gdal/dxf_fuzzer: Container-overflow in OGRDXFLayer::TranslateMLEADER

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5582552531206144 Project: gdal Fuzzer: libFuzzergdaldxffuzzer Fuzz target binary: dxffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address:...

knot-dns/fuzz_zscanner: Index-out-of-bounds in parse

Project: https://gitlab.labs.nic.cz/knot/knot-dns Detailed report: https://oss-fuzz.com/testcase?key=4734243205808128 Project: knot-dns Fuzzer: libFuzzerknot-dnsfuzzzscanner Fuzz target binary: fuzzzscanner Job Type: libfuzzerubsanknot-dns Platform Id: linux Crash Type: Index-out-of-bounds Crash...

gdal/cad_fuzzer: Heap-buffer-overflow in DWGFileRNUMBER::GetGeometry

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5723062755393536 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

gdal/cad_fuzzer: Bad-cast to CADAttdef from CADAttrib in CADLayer::addHandle

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6413960052998144 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000008164350 Crash State:...

libarchive/libarchive_fuzzer: Heap-buffer-overflow in archive_le32dec

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=6217869126795264 Project: libarchive Fuzzer: afllibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

January 4, 2017 – Morning Cyber Coffee Headlines – “Scrabble” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 4, 2018 - Headlines Carbon Black in the News: Ransomware: The Problem...

libreoffice/ww8fuzzer: Index-out-of-bounds in WW8TabDesc::EndMiserableHackForUnsupportedDirection

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6693392806313984 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Index-out-of-boun...

gdal/cad_fuzzer: Heap-buffer-overflow in CADBuffer::ReadBIT

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5458540048154624 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

knot-dns/fuzz_zscanner: Use-of-uninitialized-value in parse

Project: https://gitlab.labs.nic.cz/knot/knot-dns Detailed report: https://oss-fuzz.com/testcase?key=6125247553077248 Project: knot-dns Fuzzer: libFuzzerknot-dnsfuzzzscanner Fuzz target binary: fuzzzscanner Job Type: libfuzzermsanknot-dns Platform Id: linux Crash Type: Use-of-uninitialized-value...

dlplibs/key6fuzzer: Use-of-uninitialized-value in libetonyek::IWAParser::queryObject

Detailed report: https://oss-fuzz.com/testcase?key=5818720568999936 Project: dlplibs Fuzzer: libFuzzerdlplibskey6fuzzer Fuzz target binary: key6fuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libreoffice/fodsfuzzer: Heap-use-after-free in cppu::_destructAny

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5250191453061120 Project: libreoffice Fuzzer: libFuzzerlibreofficefodsfuzzer Fuzz target binary: fodsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

libreoffice/ww8fuzzer: Index-out-of-bounds in WW8TabDesc::StartMiserableHackForUnsupportedDirection

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4617455260401664 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Index-out-of-boun...

libreoffice/htmlfuzzer: Crash in __dynamic_cast

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5981969591566336 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Cra...

libreoffice/htmlfuzzer: Stack-use-after-return in SwIndex::Init

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6725564527280128 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

librawspeed/FujiDecompressorFuzzer: Unknown-crash in rawspeed::FujiDecompressor::copy_line_to_xtrans

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4838595543171072 Project: librawspeed Fuzzer: afllibrawspeedFujiDecompressorFuzzer Fuzz target binary: FujiDecompressorFuzzer Job Type: aflasanlibrawspeed Platform Id: linux Crash Type:...

CVE-2017-17942

In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tifpackbits.c...

libreoffice/htmlfuzzer: Bad-cast to SdrObject from SwTextFormatColl in SwHTMLParser::ResizeDrawObject

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6745890124464128 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

CVE-2017-16995

The checkaluop function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging incorrect sign extension...

gdal/mitab_tab_fuzzer: Heap-use-after-free in NTFFileReader::ProcessGeometry3D

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5353512058748928 Project: gdal Fuzzer: libFuzzergdalmitabtabfuzzer Fuzz target binary: mitabtabfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

curl/curl_fuzzer_imap: Heap-buffer-overflow in fuzz_read_callback

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5817192030404608 Project: curl Fuzzer: aflcurlfuzzerimap Fuzz target binary: curlfuzzerimap Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x62a0000054a0...