OSV-2021-777 Heap-use-after-free in xmlAddNextSibling

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34461 Crash type: Heap-use-after-free READ 4 Crash state: xmlAddNextSibling xmlXIncludeCopyRange xmlXIncludeCopyXPointer...

OSV-2021-776 UNKNOWN READ in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34443 Crash type: UNKNOWN READ Crash state: std::1::tree, std std::1::mapJson::Value::CZString, Json::Value, std::1::lessJson::Value::CZ Json::Value::begin...

OPENSUSE-SU-2021:0752-1 Security update for jhead

This update for jhead fixes the following issues: jhead was updated to 3.06.0.1 lot of fuzztest fixes Apply a whole bunch of patches from Debian. Spell check and fuzz test stuff from Debian, nothing useful to human users. Add option to set exif date from date from another file. Bug fixes relating...

OSV-2021-771 Heap-use-after-free in dwg_free_TABLEGEOMETRY_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34377 Crash type: Heap-use-after-free READ 8 Crash state: dwgfreeTABLEGEOMETRYprivate dwgfreeTABLEGEOMETRY dwgfreevariablenoclass...

OSV-2021-769 Stack-buffer-overflow in TranslateClause

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34332 Crash type: Stack-buffer-overflow READ 16 Crash state: TranslateClause SpeakNextClause Synthesize...

OSV-2021-767 Heap-buffer-overflow in string_decoder_getc_utf_8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34299 Crash type: Heap-buffer-overflow READ 1 Crash state: stringdecodergetcutf8 textdecodergetc GetC...

OSV-2021-766 Negative-size-param in frame_get_vlmetalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34259 Crash type: Negative-size-param Crash state: framegetvlmetalayers frametoschunk blosc2schunkfrombuffer...

OSV-2021-765 Heap-use-after-free in LookupDict2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34298 Crash type: Heap-use-after-free READ 4 Crash state: LookupDict2 LookupDictList Lookup...

OSV-2021-764 Stack-buffer-overflow in TranslateNumber_1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34285 Crash type: Stack-buffer-overflow READ 1 Crash state: TranslateNumber1 TranslateNumber TranslateWord3...

OSV-2021-757 Use-of-uninitialized-value in nn_check_initialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34156 Crash type: Use-of-uninitialized-value Crash state: nncheckinitialized nnzero ecgdsasignraw...

OSV-2021-750 Heap-double-free in flb_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34116 Crash type: Heap-double-free Crash state: flbfree flbparserjsondo flbparserdo...

OSV-2021-745 Heap-buffer-overflow in skip_to_next_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34110 Crash type: Heap-buffer-overflow READ 1 Crash state: skiptonextentry getexceptionhandler PyEvalEvalFrameDefault...

OSV-2021-739 Stack-buffer-overflow in flb_sds_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34025 Crash type: Stack-buffer-overflow READ Crash state: flbsdscat flbratranslate recordacfuzzer.c...

OSV-2021-736 Stack-use-after-return in zend_fiber_suspend_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34013 Crash type: Stack-use-after-return READ 4 Crash state: zendfibersuspendcontext zendfibersuspend zimFibersuspend...

OSV-2021-732 Heap-buffer-overflow in readstat_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33991 Crash type: Heap-buffer-overflow READ 1 Crash state: readstatconvert savprocessrow savreaduncompresseddata...

OSV-2021-731 Heap-use-after-free in cleanup_live_vars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33947 Crash type: Heap-use-after-free READ 4 Crash state: cleanuplivevars zendcleanupunfinishedexecution zendgeneratorcleanupunfinishedexecution...

OSV-2021-729 Global-buffer-overflow in libfsext_inode_read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33940 Crash type: Global-buffer-overflow READ Crash state: libfsextinodereaddata libfsextinodereadelementdata libfdatavectorgetelementvaluebyindex...

OSV-2021-728 UNKNOWN WRITE in _fini

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33944 Crash type: UNKNOWN WRITE Crash state: fini...

OSV-2021-727 UNKNOWN READ in MEM_read32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33956 Crash type: UNKNOWN READ Crash state: MEMread32 ZSTDcompressBlockgreedyextDictrow ZSTDldmblockCompress...

OSV-2021-725 UNKNOWN READ in libfsext_directory_entry_read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33935 Crash type: UNKNOWN READ Crash state: libfsextdirectoryentryreaddata libfsextdirectoryreadinlinedata libfsextdirectoryreadfileiohandle...