Amazon Linux AMI : GraphicsMagick (ALAS-2019-1257)

GraphicsMagick is now participating in Google's oss-fuzz project due to the contributions and assistance of Alex Gaynor. Since February 4 2018, 343 issues have been opened by oss-fuzz and 331 of those issues have been resolved. The issues list is available at...

gdal:cad_fuzzer: Crash in CADBuffer::Read2B

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5725897545482240 Project: gdal Fuzzing engine: libFuzzer Fuzz target: cadfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x154fdc99 Crash State:...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parse_makernote_ADDRESS

Detailed report: https://oss-fuzz.com/testcase?key=5632907177099264 Project: imagemagick Fuzzing engine: libFuzzer Fuzz target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::parsemakernoteADDRESS...

aspell:aspell_fuzzer: Crash in acommon::DecodeDirect<unsigned short>::decode

Project: https://github.com/gnuaspell/aspell.git Detailed report: https://oss-fuzz.com/testcase?key=5673813550825472 Project: aspell Fuzzing engine: libFuzzer Fuzz target: aspellfuzzer Job Type: libfuzzerubsanaspell Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000001cbb000 Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Global-buffer-overflow in dequantize

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5648247961419776 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDATRAC9fuzzer Fuzz target binary: ffmpegAVCODECIDATRAC9fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ ...

Low: GraphicsMagick

Issue Overview: GraphicsMagick is now participating in Google's oss-fuzz project due to the contributions and assistance of Alex Gaynor. Since February 4 2018, 343 issues have been opened by oss-fuzz and 331 of those issues have been resolved. The issues list is available at...

ffmpeg/ffmpeg_AV_CODEC_ID_RALF_fuzzer: Index-out-of-bounds in decode_channel

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5086088934195200 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDRALFfuzzer Fuzz target binary: ffmpegAVCODECIDRALFfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

aspell/aspell_fuzzer: Heap-buffer-overflow in acommon::String::assign_only_nonnull

Project: https://github.com/gnuaspell/aspell.git Detailed report: https://oss-fuzz.com/testcase?key=5703575778361344 Project: aspell Fuzzer: libFuzzeraspellfuzzer Fuzz target binary: aspellfuzzer Job Type: libfuzzerasanaspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Crash Addres...

ffmpeg/ffmpeg_AV_CODEC_ID_LIBVORBIS_fuzzer: Heap-buffer-overflow in oggpack_read

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5760920873074688 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBVORBISfuzzer Fuzz target binary: ffmpegAVCODECIDLIBVORBISfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

libspng/spng_read_fuzzer: Heap-use-after-free in read_chunks_after_idat

Project: https://gitlab.com/randy408/libspng.git https://github.com/randy408/libspng.git Detailed report: https://oss-fuzz.com/testcase?key=5170676362641408 Project: libspng Fuzzer: afllibspngspngreadfuzzer Fuzz target binary: spngreadfuzzer Job Type: aflasanlibspng Platform Id: linux Crash Type:...

lz4/compress_fuzzer: Heap-buffer-overflow in LZ4_write32

Project: https://github.com/lz4/lz4.git Detailed report: https://oss-fuzz.com/testcase?key=5726918013353984 Project: lz4 Fuzzer: afllz4compressfuzzer Fuzz target binary: compressfuzzer Job Type: aflasanlz4 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x61c00000075b...

wireshark/fuzzshark_ip_proto-udp: Crash in tvb_ensure_bytes_exist

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5709248316571648 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerubsanwireshark Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip_proto-udp: Stack-buffer-overflow in tvb_memcpy

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5738227266224128 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type:...

libxslt/xslt: Use-of-uninitialized-value in xmlOutputBufferWriteEscape

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed report: https://oss-fuzz.com/testcase?key=5768945878958080 Project: libxslt Fuzzer: libFuzzerlibxsltxslt Fuzz target binary: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libsass/data_context_fuzzer: Bad-cast to Sass::PreValue from Sass::Unary_Expression in Sass::SharedImpl<Sass::PreValue>::SharedImpl<Sass::Expression>

Detailed report: https://oss-fuzz.com/testcase?key=5636165890211840 Project: libsass Fuzzer: libFuzzerdatacontextfuzzer Fuzz target binary: datacontextfuzzer Job Type: libfuzzerubsanlibsass Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000031e1f40 Crash State: Bad-cast to Sass::PreVal...

jsonnet/convert_jsonnet_fuzzer: Crash in Interpreter::manifestJson

Project: https://github.com/google/jsonnet.git Detailed report: https://oss-fuzz.com/testcase?key=6202714083557376 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzerubsanjsonnet Platform Id: linux Crash Type: UNKNOWN READ Cra...

jsonnet/convert_jsonnet_fuzzer: Crash in Interpreter::evaluate

Project: https://github.com/google/jsonnet.git Detailed report: https://oss-fuzz.com/testcase?key=5706027058593792 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzerubsanjsonnet Platform Id: linux Crash Type: UNKNOWN READ Cra...

imagemagick/encoder_jnx_fuzzer: Heap-use-after-free in DestroyStringInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5152362538205184 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderjnxfuzzer Fuzz target binary: encoderjnxfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_eps_fuzzer: Stack-buffer-overflow in ConstantString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5653164516179968 Project: imagemagick Fuzzer: libFuzzerimagemagickpingepsfuzzer Fuzz target binary: pingepsfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

libxslt/xslt: Use-of-uninitialized-value in xmlOutputBufferWriteEscape

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed report: https://oss-fuzz.com/testcase?key=5760846728265728 Project: libxslt Fuzzer: libFuzzerlibxsltxslt Fuzz target binary: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...