ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in Ins_NPUSHW

Detailed Report: https://oss-fuzz.com/testcase?key=5279742755995648 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x631000128830 Crash State: InsNPUSHW...

cras:cras_fl_media_fuzzer: Use-of-uninitialized-value in _dbus_marshal_write_basic

Detailed Report: https://oss-fuzz.com/testcase?key=6496527626928128 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: crasflmediafuzzer Job Type: libfuzzermsancras Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: dbusmarshalwritebasic dbustypewriterwritebas...

libyang:lyd_parse_mem_json: Use-of-uninitialized-value in lyxp_token2str

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=6260614099501056 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememjson Job Type: libfuzzermsanlibyang Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

grok:grk_decompress_fuzzer: Incorrect-function-pointer-type in grk::BufferedStream::read

Detailed Report: https://oss-fuzz.com/testcase?key=6498826541727744 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerubsangrok Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Crash State: grk::BufferedStream::read...

USN-5503-1: GnuPG vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Demi Marie Obenour discovered that GnuPG incorrectly handled injection in the status message. A remote attacker could possibly use this issue to forge signatures. Update Instructions: Run sudo ua fix...

suricata:fuzz_sigpcap: Non-positive-vla-bound-value in TransformStripWhitespace

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5487334111444992 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcap Job Type: libfuzzerubsansuricata Platform Id: linux Crash Type: Non-positive-vla-bound-value Crash Address: Crash...

USN-5550-1: GnuTLS vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that GnuTLS incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service. This issue only...

USN-5570-1: zlib vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description Evgeny Legerov discovered that zlib incorrectly handled memory when performing certain inflate operations. An attacker could use this issue to cause zlib to crash, resulting in a...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-use-after-free in pdfi_cidtype2_get_glyph_index

Detailed Report: https://oss-fuzz.com/testcase?key=4748952594939904 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x63100004c716 Crash State:...

llvm:clang-objc-fuzzer: Use-of-uninitialized-value in clang::StringLiteralParser::init

Detailed Report: https://oss-fuzz.com/testcase?key=5743921619140608 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::StringLiteralParser::init...

lcms:cms_transform_all_fuzzer: Heap-buffer-overflow in _cmsMAT3per

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=6317156677058560 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmstransformallfuzzer Job Type: libfuzzerasani386lcms Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

Multi-vendor BIOS Security Vulnerabilities (August 2022) - Lenovo Support US

No description provided...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::ScenePreprocessor::ProcessMesh

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4578023118077952 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

dav1d:dav1d_fuzzer_mt: Use-of-uninitialized-value in cdef_filter_block_c

Detailed Report: https://oss-fuzz.com/testcase?key=5118372618043392 Project: dav1d Fuzzing Engine: libFuzzer Fuzz Target: dav1dfuzzermt Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cdeffilterblockc cdeffilterblock8x8c...

USN-5402-1: OpenSSL vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Elison Niven discovered that OpenSSL incorrectly handled the crehash script. A local attacker could possibly use this issue to execute arbitrary commands when crehash is run. CVE-2022-1292 Raul Metsma...

USN-5464-1: E2fsprogs vulnerability | Cloud Foundry

usn-5464-1 Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description Nils Bars discovered that e2fsprogs incorrectly handled certain file systems. A local attacker could use this issue with a crafted file system image to possibly execute...

USN-5488-1: OpenSSL vulnerability | Cloud Foundry

usn-5488-1 Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Chancen and Daniel Fiala discovered that OpenSSL incorrectly handled the crehash script. A local attacker could possibly use this issue to execute arbitrary commands when crehash is run. Update...

lcms:cms_transform_all_fuzzer: Use-of-uninitialized-value in ComputeConversion

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=6339528079572992 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmstransformallfuzzer Job Type: libfuzzermsanlcms Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

mruby:mruby_fuzzer: Heap-buffer-overflow in udiv

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4663857393565696 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000039bc...

ghostscript:gs_device_ps2write_fuzzer: Crash in names_string_ref

Detailed Report: https://oss-fuzz.com/testcase?key=6581616931110912 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000001000 Crash State: namesstringref...