FreeBSD : clamav -- multiple vulnerabilities (91ce95d5-cd15-4105-b942-af5ccc7144c1)

Micah Snyder reports : CVE-2020-3327: Fixed a vulnerability in the ARJ archive-parsing module in ClamAV 0.102.2 that could cause a denial-of-service condition. Improper bounds checking of an unsigned variable results in an out-of-bounds read which causes a crash. Special thanks to Daehui Chang an...

tremor:decode_fuzzer: Heap-buffer-overflow in res2_inverse

Detailed Report: https://oss-fuzz.com/testcase?key=5769585533124608 Project: tremor Fuzzing Engine: afl Fuzz Target: decodefuzzer Job Type: aflasantremor Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60e00000062d Crash State: res2inverse mapping0inverse...

leptonica:enhance_fuzzer: Heap-buffer-overflow in pixGetRGBComponentCmap

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5686984648687616 Project: leptonica Fuzzing Engine: honggfuzz Fuzz Target: enhancefuzzer Job Type: honggfuzzasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

envoy:codec_impl_fuzz_test: Stack-use-after-scope in Envoy::Http::Http1::ConnectionImpl::readDisable

Detailed Report: https://oss-fuzz.com/testcase?key=5716313302630400 Project: envoy Fuzzing Engine: afl Fuzz Target: codecimplfuzztest Job Type: aflasanenvoy Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address: 0x7f5c31653660 Crash State:...

wabt:wasm2wat_fuzzer: Segv on unknown address in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=5680885787787264 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wasm2watfuzzer Job Type: libfuzzerasanwabt Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

open62541:fuzz_tcp_message: Use-of-uninitialized-value in UA_Array_copy

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5740902795706368 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzztcpmessage Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

tremor:decode_fuzzer: Crash in _01inverse

Project: https://gitlab.xiph.org/xiph/tremor.git Detailed Report: https://oss-fuzz.com/testcase?key=5087225147817984 Project: tremor Fuzzing Engine: libFuzzer Fuzz Target: decodefuzzer Job Type: libfuzzermsantremor Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x70a06c800114 Crash...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_search_openvpn

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5094191580577792 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireader Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60b0000003d2 Crash State:...

rdkit:smiles_string_to_mol_fuzzer: Container-overflow in yysmiles_parse

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5760260085383168 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzerasanrdkit Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address:...

capstone:fuzz_disasmnext: Global-buffer-overflow in decodeRegisterClass

Detailed Report: https://oss-fuzz.com/testcase?key=5666610666012672 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzerasancapstone Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000099292c Crash State: decodeRegisterClass...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5766939894087680 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::IPv6Layer::parseExtensions

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5766899836387328 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

keystone:fuzz_asm_sparc64be: Crash in llvm_ks::MCEncodedFragmentWithFixups<32u, 4u>::~MCEncodedFragmentWithFixups

Project: https://github.com/keystone-engine/keystone.git Detailed Report: https://oss-fuzz.com/testcase?key=5669285766889472 Project: keystone Fuzzing Engine: afl Fuzz Target: fuzzasmsparc64be Job Type: aflasankeystone Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x6190000364d2 Cra...

libreoffice:xlsxfuzzer: Segv on unknown address in com::sun::star::uno::BaseReference::iquery

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5750470976208896 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: xlsxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Segv on unknown address Crash Addres...

open62541:fuzz_mdns_xht: Use-of-uninitialized-value in txt2sd

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5657499161329664 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzmdnsxht Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

imagemagick:encoder_pgx_fuzzer: Heap-buffer-overflow in PushLongPixel

Detailed Report: https://oss-fuzz.com/testcase?key=5646203397341184 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpgxfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000003b35 Crash State: PushLongPixel...

imagemagick:ping_pict_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5087317020901376 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingpictfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

opus:opus_decode_fuzzer_fixed: Use-of-uninitialized-value in silk_decode_core

Project: https://gitlab.xiph.org/xiph/opus.git Detailed Report: https://oss-fuzz.com/testcase?key=5753048566857728 Project: opus Fuzzing Engine: libFuzzer Fuzz Target: opusdecodefuzzerfixed Job Type: libfuzzermsanopus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libtsm:libtsm_fuzzer: Global-buffer-overflow in vte_write_debug

Project: git://people.freedesktop.org/dvdhrm/libtsm Detailed Report: https://oss-fuzz.com/testcase?key=5687421466574848 Project: libtsm Fuzzing Engine: afl Fuzz Target: libtsmfuzzer Job Type: aflasanlibtsm Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000000591670...

imagemagick:encoder_pict_fuzzer: Use-of-uninitialized-value in ScaleQuantumToChar

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5648722328551424 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpictfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...