skia/skottie_json: Heap-buffer-overflow in char const* skjson::DOMParser::matchString<skjson::DOMParser::parse

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5233264133406720 Project: skia Fuzzer: libFuzzerskiaskottiejson Fuzz target binary: skottiejson Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

skia/skottie_json: Heap-buffer-overflow in skjson::skip_ws

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6009432050761728 Project: skia Fuzzer: libFuzzerskiaskottiejson Fuzz target binary: skottiejson Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

graphicsmagick/coder_BIGTIFF_fuzzer: Use-of-uninitialized-value in DisassociateAlphaRegion

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4781271438852096 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderBIGTIFFfuzzer Fuzz target binary: coderBIGTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash...

libaom/av1_dec_fuzzer_threaded: Index-out-of-bounds in av1_read_mode_info

Detailed report: https://oss-fuzz.com/testcase?key=5140384123453440 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzerthreaded Fuzz target binary: av1decfuzzerthreaded Job Type: libfuzzerubsanlibaom Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: av1readmodeinfo...

ReleaseWire - (Profile) Persistent Cross Site Scripting

Document Title: =============== ReleaseWire - Profile Persistent Cross Site Scripting References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2127 View Video: https://www.youtube.com/watch?v=M3c1GjI2j0 Release Date: ============= 2018-06-15 Vulnerability Laboratory ID VL-ID:...

imagemagick/encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4845879373594624 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

gdal/gdal_translate_fuzzer: Heap-buffer-overflow in SGIRasterBand::IWriteBlock

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5074610188976128 Project: gdal Fuzzer: libFuzzergdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

ReleaseWire - (Profile) Persistent Cross Site Scripting

Document Title: =============== ReleaseWire - Profile Persistent Cross Site Scripting References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2127 View Video: https://www.youtube.com/watch?v=M3c1GjI2j0 Release Date: ============= 2018-06-14 Vulnerability Laboratory ID VL-ID:...

capstone/fuzz_disasmnext: Index-out-of-bounds in printRegisterList

Detailed report: https://oss-fuzz.com/testcase?key=4866330531463168 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerubsancapstone Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: printRegisterList...

capstone/fuzz_disasmmaster: Use-of-uninitialized-value in isPrefixAtLocation

Detailed report: https://oss-fuzz.com/testcase?key=5120790969188352 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmmaster Fuzz target binary: fuzzdisasmmaster Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick/encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::panasonic_load_raw

Detailed report: https://oss-fuzz.com/testcase?key=5698309183242240 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

capstone/fuzz_disasmnext: Index-out-of-bounds in fuzz_disasm.c

Detailed report: https://oss-fuzz.com/testcase?key=5740686065270784 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerubsancapstone Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: fuzzdisasm.c Sanitizer:...

ReleaseWire - (Foldername) Persistent Cross Site Scripting

Document Title: =============== ReleaseWire - Foldername Persistent Cross Site Scripting References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2126 Video: https://www.youtube.com/watch?v=iICPyaitRK8 Release Date: ============= 2018-06-13 Vulnerability Laboratory ID VL-ID:...

Shopify - (Link Return) Client Side Web Vulnerability

Document Title: =============== Shopify - Link Return Client Side Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1550 Release Date: ============= 2018-06-12 Vulnerability Laboratory ID VL-ID: ==================================== 1550...

poppler/pdf_fuzzer: Use-of-uninitialized-value in clip01

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5669907504037888 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

imagemagick/encoder_mvg_fuzzer: Heap-buffer-overflow in CheckPrimitiveExtent

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5137949766189056 Project: imagemagick Fuzzer: aflimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_mvg_fuzzer: Crash in __msan_memcpy.part.51

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5687907040886784 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in FT_Set_Transform

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4854502862618624 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

libcoap/pdu_parse_fuzzer: Heap-buffer-overflow in coap_opt_parse

Project: https://github.com/obgm/libcoap.git Detailed report: https://oss-fuzz.com/testcase?key=5676475918319616 Project: libcoap Fuzzer: libFuzzerlibcoappduparsefuzzer Fuzz target binary: pduparsefuzzer Job Type: libfuzzerasanlibcoap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

poppler/pdf_fuzzer: Use-of-uninitialized-value in CCITTFaxStream::lookChar

Detailed report: https://oss-fuzz.com/testcase?key=6301118245109760 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CCITTFaxStream::lookChar...