qcms/fuzz: Heap-buffer-overflow in qcms_transform_module_clut_only

Detailed report: https://oss-fuzz.com/testcase?key=5982351954804736 Project: qcms Fuzzer: aflqcmsfuzz Fuzz target binary: fuzz Job Type: aflasanqcms Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6090000002b4 Crash State: qcmstransformmoduleclutonly...

Protected Pages - Critical - Unsupported - SA-CONTRIB-2018-028

Update: 2018-06-03 A new maintainer has stepped forward and this project now has a stable release. The security team is marking this module unsupported. There is a known security issue with the module that has not been fixed by the maintainer. If you would like to maintain this module, please rea...

poppler/pdf_fuzzer: Use-of-uninitialized-value in JBIG2Stream::readSymbolDictSeg

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5760120146362368 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

poppler/pdf_fuzzer: Heap-buffer-overflow in Splash::fillGlyph2

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5133947200602112 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

Google Chrome Security Updates (stable-channel-update-for-desktop-2018-05-01) - Linux

Google Chrome is prone to some unspecified vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

Google Chrome Security Updates (stable-channel-update-for-desktop-2018-05-01) - Windows

Google Chrome is prone to some unspecified vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6224172706430976 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

graphicsmagick/coder_BIGTIFF_fuzzer: Heap-buffer-overflow in put1bitbwtile

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4971411109052416 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderBIGTIFFfuzzer Fuzz target binary: coderBIGTIFFfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash...

skia/image_filter_deserialize_width: Use-of-uninitialized-value in SkBlurMaskFilterImpl::filterRRectToNine

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5735437942390784 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserializewidth Fuzz target binary: imagefilterdeserializewidth Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...

skia/image_filter_deserialize: Heap-buffer-overflow in sse2::srcover_bgra_NUMBER

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5154476909395968 Project: skia Fuzzer: aflskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

qpid-proton/fuzz-connection-driver: Crash in __msan_memmove.part.53

Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=6266408911503360 Project: qpid-proton Fuzzer: libFuzzerqpid-protonfuzz-connection-driver Fuzz target binary: fuzz-connection-driver Job Type: libfuzzermsanqpid-proton Platform Id: linux Crash Typ...

graphicsmagick/coder_PTIF_fuzzer: Heap-double-free in Magick::BlobRef::~BlobRef

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5669995324375040 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPTIFfuzzer Fuzz target binary: coderPTIFfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type:...

llvm/llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::object::Decompressor::consumeCompressedGnuHeader

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5767510275129344 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

gdal/gdal_fuzzer: Heap-buffer-overflow in PCIDSK::CPCIDSKGeoref::Load

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5443800485855232 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address:...

graphicsmagick/coder_DPX_fuzzer: Use-of-uninitialized-value in WriteDPXImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5665839926738944 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderDPXfuzzer Fuzz target binary: coderDPXfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

Debian: Security Advisory (DSA-4181-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome < 66.0.3359.117 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 66.0.3359.117. It is, therefore, affected by multiple vulnerabilities as referenced in the 201804stable-channel-update-for-desktop advisory. - Insufficiently sanitized distributed objects in Updater in Google Chrome on...

Stable Channel Update for Desktop

The stable channel has been updated to 66.0.3359.139 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in dissect_ber_constrained_bitstring

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=4859050050191360 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark...

icu/number_format_fuzzer: Crash in __msan_memset

Detailed report: https://oss-fuzz.com/testcase?key=6252124296970240 Project: icu Fuzzer: libFuzzericunumberformatfuzzer Fuzz target binary: numberformatfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x72f000010000 Crash State: msanmemset...