glib/fuzz_variant_binary: Heap-buffer-overflow in fast_validate

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed report: https://oss-fuzz.com/testcase?key=5703988117241856 Project: glib Fuzzer: aflglibfuzzvariantbinary Fuzz target binary: fuzzvariantbinary Job Type: aflasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

xmlsec/xmlsec_fuzzer: Heap-use-after-free in xmlStrndup

Project: https://github.com/lsh123/xmlsec.git Detailed report: https://oss-fuzz.com/testcase?key=5630952466808832 Project: xmlsec Fuzzer: libFuzzerxmlsecfuzzer Fuzz target binary: xmlsecfuzzer Job Type: libfuzzerasanxmlsec Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

ffmpeg/ffmpeg_AV_CODEC_ID_RASC_fuzzer: Heap-buffer-overflow in decode_move

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4856330905452544 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDRASCfuzzer Fuzz target binary: ffmpegAVCODECIDRASCfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

graphicsmagick/coder_MVG_fuzzer: Heap-buffer-overflow in TracePoint

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5699661139017728 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

skia/textblob_deserialize: Use-of-uninitialized-value in SkScalarSignAsScalar

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5671296839450624 Project: skia Fuzzer: libFuzzerskiatextblobdeserialize Fuzz target binary: textblobdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...

libxml2/libxml2_xml_read_memory_fuzzer: Heap-use-after-free in xmlSAX2AttributeNs

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=5721921484750848 Project: libxml2 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Fuzz target binary: libxml2xmlreadmemoryfuzzer Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type:...

USN-3746-1: APT vulnerability | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that APT incorrectly handled the mirror method mirror://. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to install altered...

USN-3740-2: Linux kernel (HWE) vulnerabilities | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description USN-3740-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 18.04 LTS for Ubuntu 16.04...

libreoffice/hwpfuzzer: Heap-use-after-free in HMemIODev::read4b

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5753299056197632 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

libreoffice/hwpfuzzer: Heap-use-after-free in HMemIODev::read4b

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6331102684250112 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

libreoffice/hwpfuzzer: Crash in __dynamic_cast

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5708932111138816 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Cras...

libreoffice/hwpfuzzer: Heap-use-after-free in Picture::Read

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5194249000189952 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

libaom/av1_dec_fuzzer_threaded: Heap-buffer-overflow in av1_loop_restoration_filter_frame_mt

Detailed report: https://oss-fuzz.com/testcase?key=5681902774648832 Project: libaom Fuzzer: afllibaomav1decfuzzerthreaded Fuzz target binary: av1decfuzzerthreaded Job Type: aflasanlibaom Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x60b00000041c Crash State:...

ffmpeg/ffmpeg_AV_CODEC_ID_MPEG4_fuzzer: Heap-buffer-overflow in get_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5071833448054784 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMPEG4fuzzer Fuzz target binary: ffmpegAVCODECIDMPEG4fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overfl...

radare2/ia_fuzz: Heap-buffer-overflow in r_bin_mdmp_get_mem_info

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5080237558202368 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

libaom/av1_dec_fuzzer_threaded: Crash in set_planes_to_neutral_grey

Detailed report: https://oss-fuzz.com/testcase?key=6281289628385280 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzerthreaded Fuzz target binary: av1decfuzzerthreaded Job Type: libfuzzerubsanlibaom Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7faf82e07260 Crash State:...

libaom/av1_dec_fuzzer: Heap-use-after-free in read_uncompressed_header

Detailed report: https://oss-fuzz.com/testcase?key=5631259649245184 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: libfuzzerasanlibaom Platform Id: linux Crash Type: Heap-use-after-free WRITE 2 Crash Address: 0x7f08e0263260 Crash State:...

freetype2/cff: Heap-buffer-overflow in tt_face_palette_set

Detailed report: https://oss-fuzz.com/testcase?key=5745733882347520 Project: freetype2 Fuzzer: aflfreetype2cff Fuzz target binary: cff Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x617000000a74 Crash State: ttfacepaletteset ttfaceloadcpal...

freetype2/type1-tar: Heap-buffer-overflow in next_field

Detailed report: https://oss-fuzz.com/testcase?key=5654048309510144 Project: freetype2 Fuzzer: aflfreetype2type1-tar Fuzz target binary: type1-tar Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61500000e57f Crash State: nextfield...

libreoffice/xlsfuzzer: Container-overflow in ScDPResultDimension::LateInitFrom

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5694719535874048 Project: libreoffice Fuzzer: afllibreofficexlsfuzzer Fuzz target binary: xlsfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Container-overflow READ 4 Cras...