OSV-2021-607 Heap-buffer-overflow in TextPool::getPool

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32952 Crash type: Heap-buffer-overflow READ 8 Crash state: TextPool::getPool TextPage::coalesce TextOutputDev::endPage...

OSV-2021-602 Heap-buffer-overflow in read_paint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32913 Crash type: Heap-buffer-overflow READ 1 Crash state: readpaint ttfacegetpaint FTGetPaint...

OSV-2021-600 Heap-buffer-overflow in gif_internal_decode_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32855 Crash type: Heap-buffer-overflow WRITE Crash state: gifinternaldecodeframe gifdecodeframe vipsforeignloadnsgifgenerate...

OSV-2021-597 Stack-buffer-overflow in read_mft_common

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32837 Crash type: Stack-buffer-overflow WRITE 1 Crash state: readmftcommon bool readtagmft1 readb2a...

[SECURITY] Fedora 32 Update: atasm-1.09-1.fc32

ATasm is a 6502 command-line cross-assembler that is compatible with the original Mac/65 macro-assembler released by OSS software. Code development can now be performed using "modern" editors and compiles with lightning speed...

[SECURITY] Fedora 33 Update: atasm-1.09-1.fc33

ATasm is a 6502 command-line cross-assembler that is compatible with the original Mac/65 macro-assembler released by OSS software. Code development can now be performed using "modern" editors and compiles with lightning speed...

OSV-2021-594 Global-buffer-overflow in read_coding_unit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32791 Crash type: Global-buffer-overflow READ 1 Crash state: readcodingunit readcodingquadtree readcodingquadtree...

OSV-2021-593 Heap-use-after-free in std::__1::vector<char, std::__1::allocator<char> >::size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32822 Crash type: Heap-use-after-free READ 8 Crash state: std::1::vector ::size std::1::vector ::resize Assimp::TXmlParser::clear...

OSV-2021-591 Segv on unknown address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32767 Crash type: Segv on unknown address Crash state: NULL...

CVE-2021-3479

There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger excessive consumption of memory, resulting in an impact to system availability...

OSV-2021-585 Heap-buffer-overflow in ebitmap_match_any

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32675 Crash type: Heap-buffer-overflow READ 8 Crash state: ebitmapmatchany avtabmap cilcheckneverallow...

Fedora: Security Advisory for atasm (FEDORA-2021-681b6ea532)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OSV-2021-581 UNKNOWN READ in unsigned short flatbuffers::ReadScalar<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32647 Crash type: UNKNOWN READ Crash state: unsigned short flatbuffers::ReadScalar flatbuffers::Table::GetOptionalFieldOffset flatbuffers::Table::CheckField...

Insecure temporary file in Netflix OSS Hollow

ID: NFLX-2021-001 Title: Local information disclosure in Hollow Release Date: 2021-03-23 Credit: Security Researcher @JLLeitschuh Overview Security researcher @JLLeitschuh reported that Netflix Hollow a Netflix OSS project available here: https://github.com/Netflix/hollow writes to a local...

OSV-2021-577 Segv on unknown address in dwg_free_MTEXTATTRIBUTEOBJECTCONTEXTDATA_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32604 Crash type: Segv on unknown address Crash state: dwgfreeMTEXTATTRIBUTEOBJECTCONTEXTDATAprivate dwgfreeMTEXTATTRIBUTEOBJECTCONTEXTDATA dwgfreevariablenoclass...

OSV-2021-573 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32555 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int OT::RangeRecord::intersects...

OSV-2021-570 Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32554 Crash type: Uncaught exception Crash state: com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject java.base/java.lang.invoke.MethodHandleNatives.refKindIsField...

OSV-2021-564 Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32514 Crash type: Uncaught exception Crash state: com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray java.base/java.lang.Module.isStaticallyExportedOrOpen...

OSV-2021-563 Heap-use-after-free in AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator->

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32459 Crash type: Heap-use-after-free READ 8 Crash state: AK::NonnullOwnPtr::operator- JS::IndexedProperties::arraylikesize JS::IndexedProperties::append...

OSV-2021-562 Segv on unknown address in GC_generic_malloc_many

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32453 Crash type: Segv on unknown address Crash state: GCgenericmallocmany GCmallocatomic Strnewsize...