readstat/fuzz_format_sas7bdat: Heap-buffer-overflow in sas_read8

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5105734398771200 Project: readstat Fuzzer: aflreadstatfuzzformatsas7bdat Fuzz target binary: fuzzformatsas7bdat Job Type: aflasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow READ ...

openh264/decoder_fuzzer: Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReorderPicturesInDisplay

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5654741512617984 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzermsanopenh264 Platform Id: linux Crash Type: Use-of-uninitialized-value...

openthread/cli-uart-received-fuzzer: Index-out-of-bounds in ot::Cli::Uart::ReceiveTask

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5730276330700800 Project: openthread Fuzzer: libFuzzeropenthreadcli-uart-received-fuzzer Fuzz target binary: cli-uart-received-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux Cras...

grpc/api_fuzzer: Incorrect-function-pointer-type in grpc_core::AresDnsResolver::StartResolvingLocked

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5635097540165632 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Crash...

grpc/api_fuzzer: Incorrect-function-pointer-type in grpc_core::AresDnsResolver::StartResolvingLocked

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5168950411788288 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Crash...

libxls/fuzz_xls: Heap-buffer-overflow in xls_isCellTooSmall

Project: https://github.com/libxls/libxls.git Detailed report: https://oss-fuzz.com/testcase?key=5085850579238912 Project: libxls Fuzzer: afllibxlsfuzzxls Fuzz target binary: fuzzxls Job Type: aflasanlibxls Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000002008...

graphicsmagick/coder_MVG_fuzzer: Use-of-uninitialized-value in GetPixelOpacity

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5686594198044672 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

imagemagick/ping_dng_fuzzer: Index-out-of-bounds in LibRaw::apply_tiff

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5635244407914496 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in SampledFunction::SampledFunction

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5742464911015936 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

CVE-2016-10739

In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...

imagemagick/encoder_ept3_fuzzer: Crash in LocaleLowercase

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5717295530246144 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderept3fuzzer Fuzz target binary: encoderept3fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_label_fuzzer: Crash in GlobExpression

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5643591676854272 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

readstat/fuzz_format_sav: Bad-free in spss_varinfo_free

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5664754289344512 Project: readstat Fuzzer: aflreadstatfuzzformatsav Fuzz target binary: fuzzformatsav Job Type: aflasanreadstat Platform Id: linux Crash Type: Bad-free Crash Address: 0x000000fcfe...

readstat/fuzz_format_dta: Stack-buffer-overflow in readstat_convert

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5730197242904576 Project: readstat Fuzzer: aflreadstatfuzzformatdta Fuzz target binary: fuzzformatdta Job Type: aflasanreadstat Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...

readstat/fuzz_format_sav: Heap-buffer-overflow in rt_read_handler

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5656109291929600 Project: readstat Fuzzer: aflreadstatfuzzformatsav Fuzz target binary: fuzzformatsav Job Type: aflasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

readstat/fuzz_format_por: Index-out-of-bounds in read_missing_value_record

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5652147318816768 Project: readstat Fuzzer: libFuzzerreadstatfuzzformatpor Fuzz target binary: fuzzformatpor Job Type: libfuzzerubsanreadstat Platform Id: linux Crash Type: Index-out-of-bounds Cra...

libaom/av1_dec_fuzzer_threaded: Use-of-uninitialized-value in av1_upsample_intra_edge_high_c

Detailed report: https://oss-fuzz.com/testcase?key=5139632361046016 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzerthreaded Fuzz target binary: av1decfuzzerthreaded Job Type: libfuzzermsanlibaom Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libaom/av1_dec_fuzzer: Use-of-uninitialized-value in inv_txfm2d_add_facade

Detailed report: https://oss-fuzz.com/testcase?key=5077054955978752 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: libfuzzermsanlibaom Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: invtxfm2daddfacade...

libaom/av1_dec_fuzzer: Heap-buffer-overflow in av1_convolve_2d_copy_sr_sse2

Detailed report: https://oss-fuzz.com/testcase?key=5099766910812160 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: libfuzzerasanlibaom Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x63300000005c Crash State:...

CVE-2018-5738 Some versions of BIND can improperly permit recursive query service to unauthorized clients

Change 4777 introduced in October 2017 introduced an unforeseen issue in releases which were issued after that date, affecting which clients are permitted to make recursive queries to a BIND nameserver. The intended and documented behavior is that if an operator has not specified a value for the...