unicorn:fuzz_emu_arm_arm: Crash in cpu_arm_exec_arm

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5662497394917376 Project: unicorn Fuzzing Engine: afl Fuzz Target: fuzzemuarmarm Job Type: aflasanunicorn Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000007e1c00 Crash Stat...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in fuzz_reader_connect

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5708381956603904 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

ndpi:fuzz_ndpi_reader: Heap-use-after-free in ndpi_workflow_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5074519341662208 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireader Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x612001eabd00 Crash State:...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in get_ndpi_flow_info

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5746418505744384 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6060001f46fb...

samba:fuzz_nmblib_parse_packet: Heap-buffer-overflow in parse_nmb_name

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5644827043823616 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzznmblibparsepacket Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

samba:fuzz_nmblib_parse_packet: Heap-buffer-overflow in parse_nmb_name

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5108333216530432 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzznmblibparsepacket Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libreoffice:ppmfuzzer: Crash in PBMReader::ImplReadBody

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5656169784016896 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ppmfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in bebytes2ulong

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5725365263925248 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

arrow:arrow-ipc-stream-fuzz: Crash in arrow::ipc::internal::FieldFromFlatbuffer

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5712457209479168 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61e100356534 Crash State:...

Stable Channel Update for Desktop

The stable channel has been updated to 79.0.3945.130 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The...

samba:fuzz_ndr_drsuapi_TYPE_OUT: Heap-buffer-overflow in lzxpress_decompress

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5724999789051904 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrdrsuapiTYPEOUT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:0053-1 Rating: important References: 1160337 Cross-References: CVE-2019-5844 CVE-2019-5845 CVE-2019-5846 CVE-2020-6377 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes four vulnerabilitie...

unicorn:fuzz_emu_arm64_arm: Crash in tcg_constant_folding_aarch64

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5728787291963392 Project: unicorn Fuzzing Engine: afl Fuzz Target: fuzzemuarm64arm Job Type: aflasanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x115561997039 Crash...

openSUSE Security Update : chromium (openSUSE-2020-6)

This update for chromium version 79.0.3945.117 fixes the following issues : - CVE-2020-6377: Fixed a use-after-free in audio - Various fixes from internal audits, fuzzing and other initiatives C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

OPENSUSE-SU-2020:0006-1 Security update for chromium

This update for chromium version 79.0.3945.117 fixes the following issues: - CVE-2020-6377: Fixed a use-after-free in audio - Various fixes from internal audits, fuzzing and other initiatives...

xerces-c:parse_target: Index-out-of-bounds in xercesc_3_2::XMLReader::getNextCharIfNot

Detailed Report: https://oss-fuzz.com/testcase?key=5168997247221760 Project: xerces-c Fuzzing Engine: libFuzzer Fuzz Target: parsetarget Job Type: libfuzzerubsanxerces-c Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: xercesc32::XMLReader::getNextCharIfNot...

imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in RoundToUnity

Detailed Report: https://oss-fuzz.com/testcase?key=5664114030673920 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: RoundToUnity CompositeImage...

keystone:fuzz_asm_sparc64be: Heap-buffer-overflow in ELFSparcAsmBackend::applyFixup

Detailed Report: https://oss-fuzz.com/testcase?key=5081419969986560 Project: keystone Fuzzing Engine: afl Fuzz Target: fuzzasmsparc64be Job Type: aflasankeystone Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6070000000d1 Crash State: ELFSparcAsmBackend::applyFixup...

imagemagick:encoder_heic_fuzzer: Crash in slice_segment_header::operator=

Detailed Report: https://oss-fuzz.com/testcase?key=5689229497860096 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xbebebebe Crash State: slicesegmentheader::operator=...

curl: Heap Buffer Overflow (READ of size 1) in ourWriteOut

Summary: Whilst fuzzing the curl command line tool built from commit 779b415 with AFL, ASAN and libdislocator, a heap buffer overflow was triggered when a crafted curl configuration file was loaded. Steps To Reproduce: echo "LXdAAAou" | base64 -d test0070.conf ./curl -q -K test0070.conf...