libreoffice/lwpfuzzer: Heap-buffer-overflow in LwpSilverBullet::IsLesserLevel

Detailed report: https://oss-fuzz.com/testcase?key=5741892999315456 Project: libreoffice Fuzzer: afllibreofficelwpfuzzer Fuzz target binary: lwpfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6110000003c4 Crash State:...

gdal/cad_fuzzer: Heap-buffer-overflow in CADBuffer::ReadBIT

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5458540048154624 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

USN-3480-3: Apport regression

USN-3480-2 fixed regressions in Apport. The update introduced a new regression in the container support. This update addresses the problem. We apologize for the inconvenience. Original advisory details: Sander Bos discovered that Apport incorrectly handled core dumps for setuid binaries. A local...

libreoffice/ww8fuzzer: Index-out-of-bounds in WW8TabDesc::StartMiserableHackForUnsupportedDirection

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4617455260401664 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Index-out-of-boun...

USN-3477-4: Firefox regression

USN-3477-1 fixed vulnerabilities in Firefox. The update introduced a crash reporting issue where background tab crash reports were sent to Mozilla without user opt-in. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were...

USN-3477-4 firefox regression

USN-3477-1 fixed vulnerabilities in Firefox. The update introduced a crash reporting issue where background tab crash reports were sent to Mozilla without user opt-in. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were...

librawspeed/TiffDecoderFuzzer-IiqDecoder: Heap-buffer-overflow in rawspeed::Spline::calculateCurve

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6121879761846272 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-IiqDecoder Fuzz target binary: TiffDecoderFuzzer-IiqDecoder Job Type: libfuzzerasanlibrawspeed Platform Id:...

libreoffice/htmlfuzzer: Crash in __dynamic_cast

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5981969591566336 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Cra...

libreoffice/htmlfuzzer: NULL

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5415327040012288 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ...

libreoffice/htmlfuzzer: Stack-use-after-return in SwIndex::Init

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6725564527280128 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

PT-2020-5165

Name of the Vulnerable Software and Affected Versions ProFTPD version 1.3.7 Description The issue is related to a use-after-free vulnerability in the alloc pool function of the ProFTPD FTP server. This vulnerability can be triggered by interrupting the data transfer channel, which can lead to...

dlplibs/pubfuzzer: Global-buffer-overflow in getPosixID

Detailed report: https://oss-fuzz.com/testcase?key=5692113388830720 Project: dlplibs Fuzzer: afldlplibspubfuzzer Fuzz target binary: pubfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x0000008d0ae0 Crash State: getPosixID...

librawspeed/FujiDecompressorFuzzer: Unknown-crash in rawspeed::FujiDecompressor::copy_line_to_xtrans

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4838595543171072 Project: librawspeed Fuzzer: afllibrawspeedFujiDecompressorFuzzer Fuzz target binary: FujiDecompressorFuzzer Job Type: aflasanlibrawspeed Platform Id: linux Crash Type:...

librawspeed/TiffDecoderFuzzer-DcrDecoder: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6168972937396224 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-DcrDecoder Fuzz target binary: TiffDecoderFuzzer-DcrDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

libreoffice/htmlfuzzer: Bad-cast to SdrObject from SwTextFormatColl in SwHTMLParser::ResizeDrawObject

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6745890124464128 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

llvm/clang-fuzzer: Heap-use-after-free in clang::APValue::swap

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6538719558369280 Project: llvm Fuzzer: libFuzzerllvmclang-fuzzer Fuzz target binary: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Addres...

gdal/mitab_tab_fuzzer: Heap-use-after-free in NTFFileReader::ProcessGeometry3D

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5353512058748928 Project: gdal Fuzzer: libFuzzergdalmitabtabfuzzer Fuzz target binary: mitabtabfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

libreoffice/htmlfuzzer: Crash in BigPtrArray::Index2Block

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5431178891886592 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ...

curl/curl_fuzzer_imap: Heap-buffer-overflow in fuzz_read_callback

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5817192030404608 Project: curl Fuzzer: aflcurlfuzzerimap Fuzz target binary: curlfuzzerimap Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x62a0000054a0...

libreoffice/htmlfuzzer: Bad-cast to SdrObjectSwHTMLParser::EndMarquee in SwHTMLParser::NextToken

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5154703525543936 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...