Stable Channel Update for Desktop

The Stable channel has been updated to 129.0.6668.100/.101 for Windows, Mac and 129.0.6668.100 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=6302140571648000 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

jq:jq_fuzz_fixed: Crash in jv_free

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=5266623017058304 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzfixed Job Type: libfuzzerubsanjq Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5854898d0001 Crash State: jvfree...

glib:fuzz_string: Heap-buffer-overflow in g_string_replace

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=4729731465936896 Project: glib Fuzzing Engine: libFuzzer Fuzz Target: fuzzstring Job Type: libfuzzerasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x50c000000781...

wt:fuzz-eval: Heap-double-free in basic_string.tcc

Project: https://github.com/emweb/wt.git Detailed Report: https://oss-fuzz.com/testcase?key=4829565027942400 Project: wt Fuzzing Engine: libFuzzer Fuzz Target: fuzz-eval Job Type: libfuzzerasanwt Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x503000000b50 Crash State:...

libarchive:libarchive_fuzzer: Object-size in process_head_file

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=4695560571912192 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerubsanlibarchive Platform Id: linux Crash Type: Object-size Crash Address: Crash...

mruby:mruby_fuzzer: Use-of-uninitialized-value in mark_context

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6306386336612352 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

hsqldb:SqlStatementFuzzer: Security exception in SqlStatementFuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=5557420779175936 Project: hsqldb Fuzzing Engine: libFuzzer Fuzz Target: SqlStatementFuzzer Job Type: libfuzzerasanhsqldb Platform Id: linux Crash Type: Security exception Crash Address: Crash State: SqlStatementFuzzer Sanitizer: address ASAN...

metadata-extractor:ImageMetadataReaderFuzzer: Security exception in ImageMetadataReaderFuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=4839297641938944 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

yamlbeans:YamlReaderFuzzer: Security exception in com.esotericsoftware.yamlbeans.YamlReader.readValueInternal

Detailed Report: https://oss-fuzz.com/testcase?key=6508676066639872 Project: yamlbeans Fuzzing Engine: libFuzzer Fuzz Target: YamlReaderFuzzer Job Type: libfuzzerasanyamlbeans Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

hamcrest:HamcrestFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Detailed Report: https://oss-fuzz.com/testcase?key=5790145863811072 Project: hamcrest Fuzzing Engine: libFuzzer Fuzz Target: HamcrestFuzzer Job Type: libfuzzerasanhamcrest Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

jackson-modules-java8:DatatypeFuzzer: Security exception in DatatypeFuzzer.fuzzerTestOneInput

Detailed Report: https://oss-fuzz.com/testcase?key=5158179032334336 Project: jackson-modules-java8 Fuzzing Engine: libFuzzer Fuzz Target: DatatypeFuzzer Job Type: libfuzzerasanjackson-modules-java8 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

jackson-databind:AdaLObjectReader3Fuzzer: Security exception in jaz.Zer.reportFinding

Detailed Report: https://oss-fuzz.com/testcase?key=5150541171195904 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: AdaLObjectReader3Fuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type: Security exception Crash Address: Crash State: jaz.Zer.reportFinding...

twitter4j:TwitterObjectFactoryFuzzer: Security exception in twitter4j.StatusJSONImpl.init

Project: https://github.com/Twitter4J/Twitter4J.git Detailed Report: https://oss-fuzz.com/testcase?key=6665067855151104 Project: twitter4j Fuzzing Engine: libFuzzer Fuzz Target: TwitterObjectFactoryFuzzer Job Type: libfuzzerasantwitter4j Platform Id: linux Crash Type: Security exception Crash...

joni:AddrListFixFuzzer: Security exception in org.joni.Parser.parseCharClass

Project: https://github.com/jruby/joni.git Detailed Report: https://oss-fuzz.com/testcase?key=5080414119591936 Project: joni Fuzzing Engine: libFuzzer Fuzz Target: AddrListFixFuzzer Job Type: libfuzzerasanjoni Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

readstat:fuzz_format_sav: Heap-buffer-overflow in extract_mr_data

Project: https://github.com/WizardMac/ReadStat.git Detailed Report: https://oss-fuzz.com/testcase?key=4906920979267584 Project: readstat Fuzzing Engine: libFuzzer Fuzz Target: fuzzformatsav Job Type: libfuzzerasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

Stable Channel Update for Desktop

The Stable channel has been updated to 129.0.6668.70/.71 for Windows, Mac and 129.0.6668.70 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restrict...

graphql-java:GraphqlFuzzer: Security exception in graphql.schema.GraphQLTypeUtil.simplePrint

Project: https://github.com/graphql-java/graphql-java.git Detailed Report: https://oss-fuzz.com/testcase?key=6479968740114432 Project: graphql-java Fuzzing Engine: libFuzzer Fuzz Target: GraphqlFuzzer Job Type: libfuzzerasangraphql-java Platform Id: linux Crash Type: Security exception Crash...

ffmpeg:ffmpeg_SWS_fuzzer: Heap-buffer-overflow in ff_rgb24toyv12_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6475823425585152 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegSWSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

docker-client:RegistryAuthFuzzer: Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer

Project: https://github.com/spotify/docker-client.git Detailed Report: https://oss-fuzz.com/testcase?key=6458650569277440 Project: docker-client Fuzzing Engine: libFuzzer Fuzz Target: RegistryAuthFuzzer Job Type: libfuzzerasandocker-client Platform Id: linux Crash Type: Security exception Crash...