libreoffice/pptfuzzer: Heap-use-after-free in SdrObject::RemoveListener

Detailed report: https://oss-fuzz.com/testcase?key=5653960519057408 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61500015b3d8 Crash State:...

libreoffice/tiffuzzer: Heap-buffer-overflow in TIFFReader::ReadTIFF

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4857944500862976 Project: libreoffice Fuzzer: libFuzzerlibreofficetiffuzzer Fuzz target binary: tiffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in dissect_udvm_reference_operand_memory

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=6195652263411712 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in print_address_prefix_buf

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5676598553477120 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

openSUSE Security Update : openssl-steam (openSUSE-2018-168)

This update for openssl-steam fixes the following issues : - Merged changes from upstream openssl Factory rev 137 into this fork for Steam. Updated to openssl 1.0.2k : - CVE-2016-7055: Montgomery multiplication may produce incorrect results boo1009528 - CVE-2016-7056: ECSDA P-256 timing attack ke...

yara/dex_fuzzer: Heap-buffer-overflow in read_uleb128

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5150212461953024 Project: yara Fuzzer: aflyaradexfuzzer Fuzz target binary: dexfuzzer Job Type: aflasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x612000000900...

imagemagick/enhance_fuzzer: Use-of-uninitialized-value in EnhanceImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5778181106696192 Project: imagemagick Fuzzer: libFuzzerimagemagickenhancefuzzer Fuzz target binary: enhancefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_pcx_fuzzer: Use-of-uninitialized-value in IsPixelMonochrome

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5648049637425152 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpcxfuzzer Fuzz target binary: encoderpcxfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

Moderate: Red Hat Security Advisory: openstack-aodh security update

An update for openstack-aodh is now available for Red Hat OpenStack Platform 11.0 Ocata. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

libreoffice/rasfuzzer: Heap-buffer-overflow in Color::GetBlue

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4819351925424128 Project: libreoffice Fuzzer: libFuzzerlibreofficerasfuzzer Fuzz target binary: rasfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

skia/image_decode: Use-of-uninitialized-value in sse2::blit_row_s32a_opaque

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5290020882612224 Project: skia Fuzzer: libFuzzerskiaimagedecode Fuzz target binary: imagedecode Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

CVE-2017-13245

A elevation of privilege vulnerability in the Upstream kernel audio driver. Product: Android. Versions: Android kernel. ID: A-64315347...

CVE-2017-13244

A elevation of privilege vulnerability in the Upstream kernel easel. Product: Android. Versions: Android kernel. ID: A-62678986...

Privilege escalation

A elevation of privilege vulnerability in the Upstream kernel audio driver. Product: Android. Versions: Android kernel. ID: A-64315347...

CVE-2017-13245

CVE-2017-13245 is an Elevation of Privilege vulnerability in the Android Upstream kernel audio driver (kernel component). The Android Pixel/Nexus bulletin and CVE records identify the issue as a local EoP in the Audio driver within the Android kernel, with patched AOSP versions referenced (patch ...

CVE-2017-13244

A elevation of privilege vulnerability in the Upstream kernel easel. Product: Android. Versions: Android kernel. ID: A-62678986...

CVE-2017-13246

CVE-2017-13246 affects the Android kernel network driver (Upstream kernel). It is described as an information‑disclosure vulnerability in the Network driver, with the Pixel/Nexus Android bulletin listing it under Kernel components as a Moderate‑severity issue. No concrete patch version or remedia...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in pdf_parse_file_spec

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5996991491342336 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

imagemagick/encoder_label_fuzzer: Use-of-uninitialized-value in GetMagickPropertyLetter

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4927890513723392 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_pcx_fuzzer: Use-of-uninitialized-value in ScaleQuantumToChar

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6112901350817792 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpcxfuzzer Fuzz target binary: encoderpcxfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...