openjph:ojph_expand_fuzz_target: Use-of-uninitialized-value in ojph::local::tile::pull

Project: https://github.com/aous72/OpenJPH.git Detailed Report: https://oss-fuzz.com/testcase?key=5957724247752704 Project: openjph Fuzzing Engine: libFuzzer Fuzz Target: ojphexpandfuzztarget Job Type: libfuzzermsanopenjph Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

openjph:ojph_expand_fuzz_target: Crash in ojph::local::precinct::parse

Project: https://github.com/aous72/OpenJPH.git Detailed Report: https://oss-fuzz.com/testcase?key=4595064797200384 Project: openjph Fuzzing Engine: libFuzzer Fuzz Target: ojphexpandfuzztarget Job Type: libfuzzerasanopenjph Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7ad7ba71f800...

openjph:ojph_expand_fuzz_target: Use-of-uninitialized-value in ojph::local::tile::finalize_alloc

Project: https://github.com/aous72/OpenJPH.git Detailed Report: https://oss-fuzz.com/testcase?key=5846319028830208 Project: openjph Fuzzing Engine: libFuzzer Fuzz Target: ojphexpandfuzztarget Job Type: libfuzzermsanopenjph Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

openjph:ojph_expand_fuzz_target: Crash in ojph::local::precinct::parse

Project: https://github.com/aous72/OpenJPH.git Detailed Report: https://oss-fuzz.com/testcase?key=5440108194234368 Project: openjph Fuzzing Engine: libFuzzer Fuzz Target: ojphexpandfuzztarget Job Type: libfuzzerasanopenjph Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x7e626e7ba800 Crash...

openjph:ojph_expand_fuzz_target: Heap-buffer-overflow in ojph::local::resolution::finalize_alloc

Project: https://github.com/aous72/OpenJPH.git Detailed Report: https://oss-fuzz.com/testcase?key=5603613035790336 Project: openjph Fuzzing Engine: afl Fuzz Target: ojphexpandfuzztarget Job Type: aflasanopenjph Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

openjph:ojph_expand_fuzz_target: Use-of-uninitialized-value in ojph::local::tile::finalize_alloc

Project: https://github.com/aous72/OpenJPH.git Detailed Report: https://oss-fuzz.com/testcase?key=5205194525966336 Project: openjph Fuzzing Engine: libFuzzer Fuzz Target: ojphexpandfuzztarget Job Type: libfuzzermsanopenjph Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

openjph:ojph_expand_fuzz_target: Crash in ojph::local::precinct::parse

Project: https://github.com/aous72/OpenJPH.git Detailed Report: https://oss-fuzz.com/testcase?key=6675979870470144 Project: openjph Fuzzing Engine: afl Fuzz Target: ojphexpandfuzztarget Job Type: aflasanopenjph Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7a2e03bb1800 Crash State...

openjph:ojph_expand_fuzz_target: Stack-buffer-overflow in ojph::local::ojph_decode_codeblock_avx2

Project: https://github.com/aous72/OpenJPH.git Detailed Report: https://oss-fuzz.com/testcase?key=5660297254993920 Project: openjph Fuzzing Engine: libFuzzer Fuzz Target: ojphexpandfuzztarget Job Type: libfuzzerasanopenjph Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 2 Crash Address...

openjph:ojph_expand_fuzz_target: Crash in ojph::local::param_qcd::get_Kmax

Project: https://github.com/aous72/OpenJPH.git Detailed Report: https://oss-fuzz.com/testcase?key=6641027210608640 Project: openjph Fuzzing Engine: libFuzzer Fuzz Target: ojphexpandfuzztarget Job Type: libfuzzerasanopenjph Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7d39636e05f4...

openjph:ojph_expand_fuzz_target: Null-dereference READ in ojph::local::subband::pull_line

Project: https://github.com/aous72/OpenJPH.git Detailed Report: https://oss-fuzz.com/testcase?key=6471100476489728 Project: openjph Fuzzing Engine: libFuzzer Fuzz Target: ojphexpandfuzztarget Job Type: libfuzzerasanopenjph Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

FreeBSD : OpenJPH < 0.24.5 -- multiple vulnerabilities (77bac392-ba98-11f0-aada-f59a8ea34d12)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 77bac392-ba98-11f0-aada-f59a8ea34d12 advisory. Aous Naman reports several vulnerabilities fixed in OpenJPH versions up to 0.24.5 and credits Cary...

OpenEXR < 3.4.3 -- multiple vulnerabilities

Cary Phillips reports: Patch release that addresses several bugs, primarily involving properly rejecting corrupt input data. He goes on to report various relevant items including heap buffer overflows, use-after-free, use of uninitialized memory and other bugs, several of them found by OSS-fuzz,...