OSV-2021-271 Heap-buffer-overflow in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30193 Crash type: Heap-buffer-overflow READ 1 Crash state: bloscrundecompressionwithcontext blosc2decompress fuzzdecompresschunk.c...

OSV-2021-261 Stack-buffer-overflow in flb_sds_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30093 Crash type: Stack-buffer-overflow READ Crash state: flbsdscat ratranslatekeymap flbratranslate...

Security Advisory 2021-02-02-2 - wolfSSL heap buffer overflow in RsaPad_PSS (CVE-2020-36177)

DESCRIPTION RsaPadPSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size. The issue is marked as critical with CVSS score of 9.8. REQUIREMENTS It's still work in progress, there is not that much information about it...

OSV-2021-260 Heap-buffer-overflow in flb_parser_json_do

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30090 Crash type: Heap-buffer-overflow READ Crash state: flbparserjsondo flbparserdo parserfuzzer.c...

OSV-2021-258 Heap-buffer-overflow in unstripe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30087 Crash type: Heap-buffer-overflow READ 1 Crash state: unstripe arithuncompressto arithdecode...

OSV-2021-257 Stack-buffer-overflow in kdf_sshkdf_set_ctx_params

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30037 Crash type: Stack-buffer-overflow READ 1 Crash state: kdfsshkdfsetctxparams EVPKDFCTXsetparams cryptofuzz::module::OpenSSL::OpKDFSSH...

OSV-2021-251 Heap-buffer-overflow in safe_ltf8_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30012 Crash type: Heap-buffer-overflow READ 1 Crash state: safeltf8get cramconstdecodeinit cramdecoderinit...

OSV-2021-247 Heap-buffer-overflow in blosc_getitem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29976 Crash type: Heap-buffer-overflow READ 1 Crash state: bloscgetitem getcoffset framegetlazychunk...

OSV-2021-246 Memcpy-param-overlap in frame_get_usermeta

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29973 Crash type: Memcpy-param-overlap Crash state: framegetusermeta blosc2frametoschunk blosc2schunkopensframe...

OSV-2021-245 UNKNOWN WRITE in WelsDecodeBs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29969 Crash type: UNKNOWN WRITE Crash state: WelsDecodeBs WelsDec::CWelsDecoder::DecodeFrame2WithCtx WelsDec::CWelsDecoder::DecodeFrame2...

OSV-2021-242 Heap-buffer-overflow in rans_uncompress_to_4x16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29939 Crash type: Heap-buffer-overflow READ 1 Crash state: ransuncompressto4x16 ransdecode uncompress...

OSV-2021-237 Heap-use-after-free in sampled_data_sample

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29903 Crash type: Heap-use-after-free WRITE 4 Crash state: sampleddatasample sampleddatacontinue interp...

OSV-2021-236 Heap-use-after-free in DatasetAdd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29886 Crash type: Heap-use-after-free READ 4 Crash state: DatasetAdd DetectDatasetBufferMatch DetectEngineContentInspection...

OSV-2021-235 Global-buffer-overflow in QSvgSwitch::draw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29873 Crash type: Global-buffer-overflow READ 1 Crash state: QSvgSwitch::draw QSvgTinyDocument::draw QSvgTinyDocument::draw...

openSUSE Security Update : wavpack (openSUSE-2021-154)

This update for wavpack fixes the following issues : - Update to version 5.4.0 - CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples bsc1180414 - fixed: disable A32 asm code when building for Apple silicon - fixed: issues with Adobe-style floating-point WAV files - added:...

OPENSUSE-SU-2021:0154-1 Security update for wavpack

This update for wavpack fixes the following issues: - Update to version 5.4.0 CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples bsc1180414 fixed: disable A32 asm code when building for Apple silicon fixed: issues with Adobe-style floating-point WAV files added: --normalize-floats...

OSV-2021-231 Heap-buffer-overflow in int32_get_blk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29855 Crash type: Heap-buffer-overflow READ 1 Crash state: int32getblk cramreadSAMhdr cramdopen...

Security update for wavpack (moderate)

openSUSE Security Update: Security update for wavpack Announcement ID: openSUSE-SU-2021:0154-1 Rating: moderate References: 1091340 1091341 1091342 1091343 1091344 1180414 Cross-References: CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 CVE-2018-19840 CVE-2018-19841...

Security update for wavpack (moderate)

openSUSE Security Update: Security update for wavpack Announcement ID: openSUSE-SU-2021:0153-1 Rating: moderate References: 1091340 1091341 1091342 1091343 1091344 1180414 Cross-References: CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 CVE-2018-19840 CVE-2018-19841...

OSV-2021-223 Heap-buffer-overflow in fdilate_1_56

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29819 Crash type: Heap-buffer-overflow READ 4 Crash state: fdilate156 fmorphopgenlow1 pixFMorphopGen1...