22 matches found
OSV-2022-983 Heap-buffer-overflow in SkPathPriv::IsRectContour
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51909 Crash type: Heap-buffer-overflow READ 4 Crash state: SkPathPriv::IsRectContour SkPath::isRect SkCanvas::clipPath...
OSV-2021-1071 Heap-use-after-free in SkCanvas::MCRec::MCRec
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36644 Crash type: Heap-use-after-free READ 8 Crash state: SkCanvas::MCRec::MCRec SkCanvas::MCRec& SkTArray::emplacebackSkCanvas::MCRec& SkCanvas::internalSave...
PT-2021-27677
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash type has been identified. The crash state involves the SkCanvas::MCRec::MCRec and SkCanvas::MCRec& SkTArray::emplace...
PT-2021-27678
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the SkBaseDevice::save function, which is called by...
skia:api_image_filter: Use-of-uninitialized-value in SkBaseDevice::save
Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6626675738673152 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apiimagefilter Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
skia:api_null_canvas: Heap-use-after-free in SkCanvas::MCRec::MCRec
Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5060908098387968 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apinullcanvas Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61700000032...
Hyland Perceptive Document Filters OpenDocument to JPEG conversion SkCanvas Code Execution vulnerability(CVE-2018-3845)
Summary An exploitable double free exists in the OpenDocument to JPEG conversion functionality of the Hyland Perspective Document Filters version 11.4.0.2647. A crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution. Tested Versions Perceptive...
Hyland Perceptive Document Filters SkCanvas Object Double Release Vulnerability
Hyland Perceptive Document Filters is a toolkit that allows application developers to recognize and extract metadata, as well as convert and render almost any document type. Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux A SkCanvas object double release vulnerability exist...
Hyland Perceptive Document Filters SkCanvas Object Double Release Vulnerability
Hyland Perceptive Document Filters is a toolkit that allows application developers to recognize and extract metadata, as well as convert and render almost any document type. Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux A SkCanvas object double release vulnerability exist...
Double free
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...
Double free
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...
CVE-2018-3855
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...
CVE-2018-3845
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...
CVE-2018-3855
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...
CVE-2018-3845
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...
CVE-2018-3855
CVE-2018-3855 affects Hyland Perceptive Document Filters 11.4.0.2647. The DOC-to-HTML conversion path contains updateNumbering code that can be triggered by a crafted OpenDocument, causing a stack-based overflow/incorrect writes and remote code execution. Public writeups (Talos report TALOS-2018-...
CVE-2018-3845
CVE-2018-3845 affects Hyland Perceptive Document Filters 11.4.0.2647 (x86/x64 Windows/Linux) and related builds, in the OpenDocument to JPEG conversion path. The root cause is a double release/double free of a SkCanvas object during the conversion process, caused by a faulty lifecycle/destruction...
CVE-2018-3845: Double Free
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...
PT-2018-16249 · Hyland · Hyland Perceptive Document Filters
Name of the Vulnerable Software and Affected Versions: Hyland Perceptive Document Filters version 11.4.0.2647 Description: A crafted OpenDocument document can lead to a SkCanvas object double free, resulting in direct code execution. Recommendations: For version 11.4.0.2647, consider avoiding the...
CVE-2018-3855: Double Free
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...