llvm/llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::raw_svector_ostream::write_impl

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5397097705635840 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in _cmsReadHeader

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=4549525504000000 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

openthread/ip6-send-fuzzer: Stack-buffer-overflow in ot::NetworkData::ServiceTlv::GetServiceDataLength

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=6378629031264256 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type:...

imagemagick/encoder_xcf_fuzzer: Use-of-uninitialized-value in ClampPixel

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5765275287814144 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderxcffuzzer Fuzz target binary: encoderxcffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_psd_fuzzer: Use-of-uninitialized-value in ScaleQuantumToShort

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5764070583042048 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpsdfuzzer Fuzz target binary: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_dcm_fuzzer: Use-of-uninitialized-value in IsPixelGray

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5480057549094912 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdcmfuzzer Fuzz target binary: encoderdcmfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip_proto-udp: Heap-use-after-free in next_tvb_add_handle

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=6177897392898048 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type:...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in fz_drop_imp

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=4806586980630528 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in decode_udvm_multitype_operand

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=6309871403139072 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark...

gdal/openfilegdb_fuzzer: Heap-buffer-overflow in OGRSimpleCurve::setNumPoints

Detailed report: https://oss-fuzz.com/testcase?key=6289377832468480 Project: gdal Fuzzer: libFuzzergdalopenfilegdbfuzzer Fuzz target binary: openfilegdbfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x603000000000 Crash State:...

chakra: Heap-use-after-free in WScriptJsrt::LoadScript

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=5682962172477440 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x611000044bc0 Crash State: WScriptJsrt::LoadScri...

imagemagick/encoder_mvg_fuzzer: Heap-buffer-overflow in TracePoint

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5617352352727040 Project: imagemagick Fuzzer: aflimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in fz_drop_key_storable

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=6271378429837312 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

openthread/ip6-send-fuzzer: Stack-buffer-overflow in ot::NetworkData::ServiceTlv::IsThreadEnterprise

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=6188652393660416 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type:...

bloaty/fuzz_target: Heap-buffer-overflow in bloaty::DisassembleFindReferences

Project: https://github.com/google/bloaty.git Detailed report: https://oss-fuzz.com/testcase?key=5703202205859840 Project: bloaty Fuzzer: libFuzzerbloatyfuzztarget Fuzz target binary: fuzztarget Job Type: libfuzzerasanbloaty Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address...

imagemagick/encoder_label_fuzzer: Heap-buffer-overflow in FxOperatorPrecedence

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5727830722740224 Project: imagemagick Fuzzer: aflimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

DLA-1249-2 smarty3 - regression update

Bulletin has no description...

Django -- information leakage

Django release notes: CVE-2018-6188: Information leakage in AuthenticationForm A regression in Django 1.11.8 made AuthenticationForm run its confirmloginallowed method even if an incorrect password is entered. This can leak information about a user, depending on what messages confirmloginallowed...

mupdf/pdf_fuzzer: Crash in pdf_read_new_xref

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=4558604561547264 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7173ffffffe0 Cra...

imagemagick/encoder_psd_fuzzer: Negative-size-param in CopyMagickMemory

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6608366026620928 Project: imagemagick Fuzzer: aflimagemagickencoderpsdfuzzer Fuzz target binary: encoderpsdfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...