ngolo-fuzzing:fuzz_ng_mime_multipart: Crash in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6193425006854144 Project: ngolo-fuzzing Fuzzing Engine: libFuzzer Fuzz Target: fuzzngmimemultipart Job Type: libfuzzerasanngolo-fuzzing Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x10c0000061a0 Crash State: pthreadcreate...

Debian DSA-5221-1 : thunderbird - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5221 advisory. Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For the stable distribution...

ghostscript:gs_device_pxlcolor_fuzzer: Segv on unknown address in gs_fapi_ft_get_scaled_font

Detailed Report: https://oss-fuzz.com/testcase?key=5063796699299840 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepxlcolorfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gsfapiftgetscaledfont...

Use After Free in Function qf_buf_add_line( )

Description Hello there! How are you doing? I just used the PoC of this previous report as a valid input for fuzzing, and ended up finding what it seems to be a new case of Use After Free, with a slightly different input. The last commit in which I tested it was...

tomcat:WsPingPongFuzzer: Security exception in WsPingPongFuzzer.fuzzerTestOneInput

Project: https://github.com/apache/tomcat.git Detailed Report: https://oss-fuzz.com/testcase?key=6059743126355968 Project: tomcat Fuzzing Engine: libFuzzer Fuzz Target: WsPingPongFuzzer Job Type: libfuzzerasantomcat Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

lcms:cms_transform_all_fuzzer: Heap-use-after-free in cmsFreeNamedColorList

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=5488495044460544 Project: lcms Fuzzing Engine: afl Fuzz Target: cmstransformallfuzzer Job Type: aflasanlcms Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x608000000070 Cra...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in Ins_NPUSHB

Detailed Report: https://oss-fuzz.com/testcase?key=5394027238785024 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000090d68 Crash State: InsNPUSHB...

wpantund:wpantund-fuzz: Non-positive-vla-bound-value in any_to_data

Detailed Report: https://oss-fuzz.com/testcase?key=5182789321883648 Project: wpantund Fuzzing Engine: libFuzzer Fuzz Target: wpantund-fuzz Job Type: libfuzzerubsanwpantund Platform Id: linux Crash Type: Non-positive-vla-bound-value Crash Address: Crash State: anytodata nl::wpantund::SpinelAppendA...

dnsmasq:fuzz_rfc1035: Heap-buffer-overflow in resize_packet

Detailed Report: https://oss-fuzz.com/testcase?key=4774918610354176 Project: dnsmasq Fuzzing Engine: afl Fuzz Target: fuzzrfc1035 Job Type: aflasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7f27858f7f1f Crash State: resizepacket FuzzResizePacket fuzzrfc1035...

Oracle Linux 7 : firefox (ELSA-2022-6179)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-6179 advisory. 91.13.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs....

Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of members on the Mozilla Fuzzing Team reporting memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12. Some of these bugs showed evidence of memory corruption, and we presume...

Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of Mozilla developer Nika Layzell and the Mozilla Fuzzing Team, reporting memory safety bugs present in Firefox 103 and Firefox ESR 102.1. Some of these bugs showed evidence of memory corruption, and we...

Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of Mozilla developer Nika Layzell and the Mozilla Fuzzing Team, reporting memory safety bugs present in Firefox 103 and Firefox ESR 102.1. Some of these bugs showed evidence of memory corruption, and we...

Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of Mozilla developer Nika Layzell and the Mozilla Fuzzing Team, reporting memory safety bugs present in Firefox 103 and Firefox ESR 102.1. Some of these bugs showed evidence of memory corruption, and we...

Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of Mozilla developer Nika Layzell and the Mozilla Fuzzing Team, reporting memory safety bugs present in Firefox 103 and Firefox ESR 102.1. Some of these bugs showed evidence of memory corruption, and we...

Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of members on the Mozilla Fuzzing Team reporting memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12. Some of these bugs showed evidence of memory corruption, and we presume...

libpng:libpng_read_fuzzer: Use-of-uninitialized-value in png_do_expand

Detailed Report: https://oss-fuzz.com/testcase?key=5179162188447744 Project: libpng Fuzzing Engine: libFuzzer Fuzz Target: libpngreadfuzzer Job Type: libfuzzermsanlibpng Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pngdoexpand OSSFUZZpngdoreadtransformatio...

CVE-2022-38478

Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This...

opensc:fuzz_pkcs15init: Heap-double-free in sc_pkcs15_encode_df

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4776782238187520 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs15init Job Type: aflasanopensc Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x6070000001e0 Crash State:...

Security Vulnerabilities fixed in Firefox ESR 91.13 — Mozilla

An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar. This could have been used to fool the user into submitting data intended for the spoofed origin. A cross-origin iframe referencing an XSLT documen...