gdal: Heap-buffer-overflow in NITFGetField

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5956305300750336 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address:...

file: Heap-buffer-overflow in mprint

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=5775967945490432 Project: file Fuzzer: aflfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: aflasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x604000000180 Cra...

ffmpeg: Index-out-of-bounds in decode_unit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5286680976162816 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDSCPRfuzzer Fuzz target binary: ffmpegAVCODECIDSCPRfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

file: Heap-buffer-overflow in mprint

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=6526587098890240 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address:...

file: Use-of-uninitialized-value in mprint

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=6318920866725888 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzermsanfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

file: Heap-buffer-overflow in mprint

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=5156110212268032 Project: file Fuzzer: aflfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: aflasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x605000000223 Cra...

ffmpeg: Index-out-of-bounds in decode_residual

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6246484833992704 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDH264fuzzer Fuzz target binary: ffmpegAVCODECIDH264fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

tpm2: Index-out-of-bounds in MemoryRemoveTrailingZeros

Project: https://chromium.googlesource.com/chromiumos/thirdparty/tpm2 Detailed report: https://oss-fuzz.com/testcase?key=5021934427308032 Project: tpm2 Fuzzer: libFuzzertpm2executecommandfuzzer Fuzz target binary: tpm2executecommandfuzzer Job Type: libfuzzerubsantpm2 Platform Id: linux Crash Type...

gnutls: Use-of-uninitialized-value in gnutls_pkcs12_verify_mac

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=5921522709430272 Project: gnutls Fuzzer: libFuzzergnutlspkcs12keyparserfuzzer Fuzz target binary: gnutlspkcs12keyparserfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type:...

gnutls: Use-of-uninitialized-value in _gnutls_mpi_dprint_size

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=5685300447674368 Project: gnutls Fuzzer: libFuzzergnutlsclientfuzzer Fuzz target binary: gnutlsclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

gnutls: Use-of-uninitialized-value in gnutls_memset

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=5321450548363264 Project: gnutls Fuzzer: libFuzzergnutlsclientfuzzer Fuzz target binary: gnutlsclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

gnutls: Use-of-uninitialized-value in gnutls_ocsp_resp_get_status

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=5280774389497856 Project: gnutls Fuzzer: libFuzzergnutlsocsprespparserfuzzer Fuzz target binary: gnutlsocsprespparserfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type:...

ffmpeg: Index-out-of-bounds in dvbsub_parse_clut_segment

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5768907824562176 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDDVBSUBfuzzer Fuzz target binary: ffmpegAVCODECIDDVBSUBfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

ffmpeg: Index-out-of-bounds in vlc_decode_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5235964056174592 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMIMICfuzzer Fuzz target binary: ffmpegAVCODECIDMIMICfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-boun...

Microsoft Internet Explorer Enhanced Protected Mode Sandbox Escape Vulnerability

This vulnerability allows remote attackers to escape the Enhanced Protected Mode EPM sandbox on vulnerable installations of Microsoft Internet Explorer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specif...

SAP Java P4 SLD SSRF

Application: SAP NetWeaver Versions Affected: SAP Netweaver 7.4, 7.5 Vendor URL: SAP Bug: SSRF Reported: 05.10.2017 Vendor response: 06.10.2017 Date of Public Advisory: 13.02.2018 Reference: SAP Security Note 2565622 Author: Mathieu Geli ERPScan VULNERABILITY INFORMATION Class: Missing...

RCE via path Traversal using CSRF in SAP CRM

Application: SAP NetWeaver Versions Affected: SAP CRM 13676083 Vendor URL: SAP Bugs: CSRF, Path Traversal Reported: 05.10.2017 Vendor response: 06.10.2017 Date of Public Advisory: 13.02.2018 Reference: SAP Security Note 2547431 Author: Vahagn Vardanyan ERPScan, Vladimir Egorov ERPScan VULNERABILI...

Microsoft OneDrive iOS App 8.13 Insecure URI Scheme Handling

A short demo video is available here: https://youtu.be/0jZdM9peVSk SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Insecure Handling Of URI Schemes product: Microsoft OneDrive iOS App vulnerable version: 8.13 fixed...

pcre2: Index-out-of-bounds in match

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://oss-fuzz.com/testcase?key=5214967840112640 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerubsanpcre2 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

harfbuzz: Index-out-of-bounds in hb_ot_face_glyf_accelerator_t::get_extents

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=4523479581851648 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzerubsanharfbuzz Platform Id: linux Crash Type: Index-out-of-bounds Crash Addres...