OESA-2024-2277 libyaml security update

$summary. Security Fixes: Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The maintainer identified an error in the libyaml fuzzers. It is not possibl...

mysql-server:fuzz_real_query: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5128598837067776 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzrealquery Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

cascadia:fuzz: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5425115373371392 Project: cascadia Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasancascadia Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

golang-protobuf:wirefuzz: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5917153682391040 Project: golang-protobuf Fuzzing Engine: libFuzzer Fuzz Target: wirefuzz Job Type: libfuzzerasangolang-protobuf Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

graphicsmagick:coder_JNG_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6222494231035904 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNGfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00001440 Crash State: NULL Sanitizer: address...

PT-2018-11813 · Erik De Castro Lopo +1 · Libsndfile +1

Name of the Vulnerable Software and Affected Versions: libsndfile version 1.0.28 Description: There is a reported memory leak in the psf allocate function in common.c, as demonstrated by sndfile-convert. However, the maintainer and third parties were unable to reproduce the issue and it has been...