Android Studio 1-4 & 2.3.3 - Buffer Overflow Vulnerability

Document Title: =============== Android Studio 1-4 & 2.3.3 - Buffer Overflow Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2092 Video: https://www.youtube.com/watch?v=cdXChK64WLc Release Date: ============= 2017-08-30 Vulnerability Laboratory ID VL-ID:...

llvm: Heap-buffer-overflow in llvm::identify_magic

Detailed report: https://oss-fuzz.com/testcase?key=5914710174072832 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvmuntrusted Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60300000011c Cras...

llvm: Heap-buffer-overflow in llvm::StringMapImpl::LookupBucketFor

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5725600348110848 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

Android Studio 1-4 & 2.3.3 - Buffer Overflow Vulnerability

Document Title: =============== Android Studio 1-4 & 2.3.3 - Buffer Overflow Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2092 Video: https://www.youtube.com/watch?v=cdXChK64WLc Release Date: ============= 2017-08-29 Vulnerability Laboratory ID VL-ID:...

ffmpeg: Index-out-of-bounds in hls_transform_unit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4736774054084608 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDHEVCfuzzer Fuzz target binary: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerubsanffmpeguntrusted Platform Id: linux Crash Type:...

librawspeed: Use-of-uninitialized-value in rawspeed::TiffRootIFD::~TiffRootIFD

Detailed report: https://oss-fuzz.com/testcase?key=5397877767536640 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-SrwDecoder Fuzz target binary: TiffDecoderFuzzer-SrwDecoder Job Type: libfuzzermsanlibrawspeeduntrusted Platform Id: linux Crash Type: Use-of-uninitialized-value...

libreoffice: Container-overflow in HMemIODev::read1b

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4795817573482496 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow...

libreoffice: Heap-buffer-overflow in SVBT16ToShort

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5119491576954880 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

llvm: Stack-buffer-overflow in clang::Lexer::SkipLineComment

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6418539432902656 Project: llvm Fuzzer: libFuzzerllvmclang-fuzzer Fuzz target binary: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash...

Unquoted Service Path Privilege Escalation in ElanTech Touchpad Driver - us

Lenovo Security Advisory: LEN-14390 Potential Impact: Privilege Escalation Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-3757 Summary Description: An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad used on some Lenovo brand...

openssl: Heap-buffer-overflow in X509v3_addr_get_afi

Project: https://github.com/openssl/openssl.git Detailed report: https://oss-fuzz.com/testcase?key=4519542728425472 Project: openssl Fuzzer: libFuzzeropensslx509 Fuzz target binary: x509 Job Type: libfuzzerasanopenssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

openjpeg: Heap-buffer-overflow in opj_dwt_interleave_partial_v

Project: https://github.com/uclouvain/openjpeg.git https://github.com/uclouvain/openjpeg-data.git Detailed report: https://oss-fuzz.com/testcase?key=4717233764827136 Project: openjpeg Fuzzer: libFuzzeropenjpegopjdecompressfuzzer Fuzz target binary: opjdecompressfuzzer Job Type:...

libreoffice: Heap-buffer-overflow in SVBT16ToShort

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5646881046659072 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerasanlibreofficeuntrusted Platform Id: linux Crash Type:...

gdal: Heap-buffer-overflow in OGRWAsPLayer::GetNextRawFeature

Detailed report: https://oss-fuzz.com/testcase?key=6010062407467008 Project: gdal Fuzzer: libFuzzergdalwaspfuzzer Fuzz target binary: waspfuzzer Job Type: libfuzzerasangdaluntrusted Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x602000000538 Crash State:...

gnutls: Use-of-uninitialized-value in _wrap_nettle_pk_derive

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=6070070885220352 Project: gnutls Fuzzer: libFuzzergnutlspskclientfuzzer Fuzz target binary: gnutlspskclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-valu...

gnutls: Use-of-uninitialized-value in _nettle_ecc_mod_inv

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=4894226313641984 Project: gnutls Fuzzer: libFuzzergnutlspskclientfuzzer Fuzz target binary: gnutlspskclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-valu...

gnutls: Use-of-uninitialized-value in __gmpz_invert

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=4734766895071232 Project: gnutls Fuzzer: libFuzzergnutlsprivatekeyparserfuzzer Fuzz target binary: gnutlsprivatekeyparserfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type:...

gnutls: Use-of-uninitialized-value in _nettle_rsa_check_size

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=6559599983329280 Project: gnutls Fuzzer: libFuzzergnutlsclientfuzzer Fuzz target binary: gnutlsclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

gnutls: Use-of-uninitialized-value in __gmpz_cmp_ui

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=5924565177860096 Project: gnutls Fuzzer: libFuzzergnutlssrpclientfuzzer Fuzz target binary: gnutlssrpclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-valu...

gnutls: Use-of-uninitialized-value in __gmpn_tdiv_qr

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=5744749560463360 Project: gnutls Fuzzer: libFuzzergnutlssrpclientfuzzer Fuzz target binary: gnutlssrpclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-valu...