brunsli:fuzz_decode: Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

Project: https://github.com/google/brunsli.git Detailed Report: https://oss-fuzz.com/testcase?key=6654825878650880 Project: brunsli Fuzzing Engine: libFuzzer Fuzz Target: fuzzdecode Job Type: libfuzzermsanbrunsli Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...

Design/Logic Flaw

Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to cause a denial of service application crash or execute arbitrary code via an Audible Audio .aa file with a crafted 1 nlen or 2 vlen Tag...

CVE-2009-0135

Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to execute arbitrary code via an Audible Audio .aa file with a large 1 nlen or 2 vlen Tag value, each of which triggers a heap-based buffer...

CVE-2009-0136

The CVE-2009-0136 issue affects Amarok 1.4.10–2.0.1 through an insecure parsing path in Audible Audio (.aa) files. Specifically, multiple array index errors in Audible::Tag::readTag (metadata/audible/audibletag.cpp) can lead to an invalid pointer dereference or writing a 0x00 byte, after an alloc...