GNU binutils - 'print_insn_score16' Buffer Overflow

Source: https://sourceware.org/bugzilla/showbug.cgi?id=21576 I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer. Please find attached the minimized file causing the issue "Input" and the ASAN report log "Output". Below is the reduced stacktrace with links to the correspondin...

gdal: Global-buffer-overflow in TranslateProfileLine

Detailed report: https://oss-fuzz.com/testcase?key=6260779336597504 Project: gdal Fuzzer: libFuzzergdalogrfilesystemfuzzer Fuzz target binary: ogrfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x0000045bd5e8 Crash State:...

gdal: Global-buffer-overflow in NTFFileReader::ProcessAttValue

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4925714656657408 Project: gdal Fuzzer: libFuzzergdalogrfilesystemfuzzer Fuzz target binary: ogrfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Global-buffer-overflow WRITE Cra...

dlplibs: Global-buffer-overflow in boost::spirit::traits::pow10_helper<double, void>::call

Detailed report: https://oss-fuzz.com/testcase?key=5309012033667072 Project: dlplibs Fuzzer: afldlplibsvsdxfuzzer Fuzz target binary: vsdxfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x0000009b69c8 Crash State:...

pcre2: Global-buffer-overflow in compare_opcodes

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://oss-fuzz.com/testcase?key=5045989041766400 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

ffmpeg: Global-buffer-overflow in svq3_decode_mb

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6645980176842752 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDSVQ3fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x0000008b6a99 Crash...

ffmpeg: Global-buffer-overflow in stereo_processing

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4957953339686912 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAACFIXEDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x0000018bb420...

pcre2: Global-buffer-overflow in compare_opcodes

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://oss-fuzz.com/testcase?key=6674380245434368 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

ffmpeg: Global-buffer-overflow in avpriv_mpegaudio_decode_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4659523174268928 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDMP1fuzzer Fuzz target binary: ffmpegAVCODECIDMP1fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Cras...

grpc: Global-buffer-overflow in grpc_chttp2_hptbl_add

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5659602282610688 Project: grpc Fuzzer: libFuzzergrpchpackparserfuzzertest Fuzz target binary: hpackparserfuzzertest Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Global-buffer-overflow READ 8...

wireshark: Global-buffer-overflow in csnStreamDissector

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=4584253100654592 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

ffmpeg: Global-buffer-overflow in decode_entropy_coded_image

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6535013757616128 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDWEBPfuzzer Fuzz target binary: ffmpegAVCODECIDWEBPfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1...

wireshark: Global-buffer-overflow in csnStreamDissector

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=6037121083113472 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Global-buffer-overflow...

SUSE SLES11 Security Update : audiofile (SUSE-SU-2017:1182-1)

This update for audiofile fixes the following issues: Security issues fixed : - CVE-2017-6827: heap-based buffer overflow in MSADPCM::initializeCoefficients MSADPCM.cpp bsc1026979 - CVE-2017-6828: heap-based buffer overflow in readValue FileHandle.cpp bsc1026980 - CVE-2017-6829: global buffer...

MGASA-2017-0131 Updated libsamplerate packages fix security vulnerability

It was discovered that libsamplerate contained a global buffer overflow in calcoutputsingle CVE-2017-7697...

ffmpeg: Global-buffer-overflow in silk_lsf2lpc

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6097275002552320 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDOPUSfuzzer Fuzz target binary: ffmpegAVCODECIDOPUSfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 2...

wireshark: Global-buffer-overflow in dissect_darwin_buffer_packet_header

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5300037267488768 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type:...

libreoffice: Global-buffer-overflow in SwWW8ImplReader::ReadCaptionBox

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5802161055203328 Project: libreoffice Fuzzer: libFuzzerlibreofficeww2fuzzer Fuzz target binary: ww2fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

wireshark: Global-buffer-overflow in COM_Parse

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=4892645358829568 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkdissectorudp Fuzz target binary: fuzzsharkdissectorudp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

openSUSE Security Update : audiofile (openSUSE-2017-476)

This audiofile update fixes the following issue : Security issues fixed : - CVE-2017-6827: heap-based buffer overflow in MSADPCM::initializeCoefficients MSADPCM.cpp bsc1026979 - CVE-2017-6828: heap-based buffer overflow in readValue FileHandle.cpp bsc1026980 - CVE-2017-6829: global buffer overflo...