Cisco Finally Patches Router Bugs As New Unpatched Flaws Surface

After a botched first attempt at patching two high-severity bugs affecting its RV320 and RV325 routers, Cisco Systems is out with fresh new fixes for both devices. However, Cisco isn’t out of the woods yet. On Thursday, it also reported two new medium-severity router bugs impacting the same route...

kimageformats/kimgio_fuzzer: Use-of-uninitialized-value in QPngHandlerPrivate::readPngImage

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5660050997116928 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

skia/sksl2glsl: Crash in SkSL::Constructor::getVecComponent

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5670815980322816 Project: skia Fuzzer: aflskiasksl2glsl Fuzz target binary: sksl2glsl Job Type: aflasanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000dfff801a Crash State:...

kimageformats/kimgio_fuzzer: Use-of-uninitialized-value in parseExtraField

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5703537020895232 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

radare2/ia_fuzz: Heap-buffer-overflow in dex_parse_debug_item

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5664432685842432 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

lzma/7z_fuzzer: Use-of-uninitialized-value in CrcUpdateT8

Detailed report: https://oss-fuzz.com/testcase?key=5695345578737664 Project: lzma Fuzzer: libFuzzerlzma7zfuzzer Fuzz target binary: 7zfuzzer Job Type: libfuzzermsanlzma Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CrcUpdateT8 CrcCalc SzArExExtract Sanitize...

ffmpeg/ffmpeg_AV_CODEC_ID_RSCC_fuzzer: Heap-buffer-overflow in inflate

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5734128093233152 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDRSCCfuzzer Fuzz target binary: ffmpegAVCODECIDRSCCfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

yara/elf_fuzzer: Heap-buffer-overflow in str_table_entry

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5673589421899776 Project: yara Fuzzer: libFuzzeryaraelffuzzer Fuzz target binary: elffuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

radare2/ia_fuzz: Heap-buffer-overflow in r_read_le32

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5726989220052992 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

radare2/ia_fuzz: Heap-buffer-overflow in r_read_le32

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5756794246266880 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

php/php-fuzz-exif: Heap-buffer-overflow in exif_iif_add_value

Detailed report: https://oss-fuzz.com/testcase?key=5724097968865280 Project: php Fuzzer: aflphpphp-fuzz-exif Fuzz target binary: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60400002cbba Crash State: exifiifaddvalue exifiifaddtag...

libressl/asn1: Crash in asn1_item_print_ctx

Project: https://github.com/libressl-portable/portable.git Detailed report: https://oss-fuzz.com/testcase?key=5665138134220800 Project: libressl Fuzzer: libFuzzerlibresslasn1 Fuzz target binary: asn1 Job Type: libfuzzerubsanlibressl Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

radare2/ia_fuzz: Crash in r_uleb128

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5651766995058688 Project: radare2 Fuzzer: aflradare2iafuzz Fuzz target binary: iafuzz Job Type: aflasanradare2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61f10005167f Crash State:...

libressl/asn1: Heap-buffer-overflow in do_print_ex

Project: https://github.com/libressl-portable/portable.git Detailed report: https://oss-fuzz.com/testcase?key=5685609458302976 Project: libressl Fuzzer: libFuzzerlibresslasn1 Fuzz target binary: asn1 Job Type: libfuzzerasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

Bugs in Grandstream Gear Lay Open SMBs to Range of Attacks

A series of both unauthenticated and authenticated remote code-execution vulnerabilities have been uncovered in a variety of Grandstream products for small to medium-sized businesses, including audio and video conferencing units, IP video phones, routers and IP PBXs. Affected Products According t...

imagemagick/encoder_mvg_fuzzer: Use-of-uninitialized-value in sixel_decode

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5685521475436544 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

systemd/fuzz-network-parser: Use-of-uninitialized-value in condition_test

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5652461068484608 Project: systemd Fuzzer: libFuzzersystemdfuzz-network-parser Fuzz target binary: fuzz-network-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type:...

imagemagick/encoder_gif_fuzzer: Heap-buffer-overflow in ParseEntities

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5678895015133184 Project: imagemagick Fuzzer: libFuzzerimagemagickencodergiffuzzer Fuzz target binary: encodergiffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_psd_fuzzer: Use-of-uninitialized-value in CorrectPSDAlphaBlend

Detailed report: https://oss-fuzz.com/testcase?key=5668860357771264 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpsdfuzzer Fuzz target binary: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libressl/asn1: Heap-buffer-overflow in ASN1_get_object

Project: https://github.com/libressl-portable/portable.git Detailed report: https://oss-fuzz.com/testcase?key=5740695165337600 Project: libressl Fuzzer: libFuzzerlibresslasn1 Fuzz target binary: asn1 Job Type: libfuzzerasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...