librawspeed: Use-after-poison in rawspeed::HasselbladDecompressor::decodeScan

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5764147948027904 Project: librawspeed Fuzzer: afllibrawspeedTiffDecoderFuzzer-ThreefrDecoder Fuzz target binary: TiffDecoderFuzzer-ThreefrDecoder Job Type: aflasanlibrawspeed Platform Id: lin...

libreoffice: Global-buffer-overflow in ImplUnicodeToDBCS

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6290236680175616 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

Vulnerability in OpenSSL - Malformed X.509 IPAddressFamily could cause OOB read

While parsing an IPAdressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. Found by Google OSS-Fuzz...

librawspeed: Crash in void rawspeed::Cr2Decompressor::decodeN_X_Y<2, 1, 1>

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6718927029665792 Project: librawspeed Fuzzer: afllibrawspeedFiffParserFuzzer-GetDecoder-Decode Fuzz target binary: FiffParserFuzzer-GetDecoder-Decode Job Type: aflasanlibrawspeed Platform Id:...

librawspeed: Index-out-of-bounds in std::__1::array<rawspeed::HuffmanTable*, 2> rawspeed::AbstractLJpegDecompressor:

Detailed report: https://oss-fuzz.com/testcase?key=6130578116050944 Project: librawspeed Fuzzer: libFuzzerlibrawspeedFiffParserFuzzer-GetDecoder-Decode Fuzz target binary: FiffParserFuzzer-GetDecoder-Decode Job Type: libfuzzerubsanlibrawspeeduntrusted Platform Id: linux Crash Type:...

libreoffice: Container-overflow in HMemIODev::read1b

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4795817573482496 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow...

libreoffice: Heap-buffer-overflow in SVBT16ToShort

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5119491576954880 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

librawspeed: Use-of-uninitialized-value in rawspeed::RawImageDataU16::setWithLookUp

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5025223185268736 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-NefDecoder Fuzz target binary: TiffDecoderFuzzer-NefDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

librawspeed: Use-after-poison in rawspeed::SrwDecoder::decodeCompressed3

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6513147630321664 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-SrwDecoder Fuzz target binary: TiffDecoderFuzzer-SrwDecoder Job Type: libfuzzerasanlibrawspeed Platform Id:...

openjpeg: Heap-buffer-overflow in opj_dwt_decode_partial_tile

Project: https://github.com/uclouvain/openjpeg.git https://github.com/uclouvain/openjpeg-data.git Detailed report: https://oss-fuzz.com/testcase?key=4591818438082560 Project: openjpeg Fuzzer: libFuzzeropenjpegopjdecompressfuzzer Fuzz target binary: opjdecompressfuzzer Job Type:...

After School Help AliCloud OSS credentials have information leakage vulnerabilities

After School Help App is an application for elementary and middle school students to communicate after school. An information leakage vulnerability exists in the After School Help AliCloud OSS credentials. The vulnerability is caused by credential leakage due to accessKeyId and accessKeySecret,...

gdal: Heap-use-after-free in OGRVRTLayer::FullInitialize

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5556267034607616 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

libreoffice: Heap-buffer-overflow in SVBT16ToShort

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5646881046659072 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerasanlibreofficeuntrusted Platform Id: linux Crash Type:...

gdal: Heap-buffer-overflow in OGRWAsPLayer::GetNextRawFeature

Detailed report: https://oss-fuzz.com/testcase?key=6010062407467008 Project: gdal Fuzzer: libFuzzergdalwaspfuzzer Fuzz target binary: waspfuzzer Job Type: libfuzzerasangdaluntrusted Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x602000000538 Crash State:...

gnutls: Use-of-uninitialized-value in _nettle_ecc_mod_inv

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=4894226313641984 Project: gnutls Fuzzer: libFuzzergnutlspskclientfuzzer Fuzz target binary: gnutlspskclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-valu...

gnutls: Use-of-uninitialized-value in __gmpz_cmp_ui

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=5924565177860096 Project: gnutls Fuzzer: libFuzzergnutlssrpclientfuzzer Fuzz target binary: gnutlssrpclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-valu...

gnutls: Use-of-uninitialized-value in __gmpz_limbs_finish

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=4887173172035584 Project: gnutls Fuzzer: libFuzzergnutlspskclientfuzzer Fuzz target binary: gnutlspskclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-valu...

gdal: Heap-buffer-overflow in ReadGrib1Sect2

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6023193733103616 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

fuchsia_fidl: Crash in fidl::Lexer::Peek

Detailed report: https://oss-fuzz.com/testcase?key=6200421431377920 Project: fuchsiafidl Fuzzer: libFuzzerfuchsiafidlfuzzer Fuzz target binary: fuchsiafidlfuzzer Job Type: libfuzzerasanfuchsiafidluntrusted Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x614000010000 Crash State:...

USN-3387-1: Git vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description Brian Neel, Joern Schneeweisz, and Jeff King discovered that Git did not properly handle host names in ‘ssh://’ URLs. A remote attacker could use this to construct a git repository that when accessed coul...