freetype2/cff-ftengine: Crash in cff_decoder_parse_charstrings

Detailed report: https://oss-fuzz.com/testcase?key=5709686410575872 Project: freetype2 Fuzzer: libFuzzerfreetype2cff-ftengine Fuzz target binary: cff-ftengine Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fa03f210910 Crash State:...

libpcap/fuzz_both: Use-of-uninitialized-value in pcap_nametonetaddr

Detailed report: https://oss-fuzz.com/testcase?key=5754994205130752 Project: libpcap Fuzzer: libFuzzerlibpcapfuzzboth Fuzz target binary: fuzzboth Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pcapnametonetaddr genscode...

Apple iOS 11.x & 12.x - Authentication Bypass Vulnerability

Document Title: =============== Apple iOS 11.x & 12.x - Authentication Bypass Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2161 View Video: https://www.youtube.com/watch?v=m9VMidADJcc Release Date: ============= 2018-10-26 Vulnerability Laboratory ID...

skia/android_codec: Use-of-uninitialized-value in swizzle_index_to_n32

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5767443453050880 Project: skia Fuzzer: libFuzzerskiaandroidcodec Fuzz target binary: androidcodec Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in bool hb_sanitize_context_t::check_array<OT::IntType<unsigned char, 1u> >

Detailed report: https://oss-fuzz.com/testcase?key=5097734906839040 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bool...

harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in BEInt<unsigned int, 4>::operator unsigned int

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5718464350650368 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in AAT::KerxSubTableFormat6::get_kerning

Detailed report: https://oss-fuzz.com/testcase?key=5634395566768128 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in fz_unpack_tile

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5716394679730176 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

gdal/gtiff_fuzzer: Crash in GDAL_LercNS::Lerc2::ReadHeader

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5741391389392896 Project: gdal Fuzzer: aflgdalgtifffuzzer Fuzz target binary: gtifffuzzer Job Type: aflasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x618f800006ff Crash State:...

harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in AAT::LookupFormat0<OT::IntType<unsigned short, 2u> >::get_value

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5659641787187200 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type:...

imagemagick/ping_mvg_fuzzer: Use-of-uninitialized-value in StringInfoToHexString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6446552963874816 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/rotate_fuzzer: Index-out-of-bounds in LibRaw::subtract_black_internal

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5713220651188224 Project: imagemagick Fuzzer: libFuzzerimagemagickrotatefuzzer Fuzz target binary: rotatefuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type:...

harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in AAT::LookupFormat8<OT::IntType<unsigned short, 2u> >::get_value

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5725129603022848 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type:...

harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in AAT::LookupSegmentSingle<OT::IntType<unsigned short, 2u> >::cmp

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5668791174823936 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type:...

harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in BEInt<unsigned int, 4>::operator unsigned int

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5726089628876800 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

libpcap/fuzz_filter: Use-of-uninitialized-value in pcap_nametonetaddr

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed report: https://oss-fuzz.com/testcase?key=5631616488046592 Project: libpcap Fuzzer: libFuzzerlibpcapfuzzfilter Fuzz target binary: fuzzfilter Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value...

harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5652019562414080 Project: harfbuzz Fuzzer: aflharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

unicorn/fuzz_emu_arm_armbe: Index-out-of-bounds in load_reg_var_armeb

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5650412976209920 Project: unicorn Fuzzer: libFuzzerunicornfuzzemuarmarmbe Fuzz target binary: fuzzemuarmarmbe Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bound...

keystone/fuzz_asm_armv8_arm: Use-of-uninitialized-value in llvm_ks::MCAssembler::computeFragmentSize

Detailed report: https://oss-fuzz.com/testcase?key=5768306540150784 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmarmv8arm Fuzz target binary: fuzzasmarmv8arm Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

USN-3786-1: libxkbcommon vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description It was discovered that libxkbcommon incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. CVE-2018-15853, CVE-2018-15854, CVE-2018-15855, CVE-2018-1585...