util-linux:test_fdisk_script_fuzz: Heap-buffer-overflow in fdisk_partname

Project: https://github.com/karelzak/util-linux.git Detailed Report: https://oss-fuzz.com/testcase?key=5705475858104320 Project: util-linux Fuzzing Engine: libFuzzer Fuzz Target: testfdiskscriptfuzz Job Type: libfuzzerasani386util-linux Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

fastjson:fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6259722731388928 Project: fastjson Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanfastjson Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000039118 Crash State: NULL Sanitizer: address ASAN Recommended Securit...

libyal:libfshfs_volume_fuzzer: Heap-buffer-overflow in libfshfs_catalog_btree_file_get_directory_entry_from_node

Detailed Report: https://oss-fuzz.com/testcase?key=5675617648115712 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfshfsvolumefuzzer Job Type: libfuzzerasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61d000000881 Crash State:...

c-blosc2:decompress_fuzzer: Heap-buffer-overflow in tinfl_decompress

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5957965459488768 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

libyal:libfshfs_volume_fuzzer: Heap-buffer-overflow in libfshfs_fork_descriptor_read

Detailed Report: https://oss-fuzz.com/testcase?key=5677602392768512 Project: libyal Fuzzing Engine: afl Fuzz Target: libfshfsvolumefuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61100000011f Crash State: libfshfsforkdescriptorread...

ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_fuzzer: Heap-buffer-overflow in dng_decode_jpeg

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6326925027704832 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTIFFfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

golang-protobuf:wirefuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5641960472444928 Project: golang-protobuf Fuzzing Engine: libFuzzer Fuzz Target: wirefuzz Job Type: libfuzzerasangolang-protobuf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000014ba Crash State: NULL Sanitizer: address ASAN...

uwebsockets:MockedEchoServer: Use-of-uninitialized-value in longest_match

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5370327463624704 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: MockedEchoServer Job Type: libfuzzermsanuwebsockets Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

llvm:clang-objc-fuzzer: Heap-buffer-overflow in clang::Lexer::getTokenPrefixLength

Detailed Report: https://oss-fuzz.com/testcase?key=6326215485685760 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7fd2d09dff07 Crash State:...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 15 security fixes, including: 1107433 High CVE-2020-6542: Use after free in ANGLE. Reported by Piotr Bania of Cisco Talos on 2020-07-20 1104046 High CVE-2020-6543: Use after free in task scheduling. Reported by Looben Yang on 2020-07-10 1108497 High...

Stable Channel Update for Desktop

The stable channel has been updated to 84.0.4147.125 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The...

ffmpeg:ffmpeg_AV_CODEC_ID_CFHD_fuzzer: Heap-buffer-overflow in filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5683161103859712 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDCFHDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

cryptofuzz:cryptofuzz-boringssl-noasm: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5726830049624064 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type:...

freetype2:glyphs-outlines: Crash in ft_smooth_overlap_spans

Detailed Report: https://oss-fuzz.com/testcase?key=5636417934589952 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: glyphs-outlines Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f1a30564c98 Crash State: ftsmoothoverlapspans graysweep...

imagemagick:ping_ttf_fuzzer: Heap-buffer-overflow in ft_smooth_overlap_spans

Detailed Report: https://oss-fuzz.com/testcase?key=5471030328688640 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingttffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7fa32c632194 Crash State: ftsmoothoverlapspa...

wasmtime:differential: Crash in RegisterSetjmp

Detailed Report: https://oss-fuzz.com/testcase?key=6205251766714368 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: differential Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f4688188004 Crash State: RegisterSetjmp...

graphicsmagick:coder_CRW_fuzzer: Use-of-uninitialized-value in MagickCondSignal

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5676670342922240 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderCRWfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_fuzzer: Index-out-of-bounds in output_configure

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5245171336478720 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

usrsctp:fuzzer_connect: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6219321542705152 Project: usrsctp Fuzzing Engine: libFuzzer Fuzz Target: fuzzerconnect Job Type: libfuzzerubsanusrsctp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f06700b6bf0 Crash State: NULL Sanitizer: undefined UBSAN...

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in RenderMVGContent

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5729350432063488 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...