ndpi:fuzz_process_packet: Index-out-of-bounds in processClientServerHello

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5756942008188928 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerubsanndpi Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_workflow_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5150955381456896 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60400000013d...

ndpi:fuzz_ndpi_reader: Crash in get_ndpi_flow_info6

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5742320670736384 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzzndpireader Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x60400000fffb Crash State:...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in bool arrow::util::RleDecoder::NextCounts<int>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5650096073211904 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in get16

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5130030848147456 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60400000010d...

arrow:parquet-arrow-fuzz: Negative-size-param in parquet::PlainByteArrayDecoder::DecodeArrowDense

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5685456455073792 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

arrow:parquet-arrow-fuzz: Crash in parquet::LevelDecoder::SetData

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5138681717587968 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffff3cdb09f Cra...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_workflow_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5758164469547008 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzzndpireader Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60700002a158...

skia:api_raster_n32_canvas: Use-of-uninitialized-value in float const& std::__1::min<float, std::__1::__less<float, float> >

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5136613510479872 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_oscar

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5077550909095936 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x608000331572 Crash State...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_dprint

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5682261708242944 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: njsdprin...

skia:skottie_json: Use-of-uninitialized-value in sksg::Matrix<SkM44>::setMatrix

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5760004743495680 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skottiejson Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

php:php-fuzz-mbstring: Heap-use-after-free in optimize_nodes

Detailed Report: https://oss-fuzz.com/testcase?key=5167491347382272 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60700000c0a0 Crash State: optimizenodes optimizenodes...

ffmpeg:ffmpeg_BSF_HEVC_METADATA_fuzzer: Stack-buffer-overflow in cbs_h265_read_st_ref_pic_set

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5707770718584832 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegBSFHEVCMETADATAfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address:...

php:php-fuzz-mbstring: Heap-use-after-free in check_called_node_in_look_behind

Detailed Report: https://oss-fuzz.com/testcase?key=5734839508795392 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-mbstring Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6070081cdd40 Crash State: checkcallednodeinlookbehind...

php:php-fuzz-mbstring: Heap-use-after-free in quantifiers_memory_node_info

Detailed Report: https://oss-fuzz.com/testcase?key=5672130576646144 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf5239f80 Crash State: quantifiersmemorynodeinfo...

php:php-fuzz-mbstring: Heap-use-after-free in optimize_nodes

Detailed Report: https://oss-fuzz.com/testcase?key=5688240959127552 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf52376a0 Crash State: optimizenodes optimizenodes...

php:php-fuzz-mbstring: Use-of-uninitialized-value in node_min_byte_len

Detailed Report: https://oss-fuzz.com/testcase?key=4822305188610048 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: nodeminbytelen nodeminbytelen optimizenodes...

php:php-fuzz-mbstring: Heap-use-after-free in node_char_len1

Detailed Report: https://oss-fuzz.com/testcase?key=5652366808580096 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-mbstring Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x607001f4ea70 Crash State: nodecharlen1 nodecharlen1...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:0093-1 Rating: important References: 1161252 Cross-References: CVE-2020-6378 CVE-2020-6379 CVE-2020-6380 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux...