Stable Channel Update for Desktop

The Stable channel has been updated to 119.0.6045.159 for Mac and Linux and 119.0.6045.159/.160 for Windows, which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

qemu:qemu-fuzz-i386-target-generic-fuzz-e1000: Stack-buffer-overflow in eNUMBER_receive_iov

Detailed Report: https://oss-fuzz.com/testcase?key=5025462753296384 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-e1000 Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7bc1f741c6b8 Crash State:...

pcapplusplus:FuzzTargetNg: Heap-buffer-overflow in parse_by_block_type

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4863850197155840 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

pcapplusplus:FuzzTargetNg: Negative-size-param in pcpp::RawPacket::insertData

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4780685856210944 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Negative-size-param Crash Address:...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::GREv1Layer::computeCalculateFields

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4735678306713600 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash...

json-flattener:UnflattenFuzzer: Security exception in com.google.gson.internal.bind.TypeAdapters$28.write

Detailed Report: https://oss-fuzz.com/testcase?key=5205763114795008 Project: json-flattener Fuzzing Engine: libFuzzer Fuzz Target: UnflattenFuzzer Job Type: libfuzzerasanjson-flattener Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

libredwg:llvmfuzz: Stack-buffer-overflow in dxf_header_read

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5417306444136448 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

libecc:cryptofuzz-libecc: Use-of-uninitialized-value in fp_uninit

Project: https://github.com/ANSSI-FR/libecc.git https://github.com/libecc/libecc.git Detailed Report: https://oss-fuzz.com/testcase?key=5460901268160512 Project: libecc Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-libecc Job Type: libfuzzermsanlibecc Platform Id: linux Crash Type:...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5381419710676992 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

libredwg:llvmfuzz: Heap-buffer-overflow in bit_read_RC

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4950601573990400 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libredwg:llvmfuzz: Heap-buffer-overflow in decode_preR13_entities

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4645218001223680 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address:...

vlc:vlc-demux-dec-libfuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6541374742462464 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerubsanvlc Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000800000010 Crash State: NULL Sanitizer: undefined UBSAN...

libredwg:llvmfuzz: Heap-buffer-overflow in dwg_geojson_object

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5563607855005696 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.compiler.CoreFunction.toString

Detailed Report: https://oss-fuzz.com/testcase?key=5567284464451584 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-poi:POIHSSFFuzzer: Security exception with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5292130421309440 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSSFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL Sanitizer: address ASAN Recommended...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5068859130118144 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void transform_idct_add<unsigned char>

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5220040284438528 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

igraph:read_pajek: Heap-use-after-free in igraph_pajek_yyparse

Project: https://github.com/igraph/igraph.git Detailed Report: https://oss-fuzz.com/testcase?key=4614971801337856 Project: igraph Fuzzing Engine: libFuzzer Fuzz Target: readpajek Job Type: libfuzzerasanigraph Platform Id: linux Crash Type: Heap-use-after-free READ 11 Crash Address: 0x62900000a215...

igraph:read_pajek: Heap-use-after-free in igraph_pajek_yyparse

Project: https://github.com/igraph/igraph.git Detailed Report: https://oss-fuzz.com/testcase?key=6346713285394432 Project: igraph Fuzzing Engine: libFuzzer Fuzz Target: readpajek Job Type: libfuzzerasani386igraph Platform Id: linux Crash Type: Heap-use-after-free READ 3 Crash Address: 0xf2a0a29e...

matio:matio_fuzzer: Heap-buffer-overflow in H5MM_xstrdup

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5375540112261120 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow REA...