aspell:aspell_fuzzer: Crash in acommon::DecodeDirect<unsigned short>::decode

Project: https://github.com/gnuaspell/aspell.git Detailed report: https://oss-fuzz.com/testcase?key=5673813550825472 Project: aspell Fuzzing engine: libFuzzer Fuzz target: aspellfuzzer Job Type: libfuzzerubsanaspell Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000001cbb000 Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Global-buffer-overflow in dequantize

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5648247961419776 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDATRAC9fuzzer Fuzz target binary: ffmpegAVCODECIDATRAC9fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ ...

Low: GraphicsMagick

Issue Overview: GraphicsMagick is now participating in Google's oss-fuzz project due to the contributions and assistance of Alex Gaynor. Since February 4 2018, 343 issues have been opened by oss-fuzz and 331 of those issues have been resolved. The issues list is available at...

ffmpeg/ffmpeg_AV_CODEC_ID_RALF_fuzzer: Index-out-of-bounds in decode_channel

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5086088934195200 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDRALFfuzzer Fuzz target binary: ffmpegAVCODECIDRALFfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

aspell/aspell_fuzzer: Heap-buffer-overflow in acommon::String::assign_only_nonnull

Project: https://github.com/gnuaspell/aspell.git Detailed report: https://oss-fuzz.com/testcase?key=5703575778361344 Project: aspell Fuzzer: libFuzzeraspellfuzzer Fuzz target binary: aspellfuzzer Job Type: libfuzzerasanaspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Crash Addres...

ffmpeg/ffmpeg_AV_CODEC_ID_LIBVORBIS_fuzzer: Heap-buffer-overflow in oggpack_read

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5760920873074688 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBVORBISfuzzer Fuzz target binary: ffmpegAVCODECIDLIBVORBISfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

CVE-2019-11270: UAA clients.write vulnerability | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Description Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the ‘clients.write’ authority or scope can bypass the restrictions imposed on clients created via ‘clients.write’ and create clients wi...

libspng/spng_read_fuzzer: Heap-use-after-free in read_chunks_after_idat

Project: https://gitlab.com/randy408/libspng.git https://github.com/randy408/libspng.git Detailed report: https://oss-fuzz.com/testcase?key=5170676362641408 Project: libspng Fuzzer: afllibspngspngreadfuzzer Fuzz target binary: spngreadfuzzer Job Type: aflasanlibspng Platform Id: linux Crash Type:...

CVE-2019-1010206

OSS Http Request Apache Cordova Plugin 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing...

CVE-2019-1010206

OSS Http Request Apache Cordova Plugin 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing...

Design/Logic Flaw

OSS Http Request Apache Cordova Plugin 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing...

CVE-2019-1010206

CVE-2019-1010206 affects OSS Http Request (Apache Cordova Plugin) 6. The root cause is missing SSL certificate validation in the library used for HTTPS communication, enabling certificate spoofing. Documented impact is partial integrity loss and potential confidentiality risk via MITM-like behavi...

lz4/compress_fuzzer: Heap-buffer-overflow in LZ4_write32

Project: https://github.com/lz4/lz4.git Detailed report: https://oss-fuzz.com/testcase?key=5726918013353984 Project: lz4 Fuzzer: afllz4compressfuzzer Fuzz target binary: compressfuzzer Job Type: aflasanlz4 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x61c00000075b...

wireshark/fuzzshark_ip_proto-udp: Crash in tvb_ensure_bytes_exist

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5709248316571648 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerubsanwireshark Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip_proto-udp: Stack-buffer-overflow in tvb_memcpy

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5738227266224128 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type:...

libxslt/xslt: Use-of-uninitialized-value in xmlOutputBufferWriteEscape

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed report: https://oss-fuzz.com/testcase?key=5768945878958080 Project: libxslt Fuzzer: libFuzzerlibxsltxslt Fuzz target binary: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libsass/data_context_fuzzer: Bad-cast to Sass::PreValue from Sass::Unary_Expression in Sass::SharedImpl<Sass::PreValue>::SharedImpl<Sass::Expression>

Detailed report: https://oss-fuzz.com/testcase?key=5636165890211840 Project: libsass Fuzzer: libFuzzerdatacontextfuzzer Fuzz target binary: datacontextfuzzer Job Type: libfuzzerubsanlibsass Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000031e1f40 Crash State: Bad-cast to Sass::PreVal...

jsonnet/convert_jsonnet_fuzzer: Crash in Interpreter::manifestJson

Project: https://github.com/google/jsonnet.git Detailed report: https://oss-fuzz.com/testcase?key=6202714083557376 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzerubsanjsonnet Platform Id: linux Crash Type: UNKNOWN READ Cra...

jsonnet/convert_jsonnet_fuzzer: Crash in Interpreter::evaluate

Project: https://github.com/google/jsonnet.git Detailed report: https://oss-fuzz.com/testcase?key=5706027058593792 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzerubsanjsonnet Platform Id: linux Crash Type: UNKNOWN READ Cra...

imagemagick/encoder_jnx_fuzzer: Heap-use-after-free in DestroyStringInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5152362538205184 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderjnxfuzzer Fuzz target binary: encoderjnxfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...