libheif:color-conversion-fuzzer: Heap-buffer-overflow in Op_YCbCr_to_RGB<unsigned char>::convert_colorspace

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=4811360620511232 Project: libheif Fuzzing Engine: honggfuzz Fuzz Target: color-conversion-fuzzer Job Type: honggfuzzasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

php:php-fuzz-parser: Heap-use-after-free in shutdown_executor

Detailed Report: https://oss-fuzz.com/testcase?key=6273714575114240 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0xf38297cc Crash State: shutdownexecutor zenddeactivate...

Ubuntu 16.04 LTS / 18.04 LTS : Squid regression (USN-4446-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4446-2 advisory. USN-4446-1 fixed vulnerabilities in Squid. The update introduced a regression when using Squid with the icap or ecap protocols. This update fixes the...

monero:cold-outputs_fuzz_tests: Crash in tools::wallet2::import_outputs

Project: https://github.com/monero-project/monero.git Detailed Report: https://oss-fuzz.com/testcase?key=5443075625975808 Project: monero Fuzzing Engine: libFuzzer Fuzz Target: cold-outputsfuzztests Job Type: libfuzzerasanmonero Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

open62541:fuzz_binary_message: Heap-use-after-free in UA_NodeMap_delete

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5642268793634816 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzbinarymessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

sqlite3:ossfuzz: Use-of-uninitialized-value in sqlite3Atoi64

Detailed Report: https://oss-fuzz.com/testcase?key=5200300586303488 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sqlite3Atoi64 computeNumericType numericType...

qt:qtbase_gui_image_qimage_loadfromdata: Heap-buffer-overflow in Dasher::Dasher

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5157481003876352 Project: qt Fuzzing Engine: honggfuzz Fuzz Target: qtbaseguiimageqimageloadfromdata Job Type: honggfuzzasanqt Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

USN-4446-2: Squid regression

USN-4446-1 fixed vulnerabilities in Squid. The update introduced a regression when using Squid with the icap or ecap protocols. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Jeriko One discovered that Squid incorrectly handled caching certain...

assimp:assimp_fuzzer: Crash in Assimp::ObjFileMtlImporter::getFloatValue

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5086898182422528 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000004080 Crash Stat...

USN-4436-2: librsvg regression | Cloud Foundry

Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description USN-4436-1 fixed a vulnerability in librsvg. The upstream fix caused a regression when parsing certain SVG files. This update backs out the fix pending further investigation. Original advisory details: I...

poppler:pdf_fuzzer: Negative-size-param in BaseMemStream<char const>::getChars

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5102286278492160 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

DLA-2338-2 proftpd-dfsg - regression update

Bulletin has no description...

imagemagick:ping_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parse_sinar_ia

Detailed Report: https://oss-fuzz.com/testcase?key=4967658163011584 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::parsesinaria...

libzmq:test_socket_options_fuzzer: Heap-buffer-overflow in zmq_z85_decode

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5458470013501440 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testsocketoptionsfuzzer Job Type: libfuzzerasanlibzmq Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

open62541:fuzz_binary_decode: Use-of-uninitialized-value in DiagnosticInfo_clear

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=4959778072428544 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzbinarydecode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::RangeEqualsVisitor::Visit

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6310318291288064 Project: arrow Fuzzing Engine: honggfuzz Fuzz Target: arrow-ipc-stream-fuzz Job Type: honggfuzzasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

libzmq:test_socket_options_fuzzer: Heap-buffer-overflow in test_socket_options_fuzzer.cpp

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=4903899407056896 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testsocketoptionsfuzzer Job Type: libfuzzerasani386libzmq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

yara:macho_fuzzer: Heap-buffer-overflow in macho_is_32

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5708023786635264 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: machofuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x622000002e03...

leptonica:pix4_fuzzer: Use-of-uninitialized-value in pixGetCmapHistogramInRect

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=4713657823657984 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: pix4fuzzer Job Type: libfuzzermsanleptonica Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

llvm:clang-fuzzer: Use-of-uninitialized-value in clang::Parser::ParseCastExpression

Detailed Report: https://oss-fuzz.com/testcase?key=5079246079524864 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::Parser::ParseCastExpression...