imagemagick/ping_ept2_fuzzer: Stack-buffer-overflow in GetNextUTFCode

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5695814195740672 Project: imagemagick Fuzzer: libFuzzerimagemagickpingept2fuzzer Fuzz target binary: pingept2fuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip_proto-udp: Crash in tvb_ensure_bytes_exist

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5709248316571648 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerubsanwireshark Platform Id: linux Crash Type:...

Security Bulletin: Vulnerabilities in Eclipse OpenJ9, Oracle Java SE, and IBM WebSphere Application Server affect IBM Watson Compare and Comply for IBM Cloud Private for Data

Summary This bulletin discloses three vulnerabilities that affect IBM Watson™ Compare and Comply for IBM Cloud Private for Data: - A high-severity vulnerability in Eclipse OpenJ9 - A medium-severity vulnerability in IBM WebSphere® Application Server - A low-severity vulnerability in Oracle® Java...

imagemagick/encoder_bmp_fuzzer: Use-of-uninitialized-value in cmsMLUgetASCII

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5742789528125440 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderbmpfuzzer Fuzz target binary: encoderbmpfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

libxslt/xslt: Use-of-uninitialized-value in xmlOutputBufferWriteEscape

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed report: https://oss-fuzz.com/testcase?key=5768945878958080 Project: libxslt Fuzzer: libFuzzerlibxsltxslt Fuzz target binary: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libsass/data_context_fuzzer: Crash in Sass::Parser::parseCompoundSelector

Project: https://github.com/sass/libsass.git Detailed report: https://oss-fuzz.com/testcase?key=5717181783867392 Project: libsass Fuzzer: libFuzzerlibsassdatacontextfuzzer Fuzz target binary: datacontextfuzzer Job Type: libfuzzermsanlibsass Platform Id: linux Crash Type: UNKNOWN READ Crash Addres...

libsass/data_context_fuzzer: Heap-buffer-overflow in std::__1::vector<std::__1::vector<Sass::SharedImpl<Sass::ComplexSelector>, std::

Project: https://github.com/sass/libsass.git Detailed report: https://oss-fuzz.com/testcase?key=5161915090731008 Project: libsass Fuzzer: libFuzzerlibsassdatacontextfuzzer Fuzz target binary: datacontextfuzzer Job Type: libfuzzerasanlibsass Platform Id: linux Crash Type: Heap-buffer-overflow READ...

Intel SSD DC S4500/S4600 Series Vulnerability - Lenovo Support US

No description provided...

Intel SSD DC S4500/S4600 Series Vulnerability - US

Lenovo Security Advisory: LEN-28116 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-18095 Summary Description: Intel has reported a potential security vulnerability in Intel Solid State Drives SSD for Data Centers DC S4500/S4600 Seri...

mpg123/read_fuzzer: Use-of-uninitialized-value in handle_apetag

Detailed report: https://oss-fuzz.com/testcase?key=5709457541038080 Project: mpg123 Fuzzer: libFuzzermpg123readfuzzer Fuzz target binary: readfuzzer Job Type: libfuzzermsanmpg123 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: handleapetag wetwork...

freeimage/load_from_memory_fuzzer: Stack-buffer-overflow in LibRaw::parse_rollei

Detailed report: https://oss-fuzz.com/testcase?key=5156329342107648 Project: freeimage Fuzzer: libFuzzerloadfrommemoryfuzzer Fuzz target binary: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7fef5bbbdca0 Crash Stat...

mpg123/read_fuzzer: Heap-buffer-overflow in INT123_parse_new_id3

Detailed report: https://oss-fuzz.com/testcase?key=5094671445917696 Project: mpg123 Fuzzer: aflreadfuzzer Fuzz target binary: readfuzzer Job Type: aflasanmpg123 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6090000002c4 Crash State: INT123parsenewid3 handleid3v2...

jsonnet/convert_jsonnet_fuzzer: Crash in Interpreter::evaluate

Project: https://github.com/google/jsonnet.git Detailed report: https://oss-fuzz.com/testcase?key=5706027058593792 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzerubsanjsonnet Platform Id: linux Crash Type: UNKNOWN READ Cra...

jsonnet/convert_jsonnet_fuzzer: Use-of-uninitialized-value in Interpreter::evaluate

Detailed report: https://oss-fuzz.com/testcase?key=5766210858254336 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzermsanjsonnet Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

llvm/llvm-opt-fuzzer--x86_64-simplifycfg: Use-of-uninitialized-value in bool llvm::DenseMapBase<llvm::DenseMap<llvm::StringRef, llvm::detail::DenseSetEm

Detailed report: https://oss-fuzz.com/testcase?key=5688396233572352 Project: llvm Fuzzer: libFuzzerllvmllvm-opt-fuzzer--x8664-simplifycfg Fuzz target binary: llvm-opt-fuzzer--x8664-simplifycfg Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

imagemagick/rotate_fuzzer: Index-out-of-bounds in LibRaw::scale_colors_loop

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5710383731441664 Project: imagemagick Fuzzer: libFuzzerimagemagickrotatefuzzer Fuzz target binary: rotatefuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type:...

Stable Channel Update for Desktop

The stable channel has been updated to 75.0.3770.142 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain...

njs/njs_process_script_fuzzer: Crash in njs_object_prop_alloc

Detailed report: https://oss-fuzz.com/testcase?key=5652490927734784 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x71dffffff800 Crash State: njsobjectpropalloc...

imagemagick/ping_eps_fuzzer: Stack-buffer-overflow in ConstantString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5653164516179968 Project: imagemagick Fuzzer: libFuzzerimagemagickpingepsfuzzer Fuzz target binary: pingepsfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_ps_fuzzer: Stack-buffer-overflow in GetNextUTFCode

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5633665431764992 Project: imagemagick Fuzzer: libFuzzerimagemagickpingpsfuzzer Fuzz target binary: pingpsfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...