libreoffice:tiffuzzer: Heap-buffer-overflow in put1bitbwtile

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5090796438683648 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: tiffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

OSV-2022-427 Stack-use-after-scope in RefCopyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47560 Crash type: Stack-use-after-scope READ Crash state: RefCopyBytes DoCopyBytes dngstream::Put...

OSV-2022-426 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47557 Crash type: Memcpy-param-overlap Crash state: repeat pere cliregcompreal...

OSV-2022-422 UNKNOWN WRITE in alloc_restore_step_in

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47513 Crash type: UNKNOWN WRITE Crash state: allocrestorestepin allocrestoreall gsmainfinit...

OSV-2022-421 Stack-buffer-overflow in cardos_list_files

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47512 Crash type: Stack-buffer-overflow READ 1 Crash state: cardoslistfiles sclistfiles fuzzcard.c...

OSV-2022-416 Heap-buffer-overflow in opj_t1_allocate_buffers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47500 Crash type: Heap-buffer-overflow WRITE Crash state: opjt1allocatebuffers opjt1clbldecodeprocessor opjthreadpoolsubmitjob...

OSV-2022-417 Heap-buffer-overflow in read_xref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47501 Crash type: Heap-buffer-overflow READ 8 Crash state: readxref pdfireadxref pdfisetinputstream...

OSV-2022-415 UNKNOWN READ in pdfi_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47499 Crash type: UNKNOWN READ Crash state: pdfifreeobject pdficlearcontext pdfifreecontext...

gdbm:gdbm_fuzzer: Heap-use-after-free in _gdbm_cache_free

Detailed Report: https://oss-fuzz.com/testcase?key=4634746614841344 Project: gdbm Fuzzing Engine: afl Fuzz Target: gdbmfuzzer Job Type: aflasangdbm Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61600004d1c0 Crash State: gdbmcachefree gdbmclose closehandler Sanitizer:...

ghostscript:gstoraster_fuzzer: Crash in alloc_restore_step_in

Detailed Report: https://oss-fuzz.com/testcase?key=6254151127924736 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x629ff625e050 Crash State: allocrestorestepin...

openexr:openexr_exrcorecheck_fuzzer: Heap-buffer-overflow in uncompress_b44_impl

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5479947201806336 Project: openexr Fuzzing Engine: honggfuzz Fuzz Target: openexrexrcorecheckfuzzer Job Type: honggfuzzasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflo...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in read_xref

Detailed Report: https://oss-fuzz.com/testcase?key=4856222387404800 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x7f806aa13470 Crash State: readxref...

OSV-2022-412 Bad-cast to const upb_tabent' (aka 'const struct _upb_tabent')insert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47464 Crash type: Bad-cast Crash state: Bad-cast to const upbtabent' aka 'const struct upbtabent'insert upbstrtableinsert createfielddef...

[SECURITY] [DLA 3010-1] ffmpeg security update

Debian LTS Advisory DLA-3010-1 [email protected] https://www.debian.org/lts/security/ Enrico Zini May 16, 2022 https://wiki.debian.org/LTS Package : ffmpeg Version : 7:3.2.18-0+deb9u1 The ffmpeg project released the new version 3.2.18 with fixes for various issues found by the OSS-Fuzz...

gdal:fgb_fuzzer: Heap-buffer-overflow in flatbuffers::Table::VerifyOffset

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4642513358553088 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: fgbfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60400000437c Crash...

OSV-2022-410 Heap-buffer-overflow in Assimp::ASE::Parser::ParseLV1SoftSkinBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47392 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::ASE::Parser::ParseLV1SoftSkinBlock Assimp::ASE::Parser::Parse Assimp::ASEImporter::InternReadFile...

OSV-2022-409 Heap-buffer-overflow in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47391 Crash type: Heap-buffer-overflow READ 1 Crash state: std::1::treenodebase& std::1::treestd::1::valuetypestd: std::1::pairstd::1::treeiteratorstd::1::valuetypestd::1::basic...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::ASE::Parser::ParseLV1SoftSkinBlock

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6539384737890304 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzer Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

json:parse_bjdata_fuzzer: Heap-buffer-overflow in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:

Project: https://github.com/nlohmann/json.git Detailed Report: https://oss-fuzz.com/testcase?key=5698044521218048 Project: json Fuzzing Engine: libFuzzer Fuzz Target: parsebjdatafuzzer Job Type: libfuzzerasanjson Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2022-406 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47339 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...