dlplibs/cdrfuzzer: Heap-buffer-overflow in libcdr::CDRStylesCollector::collectBmp

Detailed report: https://oss-fuzz.com/testcase?key=6291912840445952 Project: dlplibs Fuzzer: afldlplibscdrfuzzer Fuzz target binary: cdrfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000002bf3 Crash State:...

graphicsmagick/enhance_fuzzer: Unknown signal in AcquireString

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5986900234993664 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickenhancefuzzer Fuzz target binary: enhancefuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

USN-3621-2 ruby1.9.1, ruby2.0 regression

USN-3621-1 fixed vulnerabilities in Ruby. The update caused an issue due to an incomplete patch for CVE-2018-1000074. This update reverts the problematic patch pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that Ruby incorrectly...

USN-3621-2: Ruby regression

USN-3621-1 fixed vulnerabilities in Ruby. The update caused an issue due to an incomplete patch for CVE-2018-1000074. This update reverts the problematic patch pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that Ruby incorrectly...

imagemagick/ping_icon_fuzzer: Use-of-uninitialized-value in png_get_uint_31

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4712420699275264 Project: imagemagick Fuzzer: libFuzzerimagemagickpingiconfuzzer Fuzz target binary: pingiconfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

graphicsmagick/coder_WPG_fuzzer: Unknown signal in InsertRow

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4875204321869824 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderWPGfuzzer Fuzz target binary: coderWPGfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_PDB_fuzzer: Use-of-uninitialized-value in WritePDBImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5918889293643776 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPDBfuzzer Fuzz target binary: coderPDBfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

imagemagick/encoder_dng_fuzzer: Index-out-of-bounds in LibRaw::scale_colors_loop

Detailed report: https://oss-fuzz.com/testcase?key=5119570110054400 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

[SECURITY] [DSA 4079-2] poppler regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4079-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 12, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4079-2] poppler regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4079-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 12, 2018 https://www.debian.org/security/faq -...

imagemagick/encoder_dng_fuzzer: Stack-buffer-overflow in LibRaw::kodak_radc_load_raw

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5965403386806272 Project: imagemagick Fuzzer: aflimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

DSA-4079-2 poppler - regression update

Bulletin has no description...

imagemagick/encoder_sfw_fuzzer: Use-of-uninitialized-value in GetEXIFProperty

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6546769354686464 Project: imagemagick Fuzzer: libFuzzerimagemagickencodersfwfuzzer Fuzz target binary: encodersfwfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_MPEG4_fuzzer: Global-buffer-overflow in dct_unquantize_mpeg2_intra_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6536620682510336 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDMPEG4fuzzer Fuzz target binary: ffmpegAVCODECIDMPEG4fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1...

libtiff/tiff_read_rgba_fuzzer: Use-of-uninitialized-value in putgreytile

Detailed report: https://oss-fuzz.com/testcase?key=5203168024592384 Project: libtiff Fuzzer: libFuzzerlibtifftiffreadrgbafuzzer Fuzz target binary: tiffreadrgbafuzzer Job Type: libfuzzermsanlibtiff Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: putgreytile...

llvm/llvm-opt-fuzzer--x86_64-loop_vectorize: Heap-use-after-free in llvm::LoopVectorizationCostModel::setCostBasedWideningDecision

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5746655065276416 Project: llvm Fuzzer: libFuzzerllvmllvm-opt-fuzzer--x8664-loopvectorize Fuzz target binary: llvm-opt-fuzzer--x8664-loopvectorize Job Type: libfuzzerasanllvm Platform Id: linux Cra...

imagemagick/encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::median4

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5036088360960000 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

libtiff/tiff_read_rgba_fuzzer: Use-of-uninitialized-value in inflate

Detailed report: https://oss-fuzz.com/testcase?key=5273368258412544 Project: libtiff Fuzzer: libFuzzerlibtifftiffreadrgbafuzzer Fuzz target binary: tiffreadrgbafuzzer Job Type: libfuzzermsanlibtiff Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: inflate...

libreoffice/ww8fuzzer: Bad-cast to SwIndexReg from invalid vptr in SwIndex::Remove

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5733692317106176 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

librawspeed/Cr2DecompressorFuzzer: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5982097991794688 Project: librawspeed Fuzzer: libFuzzerlibrawspeedCr2DecompressorFuzzer Fuzz target binary: Cr2DecompressorFuzzer Job Type: libfuzzermsanlibrawspeed Platform Id: linux Crash...