skia/api_raster_n32_canvas: Heap-buffer-overflow in sse2::srcover_bgra_NUMBER

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6233351313686528 Project: skia Fuzzer: libFuzzerskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

imagemagick/encoder_psd_fuzzer: Use-of-uninitialized-value in PerceptibleReciprocal

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5123755102699520 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpsdfuzzer Fuzz target binary: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

skia/api_raster_n32_canvas: Use-of-uninitialized-value in sse2::blit_row_s32a_opaque

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5067089183244288 Project: skia Fuzzer: libFuzzerskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...

librawspeed/TiffDecoderFuzzer-ArwDecoder: Use-of-uninitialized-value in rawspeed::TiffIFD::TiffIFD

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5990033396858880 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-ArwDecoder Fuzz target binary: TiffDecoderFuzzer-ArwDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

skia/api_raster_n32_canvas: Use-of-uninitialized-value in SkConicCoeff::eval

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5381937934893056 Project: skia Fuzzer: libFuzzerskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...

net-snmp/snmp_pdu_parse_fuzzer: Heap-buffer-overflow in asn_parse_signed_int64

Project: git://git.code.sf.net/p/net-snmp/code Detailed report: https://oss-fuzz.com/testcase?key=6302021029199872 Project: net-snmp Fuzzer: aflnet-snmpsnmppduparsefuzzer Fuzz target binary: snmppduparsefuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

net-snmp/agentx_parse_fuzzer: Heap-buffer-overflow in agentx_parse

Project: git://git.code.sf.net/p/net-snmp/code Detailed report: https://oss-fuzz.com/testcase?key=5384480991739904 Project: net-snmp Fuzzer: libFuzzernet-snmpagentxparsefuzzer Fuzz target binary: agentxparsefuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type: Heap-buffer-overflow...

skcms/iccprofile_info: Crash in read_table_extents

Project: https://skia.googlesource.com/skcms.git Detailed report: https://oss-fuzz.com/testcase?key=5960989452271616 Project: skcms Fuzzer: libFuzzerskcmsiccprofileinfo Fuzz target binary: iccprofileinfo Job Type: libfuzzermsanskcms Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

grpc/api_fuzzer: Crash in gpr_strdup

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5406804084260864 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fff00000000 Crash...

Citrix XenServer 7.2 Multiple Security Updates

Description of Problem A number of security issues have been identified within Citrix XenServer 7.2 which could, if exploited, allow a malicious man-in-the-middle MiTM attacker on the management network to decrypt management traffic. Collectively, this has been rated as a medium severity...

graphicsmagick/enhance_fuzzer: Use-of-uninitialized-value in EnhanceImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6282610729811968 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickenhancefuzzer Fuzz target binary: enhancefuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in inflate

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5182835867516928 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

Microsoft Skype Mobile v8.x - Emoticons DoS Vulnerability

Document Title: =============== Microsoft Skype Mobile v8.x - Emoticons DoS Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2117 Video: https://www.youtube.com/watch?v=2vcdQb98zE0 Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2116 MSRC ID:...

imagemagick/encoder_pict_fuzzer: Use-of-uninitialized-value in ScaleQuantumToChar

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6701683506675712 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpictfuzzer Fuzz target binary: encoderpictfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_pict_fuzzer: Use-of-uninitialized-value in PerceptibleReciprocal

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4733409088765952 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpictfuzzer Fuzz target binary: encoderpictfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

gdal/gdal_vrt_fuzzer: Heap-buffer-overflow in GetNextLZWCode

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5666113942716416 Project: gdal Fuzzer: libFuzzergdalvrtfuzzer Fuzz target binary: gdalvrtfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Microsoft Skype Mobile v8.x - Emoticons DoS Vulnerability

Document Title: =============== Microsoft Skype Mobile v8.x - Emoticons DoS Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2117 Video: https://www.youtube.com/watch?v=2vcdQb98zE0 Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2116 MSRC ID:...

imagemagick/encoder_ptif_fuzzer: Heap-buffer-overflow in gtStripContig

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4914657606238208 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderptiffuzzer Fuzz target binary: encoderptiffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_ptif_fuzzer: Use-of-uninitialized-value in ReadTIFFImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6258253836058624 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderptiffuzzer Fuzz target binary: encoderptiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

dlplibs/key6fuzzer: Use-of-uninitialized-value in std::__1::__tree_iterator<std::__1::__value_type<unsigned int, std::__1::pair<un

Detailed report: https://oss-fuzz.com/testcase?key=6170144259702784 Project: dlplibs Fuzzer: libFuzzerdlplibskey6fuzzer Fuzz target binary: key6fuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...