OSV-2022-983 Heap-buffer-overflow in SkPathPriv::IsRectContour

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51909 Crash type: Heap-buffer-overflow READ 4 Crash state: SkPathPriv::IsRectContour SkPath::isRect SkCanvas::clipPath...

OSV-2021-1071 Heap-use-after-free in SkCanvas::MCRec::MCRec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36644 Crash type: Heap-use-after-free READ 8 Crash state: SkCanvas::MCRec::MCRec SkCanvas::MCRec& SkTArray::emplacebackSkCanvas::MCRec& SkCanvas::internalSave...

PT-2021-27677

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash type has been identified. The crash state involves the SkCanvas::MCRec::MCRec and SkCanvas::MCRec& SkTArray::emplace...

PT-2021-27678

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the SkBaseDevice::save function, which is called by...

skia:api_image_filter: Use-of-uninitialized-value in SkBaseDevice::save

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6626675738673152 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apiimagefilter Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

skia:api_null_canvas: Heap-use-after-free in SkCanvas::MCRec::MCRec

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5060908098387968 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apinullcanvas Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61700000032...

Hyland Perceptive Document Filters OpenDocument to JPEG conversion SkCanvas Code Execution vulnerability(CVE-2018-3845)

Summary An exploitable double free exists in the OpenDocument to JPEG conversion functionality of the Hyland Perspective Document Filters version 11.4.0.2647. A crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution. Tested Versions Perceptive...

Hyland Perceptive Document Filters SkCanvas Object Double Release Vulnerability

Hyland Perceptive Document Filters is a toolkit that allows application developers to recognize and extract metadata, as well as convert and render almost any document type. Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux A SkCanvas object double release vulnerability exist...

Hyland Perceptive Document Filters SkCanvas Object Double Release Vulnerability

Hyland Perceptive Document Filters is a toolkit that allows application developers to recognize and extract metadata, as well as convert and render almost any document type. Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux A SkCanvas object double release vulnerability exist...

Double free

In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...

CVE-2018-3855

In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...

CVE-2018-3845

In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...

Double free

In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...

CVE-2018-3845

In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...

CVE-2018-3855

CVE-2018-3855 affects Hyland Perceptive Document Filters 11.4.0.2647. The DOC-to-HTML conversion path contains updateNumbering code that can be triggered by a crafted OpenDocument, causing a stack-based overflow/incorrect writes and remote code execution. Public writeups (Talos report TALOS-2018-...

CVE-2018-3845

CVE-2018-3845 affects Hyland Perceptive Document Filters 11.4.0.2647 (x86/x64 Windows/Linux) and related builds, in the OpenDocument to JPEG conversion path. The root cause is a double release/double free of a SkCanvas object during the conversion process, caused by a faulty lifecycle/destruction...

CVE-2018-3855

In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...

CVE-2018-3855: Double Free

In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...

CVE-2018-3845: Double Free

In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution...

Hyland Perceptive Document Filters OpenDocument to JPEG conversion SkCanvas Code Execution vulnerability

Summary An exploitable double free exists in the OpenDocument to JPEG conversion functionality of the Hyland Perspective Document Filters version 11.4.0.2647. A crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution. Tested Versions Perceptive...