OSV-2021-242 Heap-buffer-overflow in rans_uncompress_to_4x16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29939 Crash type: Heap-buffer-overflow READ 1 Crash state: ransuncompressto4x16 ransdecode uncompress...

OSV-2021-237 Heap-use-after-free in sampled_data_sample

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29903 Crash type: Heap-use-after-free WRITE 4 Crash state: sampleddatasample sampleddatacontinue interp...

OSV-2021-236 Heap-use-after-free in DatasetAdd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29886 Crash type: Heap-use-after-free READ 4 Crash state: DatasetAdd DetectDatasetBufferMatch DetectEngineContentInspection...

OSV-2021-235 Global-buffer-overflow in QSvgSwitch::draw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29873 Crash type: Global-buffer-overflow READ 1 Crash state: QSvgSwitch::draw QSvgTinyDocument::draw QSvgTinyDocument::draw...

openSUSE Security Update : wavpack (openSUSE-2021-154)

This update for wavpack fixes the following issues : - Update to version 5.4.0 - CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples bsc1180414 - fixed: disable A32 asm code when building for Apple silicon - fixed: issues with Adobe-style floating-point WAV files - added:...

OPENSUSE-SU-2021:0154-1 Security update for wavpack

This update for wavpack fixes the following issues: - Update to version 5.4.0 CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples bsc1180414 fixed: disable A32 asm code when building for Apple silicon fixed: issues with Adobe-style floating-point WAV files added: --normalize-floats...

OSV-2021-231 Heap-buffer-overflow in int32_get_blk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29855 Crash type: Heap-buffer-overflow READ 1 Crash state: int32getblk cramreadSAMhdr cramdopen...

Security update for wavpack (moderate)

openSUSE Security Update: Security update for wavpack Announcement ID: openSUSE-SU-2021:0154-1 Rating: moderate References: 1091340 1091341 1091342 1091343 1091344 1180414 Cross-References: CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 CVE-2018-19840 CVE-2018-19841...

Security update for wavpack (moderate)

openSUSE Security Update: Security update for wavpack Announcement ID: openSUSE-SU-2021:0153-1 Rating: moderate References: 1091340 1091341 1091342 1091343 1091344 1180414 Cross-References: CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 CVE-2018-19840 CVE-2018-19841...

OSV-2021-223 Heap-buffer-overflow in fdilate_1_56

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29819 Crash type: Heap-buffer-overflow READ 4 Crash state: fdilate156 fmorphopgenlow1 pixFMorphopGen1...

OSV-2021-222 Heap-buffer-overflow in arith_uncompress_to

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29792 Crash type: Heap-buffer-overflow READ 1 Crash state: arithuncompressto cramuncompressblock cramreadSAMhdr...

OSV-2021-221 Heap-buffer-overflow in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29816 Crash type: Heap-buffer-overflow READ 4 Crash state: bloscd bloscgetitem bloscgetitem...

OSV-2021-220 Heap-buffer-overflow in rans_uncompress_to_4x16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29795 Crash type: Heap-buffer-overflow READ 1 Crash state: ransuncompressto4x16 ransuncompress4x16 cramuncompressblock...

OSV-2021-219 UNKNOWN READ in H5HG__cache_heap_deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29759 Crash type: UNKNOWN READ Crash state: H5HGcacheheapdeserialize H5Cloadentry H5Cprotect...

SUSE SLED15 / SLES15 Security Update : wavpack (SUSE-SU-2021:0186-1)

This update for wavpack fixes the following issues : Update to version 5.4.0 - CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples bsc1180414 - fixed: disable A32 asm code when building for Apple silicon - fixed: issues with Adobe-style floating-point WAV files - added:...

OSV-2020-2304 Use-of-uninitialized-value in memory_test

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29731 Crash type: Use-of-uninitialized-value Crash state: memorytest fuzzersend wolfSSHSendPacket...

OSV-2021-213 Heap-use-after-free in ZSTD_freeDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29705 Crash type: Heap-use-after-free READ Crash state: ZSTDfreeDDict blosc2freectx blosc2schunkfree...

OSV-2021-212 Heap-buffer-overflow in pdf_get_xref_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29728 Crash type: Heap-buffer-overflow READ 4 Crash state: pdfgetxrefentry pdfcacheobject pdfresolveindirect...

OSV-2021-211 Heap-use-after-free in __libcpp_strpbrk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29698 Crash type: Heap-use-after-free READ 2 Crash state: libcppstrpbrk strpbrk tesseract::Tesseract::oneellconflict...

OSV-2020-2303 Use-of-uninitialized-value in Splash::pipeRunSimpleXBGR8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29651 Crash type: Use-of-uninitialized-value Crash state: Splash::pipeRunSimpleXBGR8 Splash::drawSpan Splash::fillWithPattern...