skia/api_draw_functions: Use-of-uninitialized-value in sk_store_bgra

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5230900821360640 Project: skia Fuzzer: libFuzzerskiaapidrawfunctions Fuzz target binary: apidrawfunctions Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

DSA-4120-2 linux - regression update

Bulletin has no description...

gdal/avcbin_fuzzer: Heap-double-free in AVCBinReadClose

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6332466517245952 Project: gdal Fuzzer: aflgdalavcbinfuzzer Fuzz target binary: avcbinfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x606000003320 Crash State...

libreoffice/fodpfuzzer: Index-out-of-bounds in SdXMLNumberFormatImportContext::EndElement

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5447658375217152 Project: libreoffice Fuzzer: libFuzzerlibreofficefodpfuzzer Fuzz target binary: fodpfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type:...

gdal/avce00_fuzzer: Crash in AVCE00ParseNextTx6Line

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5691466539073536 Project: gdal Fuzzer: libFuzzergdalavce00fuzzer Fuzz target binary: avce00fuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fe5d67a49a0...

botan/invert: Use-of-uninitialized-value in Botan::word_add

Project: https://github.com/randombit/botan.git Detailed report: https://oss-fuzz.com/testcase?key=5113093358092288 Project: botan Fuzzer: libFuzzerbotaninvert Fuzz target binary: invert Job Type: libfuzzermsanbotan Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

imagemagick/encoder_label_fuzzer: Use-of-uninitialized-value in StringInfoToHexString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5710818319532032 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

skia/api_draw_functions: Use-of-uninitialized-value in sk_store_bgra

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6242296044453888 Project: skia Fuzzer: libFuzzerskiaapidrawfunctions Fuzz target binary: apidrawfunctions Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

graphicsmagick/coder_GIF_fuzzer: Use-of-uninitialized-value in MagickArraySize

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5422603280842752 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderGIFfuzzer Fuzz target binary: coderGIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

skia/api_draw_functions: Use-of-uninitialized-value in sk_store_bgra

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=4891803707768832 Project: skia Fuzzer: libFuzzerskiaapidrawfunctions Fuzz target binary: apidrawfunctions Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

graphicsmagick/enhance_fuzzer: Use-of-uninitialized-value in ImportIndexQuantumType

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4889263368830976 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickenhancefuzzer Fuzz target binary: enhancefuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_SGI_fuzzer: Use-of-uninitialized-value in SyncImageCallBack

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6189198101970944 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderSGIfuzzer Fuzz target binary: coderSGIfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

llvm/llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::djbHash

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=4836136636645376 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

imagemagick/encoder_mpc_fuzzer: Heap-buffer-overflow in ReadMPCImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5434829609893888 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermpcfuzzer Fuzz target binary: encodermpcfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

botan/pkcs8: Heap-buffer-overflow in Botan::bigint_monty_redc

Project: https://github.com/randombit/botan.git Detailed report: https://oss-fuzz.com/testcase?key=5182248321024000 Project: botan Fuzzer: libFuzzerbotanpkcs8 Fuzz target binary: pkcs8 Job Type: libfuzzerasanbotan Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

New Relic: Bypass of my three other reports #267636 + #255894 + #271861 - (IDOR) Ability to see full name associated with other New Relic accounts

@jonbottarini discovered a regression in the way users are shown within the Alerts notification UI. This allowed him to reveal the first and last name of an existing registered user if their email was known, rather than showing an obfuscated version of that information. The application protects...

libreoffice/ww8fuzzer: Heap-buffer-overflow in WW8TabBandDesc::ProcessSprmTTableBorders

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5130400012697600 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

open62541/fuzz_binary_message: Use-of-uninitialized-value in NodeId_deleteMembers

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5704078257553408 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type:...

llvm/llvm-opt-fuzzer--x86_64-loop_vectorize: Heap-use-after-free in llvm::LoopVectorizationLegality::canVectorize

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=4877953914634240 Project: llvm Fuzzer: libFuzzerllvmllvm-opt-fuzzer--x8664-loopvectorize Fuzz target binary: llvm-opt-fuzzer--x8664-loopvectorize Job Type: libfuzzerasanllvm Platform Id: linux Cra...

libreoffice/tiffuzzer: Heap-buffer-overflow in TIFFReader::ReadTIFF

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5076632927731712 Project: libreoffice Fuzzer: libFuzzerlibreofficetiffuzzer Fuzz target binary: tiffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...