imagemagick:encoder_label_fuzzer: Heap-buffer-overflow in FxEvaluateSubexpression

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5746193716215808 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderlabelfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRI...

flac:fuzzer_encoder: Crash in FLAC__bitwriter_free

Detailed Report: https://oss-fuzz.com/testcase?key=5718435866869760 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerencoder Job Type: libfuzzerasani386flac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7a6fb7f0 Crash State: FLACbitwriterfree FLACstreamencoderfinish...

DLA-1931-2 libgcrypt20 - regression update

Bulletin has no description...

ffmpeg:ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer: Heap-buffer-overflow in decode_ham_plane32

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5675331403120640 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDIFFILBMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address...

ffmpeg:ffmpeg_AV_CODEC_ID_RAWVIDEO_fuzzer: Heap-buffer-overflow in raw_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5074834119983104 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDRAWVIDEOfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Addres...

ffmpeg:ffmpeg_BSF_TRACE_HEADERS_fuzzer: Heap-buffer-overflow in cbs_jpeg_split_fragment

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5673285471961088 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFTRACEHEADERSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

imagemagick:encoder_gif_fuzzer: Use-of-uninitialized-value in cmsMLUgetASCII

Detailed Report: https://oss-fuzz.com/testcase?key=5757752983158784 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodergiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cmsMLUgetASCII...

leptonica:pix_rotate_shear_fuzzer: Heap-use-after-free in pixReadMemBmp

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5690783302942720 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: pixrotateshearfuzzer Job Type: libfuzzerasanleptonica Platform Id: linux Crash Type: Heap-use-after-free READ Crash...

php:php-fuzz-mbstring: Use-of-uninitialized-value in distance_multiply

Detailed Report: https://oss-fuzz.com/testcase?key=5711688620048384 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: distancemultiply mmlrangemultiply nodecharlen1...

envoy:symbol_table_fuzz_test: Stack-buffer-overflow in Envoy::Stats::Fuzz::EnvoyTestOneInput

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5645970620809216 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: symboltablefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

llvm:clang-objc-fuzzer: Segv on unknown address in LValue::addUnsizedArray

Detailed Report: https://oss-fuzz.com/testcase?key=5720597908946944 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: LValue::addUnsizedArray...

binutils:fuzz_disassemble: Index-out-of-bounds in get_number_of_operands

Detailed Report: https://oss-fuzz.com/testcase?key=5713122702917632 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzerubsanbinutils Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: getnumberofoperands printinsncrx...

php:php-fuzz-mbstring: Use-of-uninitialized-value in tune_look_behind

Detailed Report: https://oss-fuzz.com/testcase?key=5689949945069568 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: tunelookbehind tuneanchor tunetree Sanitizer:...

llvm:clang-fuzzer: Segv on unknown address in clang::LookupResult::sanity

Detailed Report: https://oss-fuzz.com/testcase?key=4872329519955968 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::LookupResult::sanity...

[SECURITY] [DLA 2038-2] x2goclient regression update

Package : x2goclient Version : 4.0.3.1-4+deb8u1 Debian Bug : 947129 A change introduced in libssh 0.6.3-4+deb8u4 which got released as DLA 2038-1 has broken x2goclients way of scping session setup files from client to server, resulting in an error message shown in a GUI error dialog box during...

llvm:clang-fuzzer: Segv on unknown address in llvm::llvm_unreachable_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5165184549388288 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: llvm::llvmunreachableinternal clang::operator...

binutils:fuzz_bfd: Heap-buffer-overflow in add_symbol

Detailed Report: https://oss-fuzz.com/testcase?key=5201034154868736 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzbfd Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60c0000bb380 Crash State: addsymbol bfdvmsslurpegsd...

DLA-2038-2 x2goclient - regression update

Bulletin has no description...

binutils:fuzz_bfd: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5692369169285120 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzbfd Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60400002a532 Crash State: bfdgetl16 bfdvmsslurpetir vmsslurpdebug...

njs:njs_process_script_fuzzer: Memcpy-param-overlap in njs_chb_join_to

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5683698955714560 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x625000075b00,0x625000075c...