openthread/ip6-send-fuzzer: Crash in ot::Coap::CoapBase::RemoveResource

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5754140431482880 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux Crash Type: UNKNOWN RE...

openthread/cli-uart-received-fuzzer: Stack-buffer-overflow in ot::MeshCoP::Leader::HandlePetition

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5768605197664256 Project: openthread Fuzzer: libFuzzeropenthreadcli-uart-received-fuzzer Fuzz target binary: cli-uart-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash...

opencv/imread_fuzzer: Crash in putgreytile

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5149889707638784 Project: opencv Fuzzer: aflopencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fb914a7fb38 Crash...

opencv/imread_fuzzer: Heap-buffer-overflow in gtTileSeparate

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5098633869918208 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

opencv/imread_fuzzer: Crash in TIFFReadRGBATileExt

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5069655658463232 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x7f61333cf000...

keystone/fuzz_asm_x86_16: Use-of-uninitialized-value in llvm_ks::MCAssembler::fragmentNeedsRelaxation

Detailed report: https://oss-fuzz.com/testcase?key=6301049676103680 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmx8616 Fuzz target binary: fuzzasmx8616 Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

readstat/fuzz_format_sas7bdat: Heap-buffer-overflow in sas_read8

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5137957567070208 Project: readstat Fuzzer: libFuzzerreadstatfuzzformatsas7bdat Fuzz target binary: fuzzformatsas7bdat Job Type: libfuzzerasanreadstat Platform Id: linux Crash Type:...

WebKit JSC reifyStaticProperty Attribute Flag Issue

WebKit: JSC: reifyStaticProperty needs to set the PropertyAttribute::CustomAccessor flag for CustomGetterSetter CVE-2019-6215 https://github.com/WebKit/webkit/blob/3fff8c40c665a09de5e3ede46fc35908f69353c3/Source/JavaScriptCore/runtime/Lookup.hL392 if value.attributes &...

envoy/config_fuzz_test: Heap-use-after-free in std::__1::__bucket_list_deallocator<std::__1::allocator<std::__1::__hash_node_ba

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5666128418832384 Project: envoy Fuzzer: libFuzzerenvoyconfigfuzztest Fuzz target binary: configfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

envoy/config_fuzz_test: Heap-use-after-free in Envoy::Server::InitManagerImpl::initializeTarget

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5664687524413440 Project: envoy Fuzzer: libFuzzerenvoyconfigfuzztest Fuzz target binary: configfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

imagemagick/encoder_j2k_fuzzer: Heap-buffer-overflow in ReadJP2Image

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5107460270981120 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderj2kfuzzer Fuzz target binary: encoderj2kfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_heic_fuzzer: Heap-buffer-overflow in derive_spatial_luma_vector_prediction

Detailed report: https://oss-fuzz.com/testcase?key=5671545446334464 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x61b00000060c...

SUSE SLES11 Security Update : kvm (SUSE-SU-2019:13962-1)

This update for kvm fixes the following issues : Security issues fixed : CVE-2019-6778: Fixed a heap buffer overflow issue in the SLiRP networking implementation bsc1123156. CVE-2018-19489: Fixed a denial of service vulnerability in virtfs bsc1117275. CVE-2018-19364: Fixed a use-after-free if the...

kimageformats/kimgio_fuzzer: Crash in BLEND_SOURCE_OVER_ARGB32_WITH_CONST_ALPHA_AVX2

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5765015108321280 Project: kimageformats Fuzzer: aflkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

graphicsmagick/coder_MVG_fuzzer: Heap-buffer-overflow in DrawDashPolygon

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5741583656288256 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

grpc/api_fuzzer: Incorrect-function-pointer-type in grpc_core::AresDnsResolver::StartResolvingLocked

Detailed report: https://oss-fuzz.com/testcase?key=5642204746350592 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Crash State:...

Automattic: [FG-VD-19-022] Wordpress WooCommerce Cross-Site Scripting Vulnerability Notification

Subject: FG-VD-19-022 Wordpress WooCommerce Cross-Site Scripting Vulnerability Notification Dear Automattic, Fortinet's FortiGuard Labs have discovered a security issue in your product WooCommerce on 02/13/2019. We estimate its risk level is 2, on a scale of 1 lowest to 5 highest, in terms of its...

pcre2/pcre2_fuzzer: Heap-buffer-overflow in _pcre2_check_escape_8

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed report: https://oss-fuzz.com/testcase?key=5659000685723648 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type:...

envoy/codec_impl_fuzz_test: Heap-use-after-free in Envoy::Http::HttpStream::directionalAction

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5657409819770880 Project: envoy Fuzzer: libFuzzerenvoycodecimplfuzztest Fuzz target binary: codecimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8...

kimageformats/kimgio_fuzzer: Crash in XCFImageFormat::mergeRGBToRGB

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5081219161653248 Project: kimageformats Fuzzer: aflkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...