njs:njs_process_script_fuzzer: Segv on unknown address in njs_lvlhsh_level_find

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5804992726433792 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

qt:qtbase_gui_text_qtextdocument_sethtml: Crash in QTextHtmlImporter::scanTable

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5272394031824896 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguitextqtextdocumentsethtml Job Type: libfuzzerasanqt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6288000079c0 Crash...

OSV-2021-231 Heap-buffer-overflow in int32_get_blk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29855 Crash type: Heap-buffer-overflow READ 1 Crash state: int32getblk cramreadSAMhdr cramdopen...

Security update for wavpack (moderate)

openSUSE Security Update: Security update for wavpack Announcement ID: openSUSE-SU-2021:0154-1 Rating: moderate References: 1091340 1091341 1091342 1091343 1091344 1180414 Cross-References: CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 CVE-2018-19840 CVE-2018-19841...

Security update for wavpack (moderate)

openSUSE Security Update: Security update for wavpack Announcement ID: openSUSE-SU-2021:0153-1 Rating: moderate References: 1091340 1091341 1091342 1091343 1091344 1180414 Cross-References: CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 CVE-2018-19840 CVE-2018-19841...

imagemagick:ping_cals_fuzzer: Heap-buffer-overflow in Fax4Decode

Detailed Report: https://oss-fuzz.com/testcase?key=5741805318569984 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingcalsfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6250000ac8fc Crash State: Fax4Decode...

OSV-2021-223 Heap-buffer-overflow in fdilate_1_56

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29819 Crash type: Heap-buffer-overflow READ 4 Crash state: fdilate156 fmorphopgenlow1 pixFMorphopGen1...

OSV-2021-222 Heap-buffer-overflow in arith_uncompress_to

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29792 Crash type: Heap-buffer-overflow READ 1 Crash state: arithuncompressto cramuncompressblock cramreadSAMhdr...

OSV-2021-221 Heap-buffer-overflow in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29816 Crash type: Heap-buffer-overflow READ 4 Crash state: bloscd bloscgetitem bloscgetitem...

OSV-2021-220 Heap-buffer-overflow in rans_uncompress_to_4x16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29795 Crash type: Heap-buffer-overflow READ 1 Crash state: ransuncompressto4x16 ransuncompress4x16 cramuncompressblock...

matio:matio_fuzzer: Use-of-uninitialized-value in H5F_addr_decode_len

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=4986285775257600 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

OSV-2021-219 UNKNOWN READ in H5HG__cache_heap_deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29759 Crash type: UNKNOWN READ Crash state: H5HGcacheheapdeserialize H5Cloadentry H5Cprotect...

SUSE SLED15 / SLES15 Security Update : wavpack (SUSE-SU-2021:0186-1)

This update for wavpack fixes the following issues : Update to version 5.4.0 - CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples bsc1180414 - fixed: disable A32 asm code when building for Apple silicon - fixed: issues with Adobe-style floating-point WAV files - added:...

matio:matio_fuzzer: Heap-buffer-overflow in H5F_addr_decode_len

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5190958515879936 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

OSV-2020-2304 Use-of-uninitialized-value in memory_test

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29731 Crash type: Use-of-uninitialized-value Crash state: memorytest fuzzersend wolfSSHSendPacket...

matio:matio_fuzzer: Crash in H5HG__cache_heap_deserialize

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6435364057251840 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

OSV-2021-213 Heap-use-after-free in ZSTD_freeDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29705 Crash type: Heap-use-after-free READ Crash state: ZSTDfreeDDict blosc2freectx blosc2schunkfree...

OSV-2021-212 Heap-buffer-overflow in pdf_get_xref_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29728 Crash type: Heap-buffer-overflow READ 4 Crash state: pdfgetxrefentry pdfcacheobject pdfresolveindirect...

OSV-2021-211 Heap-use-after-free in __libcpp_strpbrk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29698 Crash type: Heap-use-after-free READ 2 Crash state: libcppstrpbrk strpbrk tesseract::Tesseract::oneellconflict...

OSV-2020-2303 Use-of-uninitialized-value in Splash::pipeRunSimpleXBGR8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29651 Crash type: Use-of-uninitialized-value Crash state: Splash::pipeRunSimpleXBGR8 Splash::drawSpan Splash::fillWithPattern...