freetype2/bdf: Heap-buffer-overflow in bdf_cmap_char_index

Detailed report: https://oss-fuzz.com/testcase?key=5658441041838080 Project: freetype2 Fuzzer: libFuzzerfreetype2bdf Fuzz target binary: bdf Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6050000007d0 Crash State: bdfcmapcharindex...

openvswitch/odp_target: Heap-use-after-free in parse_odp_action

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5641929845374976 Project: openvswitch Fuzzer: aflopenvswitchodptarget Fuzz target binary: odptarget Job Type: aflasanopenvswitch Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash...

keystone/fuzz_asm_hex: Use-of-uninitialized-value in llvm_ks::HexagonMCCodeEmitter::getExprOpValue

Detailed report: https://oss-fuzz.com/testcase?key=5664745516957696 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmhex Fuzz target binary: fuzzasmhex Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ffmpeg/ffmpeg_AV_CODEC_ID_ILBC_fuzzer: Global-buffer-overflow in gain_dequantization

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5153255445757952 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDILBCfuzzer Fuzz target binary: ffmpegAVCODECIDILBCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overfl...

Debian DSA-4309-1 : strongswan - security update

Google's OSS-Fuzz revealed an exploitable bug in the gmp plugin caused by the patch that fixes CVE-2018-16151 and CVE-2018-16152 DSA-4305-1. An attacker could trigger it using crafted certificates with RSA keys with very small moduli. Verifying signatures with such keys would cause an integer...

[SECURITY] [DSA 4309-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4309-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez October 01, 2018 https://www.debian.org/security/faq -...

harfbuzz/hb-shape-fuzzer: Crash in _hb_ot_shape_fallback_kern

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5734736291430400 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash...

imagemagick/encoder_pict_fuzzer: Crash in EncodeImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5729407323340800 Project: imagemagick Fuzzer: aflimagemagickencoderpictfuzzer Fuzz target binary: encoderpictfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: UNKNOWN READ...

open62541/fuzz_binary_message: NULL

Detailed report: https://oss-fuzz.com/testcase?key=5693001825779712 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f535163ab78 Crash State: NULL...

systemd/fuzz-dhcp6-client: Heap-buffer-overflow in dhcp6_option_parse_status

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5719574129934336 Project: systemd Fuzzer: aflsystemdfuzz-dhcp6-client Fuzz target binary: fuzz-dhcp6-client Job Type: aflasansystemd Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in _hb_ot_shape_fallback_kern

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5635082459545600 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type:...

openvswitch/expr_parse_target: Stack-buffer-underflow in lex_parse_hex_integer

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5699613135208448 Project: openvswitch Fuzzer: aflopenvswitchexprparsetarget Fuzz target binary: exprparsetarget Job Type: aflasanopenvswitch Platform Id: linux Crash Type: Stack-buffer-underflow REA...

imagemagick/encoder_png_fuzzer: Use-of-uninitialized-value in png_do_pack

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5739060115537920 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpngfuzzer Fuzz target binary: encoderpngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

jsc: Heap-buffer-overflow in JSC::WriteBarrierBase<JSC::Unknown, WTF::DumbValueTraits<JSC::Unknown> >::get

Detailed report: https://oss-fuzz.com/testcase?key=5648470396895232 Project: jsc Fuzzer: jsfuzzer Job Type: asanjsc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62d000060000 Crash State: JSC::WriteBarrierBase ::get JSC::arrayProtoFuncIndexOf jsc Sanitizer: address...

ffmpeg/ffmpeg_AV_CODEC_ID_ILBC_fuzzer: Stack-buffer-underflow in vector_multiplication

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5638941487661056 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDILBCfuzzer Fuzz target binary: ffmpegAVCODECIDILBCfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Stack-buffer-underflow WRITE 2...

keystone/fuzz_asm_sparc64be: Bad-free in llvm_ks::MCEncodedFragmentWithFixups<32u, 4u>::~MCEncodedFragmentWithFixups

Project: https://github.com/keystone-engine/keystone.git Detailed report: https://oss-fuzz.com/testcase?key=5745963403051008 Project: keystone Fuzzer: aflkeystonefuzzasmsparc64be Fuzz target binary: fuzzasmsparc64be Job Type: aflasankeystone Platform Id: linux Crash Type: Bad-free Crash Address:...

unicorn/fuzz_emu_arm64_arm: NULL

Detailed report: https://oss-fuzz.com/testcase?key=5702725296193536 Project: unicorn Fuzzer: libFuzzerunicornfuzzemuarm64arm Fuzz target binary: fuzzemuarm64arm Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00003a800481 Crash State: NULL Sanitizer:...

gdal/ogr_filesystem_fuzzer: Heap-buffer-overflow in curl_url_get

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5658849185366016 Project: gdal Fuzzer: libFuzzergdalogrfilesystemfuzzer Fuzz target binary: ogrfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Cras...

skia/api_raster_n32_canvas: Crash in SkScan::DAAFillPath

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5713029673517056 Project: skia Fuzzer: aflskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: aflasanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x01018100810...

botan/mode_padding: Heap-buffer-overflow in ref_oneandzero_unpad

Project: https://github.com/randombit/botan.git Detailed report: https://oss-fuzz.com/testcase?key=5645045441495040 Project: botan Fuzzer: aflbotanmodepadding Fuzz target binary: modepadding Job Type: aflasanbotan Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...