cryptofuzz:cryptofuzz-openssl-noasm: Use-of-uninitialized-value in EVP_DecryptUpdate

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5645357840596992 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-val...

cryptofuzz:cryptofuzz-openssl: Heap-buffer-overflow in aria_set_encrypt_key

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5181934937833472 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

libvips:jpegsave_buffer_fuzzer: Heap-buffer-overflow in attach_xmp_blob

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5673786296238080 Project: libvips Fuzzing Engine: afl Fuzz Target: jpegsavebufferfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libvips:jpegsave_buffer_fuzzer: Heap-buffer-overflow in exif_entry_get_value

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5768110933540864 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavebufferfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

cryptofuzz:cryptofuzz-openssl-noasm: Heap-buffer-overflow in (__has_construct<std::__1::allocator<unsigned

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5733374043357184 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzerasani386cryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

cryptofuzz:cryptofuzz-openssl-noasm: Heap-buffer-overflow in aria_set_encrypt_key

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5665634448310272 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzerasani386cryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

openSUSE: Security Advisory for zypper, libzypp and libsolv (openSUSE-SU-2019:1927-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

imagemagick:encoder_mvg_fuzzer: Crash in TraceBezier

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5756741114920960 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

aspell:aspell_fuzzer: Heap-buffer-overflow in acommon::DecodeDirect<unsigned int>::decode

Project: https://github.com/gnuaspell/aspell.git Detailed Report: https://oss-fuzz.com/testcase?key=5686369787052032 Project: aspell Fuzzing Engine: afl Fuzz Target: aspellfuzzer Job Type: aflasanaspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60a0000003b0 Crash...

aspell:aspell_fuzzer: Heap-buffer-overflow in aspeller::Dictionary::Id::Id

Project: https://github.com/gnuaspell/aspell.git Detailed Report: https://oss-fuzz.com/testcase?key=5176071032406016 Project: aspell Fuzzing Engine: libFuzzer Fuzz Target: aspellfuzzer Job Type: libfuzzerasanaspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libavc:avc_dec_fuzzer: Heap-buffer-overflow in ih264d_cavlc_4x4res_block_totalcoeff_11to16

Project: https://android.googlesource.com/platform/external/libavc Detailed Report: https://oss-fuzz.com/testcase?key=5669157235851264 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_VORBIS_fuzzer: Crash in vorbis_residue_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5754510382727168 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDVORBISfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60a400000b74 Crash State...

libavc:avc_dec_fuzzer: Heap-buffer-overflow in ih264d_compute_bs_non_mbaff_thread

Project: https://android.googlesource.com/platform/external/libavc Detailed Report: https://oss-fuzz.com/testcase?key=5140635270512640 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

flac:fuzzer_decoder: Use-of-uninitialized-value in FLAC::Decoder::FuzzerStream::write_callback

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5735564778668032 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::crop_masked_pixels

Detailed Report: https://oss-fuzz.com/testcase?key=5673723677376512 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::cropmaskedpixels...

flac:fuzzer_decoder: Crash in FLAC__crc16_update_words32

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5076189185572864 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzermsanflac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x724000010000 Crash State:...

graphicsmagick:coder_TIFF_fuzzer: Use-of-uninitialized-value in TIFFYCbCrtoRGB

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5681613295321088 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

yara:dotnet_fuzzer: Crash in dotnet_parse_tilde_2

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5112220729475072 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: dotnetfuzzer Job Type: libfuzzerubsanyara Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002507000 Crash State:...

Excessive CPU usage in HTTP/2 with small window updates

Excessive CPU usage in HTTP/2 with small window updates Severity: medium CVE-2019-9511 Not vulnerable: 1.17.3+, 1.16.1+ Vulnerable: 1.9.5-1.17.2...

Microsoft Windows CoreShellCOMServerRegistrar Improper Access Control Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Core Shell COM...