jsc: Heap-buffer-overflow in JSC::WriteBarrierBase<JSC::Unknown, WTF::DumbValueTraits<JSC::Unknown> >::get

Detailed report: https://oss-fuzz.com/testcase?key=5648470396895232 Project: jsc Fuzzer: jsfuzzer Job Type: asanjsc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62d000060000 Crash State: JSC::WriteBarrierBase ::get JSC::arrayProtoFuncIndexOf jsc Sanitizer: address...

ffmpeg/ffmpeg_AV_CODEC_ID_ILBC_fuzzer: Stack-buffer-overflow in create_augmented_vector

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5699970020147200 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDILBCfuzzer Fuzz target binary: ffmpegAVCODECIDILBCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflo...

ffmpeg/ffmpeg_AV_CODEC_ID_ILBC_fuzzer: Stack-buffer-underflow in vector_multiplication

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5638941487661056 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDILBCfuzzer Fuzz target binary: ffmpegAVCODECIDILBCfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Stack-buffer-underflow WRITE 2...

keystone/fuzz_asm_sparc64be: Bad-free in llvm_ks::MCEncodedFragmentWithFixups<32u, 4u>::~MCEncodedFragmentWithFixups

Project: https://github.com/keystone-engine/keystone.git Detailed report: https://oss-fuzz.com/testcase?key=5745963403051008 Project: keystone Fuzzer: aflkeystonefuzzasmsparc64be Fuzz target binary: fuzzasmsparc64be Job Type: aflasankeystone Platform Id: linux Crash Type: Bad-free Crash Address:...

gdal/ogr_filesystem_fuzzer: Heap-buffer-overflow in curl_url_get

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5658849185366016 Project: gdal Fuzzer: libFuzzergdalogrfilesystemfuzzer Fuzz target binary: ogrfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Cras...

botan/mode_padding: Heap-buffer-overflow in ref_oneandzero_unpad

Project: https://github.com/randombit/botan.git Detailed report: https://oss-fuzz.com/testcase?key=5645045441495040 Project: botan Fuzzer: aflbotanmodepadding Fuzz target binary: modepadding Job Type: aflasanbotan Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

skia/image_filter_deserialize: Crash in SkTInternalLList<TriangulationVertex>::addToTail

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5674426696204288 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzerubsanskia Platform Id: linux Crash Type: UNKNOWN READ Crash...

skia/api_raster_n32_canvas: Heap-buffer-overflow in void sse2::memsetT<unsigned int>

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5761078466707456 Project: skia Fuzzer: aflskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Addres...

open62541/fuzz_binary_message: Use-of-uninitialized-value in UA_WorkQueue_cleanup

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5766606660042752 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type:...

[slackware-security] Slackware 14.2 kernel

New kernel packages are available for Slackware 14.2 to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/linux-4.4.157/: Upgraded. This kernel removes the unnecessary vmacacheflushall code which could have led to a use-after-free situation and...

unicorn/fuzz_emu_arm64_arm: Use-of-uninitialized-value in tcg_liveness_analysis_aarch64

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5642497104019456 Project: unicorn Fuzzer: libFuzzerunicornfuzzemuarm64arm Fuzz target binary: fuzzemuarm64arm Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type:...

libaom/av1_dec_fuzzer: Index-out-of-bounds in filter_selectively_horiz

Detailed report: https://oss-fuzz.com/testcase?key=5173013356478464 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: libfuzzerubsanlibaom Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: filterselectivelyhoriz...

openvswitch/flow_extract_target: Use-of-uninitialized-value in miniflow_map_init

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5706708475707392 Project: openvswitch Fuzzer: libFuzzeropenvswitchflowextracttarget Fuzz target binary: flowextracttarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type:...

openvswitch/flow_extract_target: Use-of-uninitialized-value in is_nd

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5697050302218240 Project: openvswitch Fuzzer: libFuzzeropenvswitchflowextracttarget Fuzz target binary: flowextracttarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type:...

imagemagick/encoder_png_fuzzer: Use-of-uninitialized-value in longest_match

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5718633485959168 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpngfuzzer Fuzz target binary: encoderpngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

radare2/ia_fuzz: Heap-buffer-overflow in r_str_utf16_to_utf8

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5766541564444672 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libssh/libssh_server_fuzzer: Stack-buffer-overflow in ssh_buffer_unpack_va

Project: https://git.libssh.org/projects/libssh.git Detailed report: https://oss-fuzz.com/testcase?key=5766380100517888 Project: libssh Fuzzer: libFuzzerlibsshserverfuzzer Fuzz target binary: libsshserverfuzzer Job Type: libfuzzerasanlibssh Platform Id: linux Crash Type: Stack-buffer-overflow REA...

keystone/fuzz_asm_arm_thumbbe: Bad-cast to const llvm_ks::MCSectionELF from llvm_ks::MCSectionMachO in llvm_ks::MCELFStreamer::ChangeSection

Detailed report: https://oss-fuzz.com/testcase?key=5757565082796032 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmarmthumbbe Fuzz target binary: fuzzasmarmthumbbe Job Type: libfuzzerubsankeystone Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000050dee30 Crash State: Bad-cast to...

CVE-2018-17183

Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by remote attackers able to supply crafted PostScript to potentially overwrite or replace error handlers to inject code...

unicorn/fuzz_emu_m68k_be: Crash in [stack]

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5742284360908800 Project: unicorn Fuzzer: libFuzzerunicornfuzzemum68kbe Fuzz target binary: fuzzemum68kbe Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash...