreter. The supported version that is affected is 19.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle GraalVM...

CVE-2019-2986

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: LLVM Interpreter. The supported version that is affected is 19.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle GraalVM...

CVE-2019-2986

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: LLVM Interpreter. The supported version that is affected is 19.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle GraalVM...

Unspecified Vulnerability in Oracle GraalVM Enterprise Edition (CNVD-2019-45395)

Oracle GraalVM Enterprise Edition is a multilingual virtual machine based on Oracle's Enterprise Java SE. A security vulnerability exists in the LLVM Interpreter component in Oracle GraalVM Enterprise Edition 19.2.0. An attacker could exploit this vulnerability to affect availability...

Oracle GraalVM Enterprise Edition CVE-2019-2986 Remote Security Vulnerability

Description Oracle GraalVM Enterprise Edition is prone to a remote security vulnerability. This vulnerability can be exploited over the 'Multiple' protocol. The 'LLVM Interpreter' component is affected. This vulnerability affects the following supported versions: 19.2.0 Technologies Affected Orac...

llvm:llvm-opt-fuzzer--x86_64-loop_unroll: Use-of-uninitialized-value in bool llvm::DenseMapBase<llvm::DenseMap<llvm::StringRef, llvm::detail::DenseSetEm

Detailed Report: https://oss-fuzz.com/testcase?key=5077047453417472 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-opt-fuzzer--x8664-loopunroll Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bool llvm::DenseMapBase...

llvm:llvm-special-case-list-fuzzer: Heap-buffer-overflow in p_ere

Detailed Report: https://oss-fuzz.com/testcase?key=5717405149429760 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x620000003e60 Crash State: pere pere pere...

llvm:llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::DWARFFormValue::dump

Detailed Report: https://oss-fuzz.com/testcase?key=5768932048240640 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x622000002f80 Crash State: llvm::DWARFFormValue::du...

llvm:llvm-isel-fuzzer--aarch64-O2: Use-of-uninitialized-value in CodeGenPrepare::optimizeInst

Project: https://github.com/llvm/llvm-project.git Detailed Report: https://oss-fuzz.com/testcase?key=6324347450425344 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-isel-fuzzer--aarch64-O2 Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

llvm:llvm-isel-fuzzer--aarch64-O2: Container-overflow in MachineBlockPlacement::runOnMachineFunction

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5751823645802496 Project: llvm Fuzzing engine: libFuzzer Fuzz target: llvm-isel-fuzzer--aarch64-O2 Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Container-overflow READ 8 Crash Addres...

llvm:llvm-opt-fuzzer--x86_64-gvn: Heap-buffer-overflow in std::__1::enable_if<is_hashable_data<char const>::value, llvm::hash_code>::type

Detailed report: https://oss-fuzz.com/testcase?key=6308289423343616 Project: llvm Fuzzing engine: libFuzzer Fuzz target: llvm-opt-fuzzer--x8664-gvn Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x61d0000046c8 Crash State:...