OSV-2021-675 Segv on unknown address in lxc_conf_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33551 Crash type: Segv on unknown address Crash state: lxcconffree lxccontainerfree lxccontainerput...

Security update for irssi (moderate)

openSUSE Security Update: Security update for irssi Announcement ID: openSUSE-SU-2021:0595-1 Rating: moderate References: 1184848 Affected Products: openSUSE Backports SLE-15-SP2 An update that contains security fixes can now be installed. Description: This update for irssi fixes the following...

OSV-2021-670 Heap-buffer-overflow in av1_free_cdef_buffers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33480 Crash type: Heap-buffer-overflow READ 8 Crash state: av1freecdefbuffers decoderdestroy aomcodecdestroy...

OSV-2021-668 Stack-use-after-return in pdf14_initialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33529 Crash type: Stack-use-after-return WRITE 8 Crash state: pdf14initialize pdf14procsinitialize pdf14RGBinitialize...

OSV-2021-667 Heap-buffer-overflow in _estrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33445 Crash type: Heap-buffer-overflow READ 12 Crash state: estrdup exifprocessusercomment exifprocessIFDTAGimpl...

OSV-2021-665 UNKNOWN READ in QOutlineMapper::convertPath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33438 Crash type: UNKNOWN READ Crash state: QOutlineMapper::convertPath QRasterPaintEngine::fill QPaintEngineEx::stroke...

OSV-2021-664 Heap-use-after-free in module_check_cast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33444 Crash type: Heap-use-after-free READ 4 Crash state: modulecheckcast serverconnectunref serverunref...

php:php-fuzz-exif: Heap-buffer-overflow in _estrdup

Detailed Report: https://oss-fuzz.com/testcase?key=4924702888951808 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6150168ff227 Crash State: estrdup exifprocessusercomment...

php:php-fuzz-exif: Heap-buffer-overflow in _estrdup

Detailed Report: https://oss-fuzz.com/testcase?key=6524067709583360 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 12 Crash Address: 0x60700029b4b8 Crash State: estrdup exifprocessusercomment...

irssi:server-fuzz: Heap-use-after-free in module_check_cast

Project: https://github.com/irssi/irssi.git Detailed Report: https://oss-fuzz.com/testcase?key=4927798956392448 Project: irssi Fuzzing Engine: libFuzzer Fuzz Target: server-fuzz Job Type: libfuzzerasanirssi Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x612000000dc0...

OSV-2021-660 UNKNOWN READ in op_BranchIfPrologue_s

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33397 Crash type: UNKNOWN READ Crash state: opBranchIfPrologues m3CallVL m3CallV...

gdk-pixbuf:pixbuf_file_fuzzer: Heap-buffer-overflow in null_convert

Project: https://gitlab.gnome.org/GNOME/gdk-pixbuf.git Detailed Report: https://oss-fuzz.com/testcase?key=6731565766934528 Project: gdk-pixbuf Fuzzing Engine: libFuzzer Fuzz Target: pixbuffilefuzzer Job Type: libfuzzerasangdk-pixbuf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Cras...

sqlite3:ossfuzz: Use-of-uninitialized-value in sqlite3WalkSelectExpr

Detailed Report: https://oss-fuzz.com/testcase?key=5358061196804096 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sqlite3WalkSelectExpr sqlite3WalkSelect...

ffmpeg:ffmpeg_AV_CODEC_ID_AMV_fuzzer: Heap-buffer-overflow in ff_jpegls_decode_picture

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5227111938916352 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAMVfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

libecc:cryptofuzz-libecc: Use-of-uninitialized-value in std::__1::__vector_base<unsigned char, std::__1::allocator<unsigned char> >::__d

Project: https://github.com/ANSSI-FR/libecc.git Detailed Report: https://oss-fuzz.com/testcase?key=4965151682985984 Project: libecc Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-libecc Job Type: libfuzzermsanlibecc Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libredwg:llvmfuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6727311937372160 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerubsanlibredwg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002b68c08 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

OSV-2021-654 Heap-buffer-overflow in decode_mcu_fast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33340 Crash type: Heap-buffer-overflow READ 1 Crash state: decodemcufast decodemcu consumedata...

OSV-2021-652 Heap-use-after-free in ZSTD_freeDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33324 Crash type: Heap-use-after-free READ 4 Crash state: ZSTDfreeDDict blosc2freectx blosc2schunkfree...

OSV-2021-646 Heap-use-after-free in std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33315 Crash type: Heap-use-after-free READ 8 Crash state: std::1::treeiteratorstd::1::valuetypestd::1::basicstringchar, st draco::Metadata::AddSubMetadata draco::MetadataDecoder::DecodeMetadata...

OSV-2021-644 UNKNOWN READ in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33292 Crash type: UNKNOWN READ Crash state: bloscd dojob bloscrundecompressionwithcontext...