imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in fillIntraPredModeCandidates

Detailed Report: https://oss-fuzz.com/testcase?key=4775544902516736 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: fillIntraPredModeCandidates...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in residual_coding

Detailed Report: https://oss-fuzz.com/testcase?key=6216514533720064 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: residualcoding readtransformun...

PT-2022-37310 · Oracle · Java

Name of the Vulnerable Software and Affected Versions: java versions affected versions not specified Description: The issue is related to a security exception. Technical details about the crash include the Parser.parseConditionalExpression function and the CESU 8$Encoder.encodeLoop method in...

Adobe Media Encoder Arbitrary Code Execution Vulnerability (APSB20-10) - Windows

Adobe Media Encoder is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

imagemagick:encoder_miff_fuzzer: Heap-buffer-overflow in ImportQuantumPixels

Detailed Report: https://oss-fuzz.com/testcase?key=4684754728910848 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermifffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x607000000375 Crash State:...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::adjust_bl

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4800765897605120 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::copy_bayer

Detailed Report: https://oss-fuzz.com/testcase?key=6342110944559104 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::copybayer...

imagemagick:encoder_tiff64_fuzzer: Use-of-uninitialized-value in WritePixelCachePixels

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5081194177363968 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertiff64fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick:encoder_mng_fuzzer: Use-of-uninitialized-value in EncodePixelGamma

Detailed Report: https://oss-fuzz.com/testcase?key=4779117987364864 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: EncodePixelGamma...

GSD-2022-1005642 drm/meson: Fix refcount leak in meson_encoder_hdmi_init

drm/meson: Fix refcount leak in mesonencoderhdmiinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005534 drm/amd/display: Check correct bounds for stream encoder instances for DCN303

drm/amd/display: Check correct bounds for stream encoder instances for DCN303 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

PT-2022-33897 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.15.33 through 5.15.60 Description: A refcount leak was discovered in the meson encoder hdmi init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in Op_YCbCr_to_RGB<unsigned char>::convert_colorspace

Detailed Report: https://oss-fuzz.com/testcase?key=4836777352888320 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: OpYCbCrtoRGB::convertcolorspac...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void add_residual_fallback<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=6476675893821440 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void addresidualfallback void...

imagemagick:encoder_mng_fuzzer: Use-of-uninitialized-value in LosslessReduceDepthOK

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4606568078901248 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void transform_idct_add<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=6601431271997440 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void transformidctadd...

imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in SetPSDPixel

Detailed Report: https://oss-fuzz.com/testcase?key=4746976331169792 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: SetPSDPixel ReadPSDChannelPixel...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void apply_sao_internal<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=5336816135307264 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void applysaointernal...

imagemagick:encoder_bmp3_fuzzer: Use-of-uninitialized-value in cmsMLUgetASCII

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4855364763385856 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderbmp3fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

New Linux Cryptomining Malware

Its pretty nasty: The malware was dubbed "Shikitega" for its extensive use of the popular Shikata Ga Nai polymorphic encoder, which allows the malware to "mutate" its code to avoid detection. Shikitega alters its code each time it runs through one of several decoding loops that AT&T said each...