skia-ftz:api_draw_functions: Heap-buffer-overflow in SkRgnBuilder::blitH

Detailed Report: https://oss-fuzz.com/testcase?key=5089142431940608 Project: skia-ftz Fuzzing Engine: honggfuzz Fuzz Target: apidrawfunctions Job Type: honggfuzzasanskia-ftz Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x611000000130 Crash State: SkRgnBuilder::blitH...

skia:api_draw_functions: Heap-buffer-overflow in SkRgnBuilder::blitH

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5292529202626560 Project: skia Fuzzing Engine: afl Fuzz Target: apidrawfunctions Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x6080000000f8 Crash...

skia:api_draw_functions: Crash in SuperBlitter::blitH

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6010963213287424 Project: skia Fuzzing Engine: afl Fuzz Target: apidrawfunctions Job Type: aflasanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x612fffff7dc8 Crash State:...

skia/region_set_path: Crash in SkRgnBuilder::blitH

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5687858401116160 Project: skia Fuzzer: libFuzzerskiaregionsetpath Fuzz target binary: regionsetpath Job Type: libfuzzermsanskia Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

Skia Graphics Library - Heap Overflow due to Rounding Error in SkEdge::setLine Exploit

Exploit for multiple platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1155 Skia bug: https://bugs.chromium.org/p/skia/issues/detail?id=6294 There is a heap overflow in SkARGB32ShaderBlitter::blitH caused by a rounding error in SkEdge::setLine. To...

Skia Graphics Library - Heap Overflow due to Rounding Error in SkEdge::setLine

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1155 Skia bug: https://bugs.chromium.org/p/skia/issues/detail?id=6294 There is a heap overflow in SkARGB32ShaderBlitter::blitH caused by a rounding error in SkEdge::setLine. To trigger the bug Skia needs to be compiled with...