skia/api_mock_gpu_canvas: Heap-use-after-free in SkColorFilter::filterColor4f

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5140123283881984 Project: skia Fuzzer: libFuzzerskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_JPEGLS_fuzzer: Heap-buffer-overflow in decode_dc_progressive

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5684770334834688 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDJPEGLSfuzzer Fuzz target binary: ffmpegAVCODECIDJPEGLSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_LIBVPX_VP8_fuzzer: Heap-use-after-free in av_packet_ref

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5768227253649408 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBVPXVP8fuzzer Fuzz target binary: ffmpegAVCODECIDLIBVPXVP8fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

envoy/h1_capture_fuzz_test: Heap-use-after-free in Envoy::FakeConnectionBase::close

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=6204353017806848 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 1...

CVE-2018-7162

All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service DoS by causing a node process which provides an http server supporting TLS server to crash. This can be accomplished by sending duplicate/unexpected messages during the handshak...

CVE-2018-7161

All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service DoS by causing a node server providing an http2 server to crash. This can be accomplished by interacting with the http2 server in a manner that triggers a cleanup bug wher...

Pornhub: Blind SQL injection and making any profile comments from any users to disappear using "like" function (2 in 1 issues)

Researcher found a blind SQL injection in the profile comment Like functionality, executing on the second request made for a given comment dislikes. Summary The injection was found manually, used discovery methods are basically the same as described in this awesome article by @gerbenjavado:...

libreoffice/xlsfuzzer: Heap-use-after-free in FreetypeFont::ClearFontOptions

Detailed report: https://oss-fuzz.com/testcase?key=6216096523747328 Project: libreoffice Fuzzer: libFuzzerlibreofficexlsfuzzer Fuzz target binary: xlsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60f00043a838 Crash State:...

gdal/ers_fuzzer: Bad-cast to ERSDatasetERSRasterBand::GetNoDataValue in gdal_fuzzer.cpp

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4850369325694976 Project: gdal Fuzzer: libFuzzergdalersfuzzer Fuzz target binary: ersfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000007fdad20 Crash State:...

imagemagick/ping_mvg_fuzzer: Heap-use-after-free in TracePoint

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5550962654576640 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

skia/api_raster_n32_canvas: Heap-buffer-overflow in void SkMatrixConvolutionImageFilter::filterPixels<RepeatPixelFetcher, true>

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5637330823020544 Project: skia Fuzzer: aflskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Addres...

libreoffice/mtpfuzzer: Heap-buffer-overflow in rtl_uStringbuffer_insert

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4782490932740096 Project: libreoffice Fuzzer: afllibreofficemtpfuzzer Fuzz target binary: mtpfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2...

envoy/h1_capture_fuzz_test: Heap-use-after-free in Envoy::FakeRawConnection::FakeRawConnection

Detailed report: https://oss-fuzz.com/testcase?key=6215556767154176 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6120000fdf68 Crash State:...

libreoffice/mtpfuzzer: Heap-buffer-overflow in rtl_uStringbuffer_remove

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4691942821593088 Project: libreoffice Fuzzer: afllibreofficemtpfuzzer Fuzz target binary: mtpfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2...

wireshark/fuzzshark_ip_proto-udp: Heap-use-after-free in g_snprintf

Detailed report: https://oss-fuzz.com/testcase?key=5954570848043008 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x60d0003b4520 Crash State:...

curl/curl_fuzzer_rtsp: Heap-buffer-overflow in Curl_follow

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=6284782160838656 Project: curl Fuzzer: libFuzzercurlfuzzerrtsp Fuzz target binary: curlfuzzerrtsp Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

imagemagick/ping_mvg_fuzzer: Crash in TracePoint

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4850678078898176 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: UNKNOWN...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in dissect_rtcp

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5744218113835008 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

graphicsmagick/coder_DPX_fuzzer: Heap-buffer-overflow in ReadDPXImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4796548471848960 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderDPXfuzzer Fuzz target binary: coderDPXfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

imagemagick/encoder_heic_fuzzer: Heap-buffer-overflow in decoder_context::process_reference_picture_set

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5750450306416640 Project: imagemagick Fuzzer: aflimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...