Stable Channel Update for Desktop

The stable channel has been updated to 74.0.3729.131 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain...

net-snmp/agentx_parse_fuzzer: Heap-buffer-overflow in agentx_parse_string

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed report: https://oss-fuzz.com/testcase?key=5639564196052992 Project: net-snmp Fuzzer: libFuzzernet-snmpagentxparsefuzzer Fuzz target binary: agentxparsefuzzer Job Type: libfuzzerasannet-snmp Platform I...

wpantund/wpantund-fuzz: Crash in (__has_construct<std::__1::allocator<unsigned

Detailed report: https://oss-fuzz.com/testcase?key=5700079681273856 Project: wpantund Fuzzer: libFuzzerwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: libfuzzerubsanwpantund Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000085d000 Crash State: hasconstruct::valu...

lwan/request_fuzzer: Negative-size-param in parse_proxy_protocol_v2

Project: git://github.com/lpereira/lwan Detailed report: https://oss-fuzz.com/testcase?key=5091179189764096 Project: lwan Fuzzer: libFuzzerlwanrequestfuzzer Fuzz target binary: requestfuzzer Job Type: libfuzzerasanlwan Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

kimageformats/kimgio_rgb_fuzzer: Use-of-uninitialized-value in SGIImage::readImage

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5642691670441984 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiorgbfuzzer Fuzz target binary: kimgiorgbfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

openvswitch/odp_target: Heap-buffer-overflow in format_generic_odp_key

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5649993425223680 Project: openvswitch Fuzzer: libFuzzeropenvswitchodptarget Fuzz target binary: odptarget Job Type: libfuzzerasanopenvswitch Platform Id: linux Crash Type: Heap-buffer-overflow READ ...

wget2/libwget_metalink_parse_fuzzer: Heap-buffer-overflow in _iri_unescape_inline

Project: https://gitlab.com/gnuwget/wget2.git Detailed report: https://oss-fuzz.com/testcase?key=5138114927919104 Project: wget2 Fuzzer: libFuzzerwget2libwgetmetalinkparsefuzzer Fuzz target binary: libwgetmetalinkparsefuzzer Job Type: libfuzzerasanwget2 Platform Id: linux Crash Type:...

graphicsmagick/coder_TIFF_fuzzer: Use-of-uninitialized-value in TIFFYCbCrtoRGB

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5640694644867072 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderTIFFfuzzer Fuzz target binary: coderTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

pcre2/pcre2_fuzzer: Stack-buffer-overflow in get_grouplength

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://oss-fuzz.com/testcase?key=5643597614940160 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

imagemagick/encoder_gif_fuzzer: Heap-buffer-overflow in ParseEntities

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5754243379625984 Project: imagemagick Fuzzer: libFuzzerimagemagickencodergiffuzzer Fuzz target binary: encodergiffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_CCAPTION_fuzzer: Global-buffer-overflow in capture_screen

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5718819672162304 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDCCAPTIONfuzzer Fuzz target binary: ffmpegAVCODECIDCCAPTIONfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

kimageformats/kimgio_ora_fuzzer: Use-of-uninitialized-value in QString::vasprintf

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5768706254176256 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgioorafuzzer Fuzz target binary: kimgioorafuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

imagemagick/encoder_jpe_fuzzer: Heap-buffer-overflow in FindNeedleInHaystack

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5687239616495616 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderjpefuzzer Fuzz target binary: encoderjpefuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

skia/api_mock_gpu_canvas: Crash in unsigned char vector

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5664962896199680 Project: skia Fuzzer: libFuzzerskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

sqlite3/ossfuzz: Use-of-uninitialized-value in accessPayload

Detailed report: https://oss-fuzz.com/testcase?key=5707266847670272 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: accessPayload vdbeMemFromBtreeResiz...

radare2/ia_fuzz: Heap-buffer-overflow in r_buf_cpy

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5651817880354816 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

opencv/imdecode_fuzzer: Incorrect-function-pointer-type in cv::Mat::convertTo

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5643625308880896 Project: opencv Fuzzer: libFuzzerimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash...

libreoffice/slkfuzzer: Global-buffer-overflow in mdds::multi_type_vector<mdds::mtv::custom_block_func1<mdds::mtv::noncopyable_man

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5665026985164800 Project: libreoffice Fuzzer: libFuzzerlibreofficeslkfuzzer Fuzz target binary: slkfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

opencv/imdecode_fuzzer: Heap-buffer-overflow in Luv32toXYZ

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5638950225444864 Project: opencv Fuzzer: libFuzzeropencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Cras...

radare2/ia_fuzz: Heap-buffer-overflow in dex_parse_debug_item

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5664432685842432 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...