graphicsmagick/coder_SGI_fuzzer: Use-of-uninitialized-value in SyncImageCallBack

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6189198101970944 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderSGIfuzzer Fuzz target binary: coderSGIfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

imagemagick/encoder_mpc_fuzzer: Heap-buffer-overflow in ReadMPCImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5434829609893888 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermpcfuzzer Fuzz target binary: encodermpcfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

Debian DSA-4123-1 : drupal7 - security update

Multiple vulnerabilities have been found in the Drupal content management framework. For additional information, please refer to the upstream advisory at https://www.drupal.org/sa-core-2018-001 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

skcms/iccprofile_transform: Index-out-of-bounds in read_mft_common

Project: https://skia.googlesource.com/skcms.git Detailed report: https://oss-fuzz.com/testcase?key=5168080767418368 Project: skcms Fuzzer: libFuzzerskcmsiccprofiletransform Fuzz target binary: iccprofiletransform Job Type: libfuzzerubsanskcms Platform Id: linux Crash Type: Index-out-of-bounds...

Debian DSA-4118-1 : tomcat-native - security update

Jonas Klempel reported that tomcat-native, a library giving Tomcat access to the Apache Portable Runtime APR library's network connection socket implementation and random-number generator, does not properly handle fields longer than 127 bytes when parsing the AIA-Extension field of a client...

libreoffice/pptfuzzer: Heap-use-after-free in SdrObject::RemoveListener

Detailed report: https://oss-fuzz.com/testcase?key=5653960519057408 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61500015b3d8 Crash State:...

chakra: Stack-use-after-scope in char16_t const* PlatformAgnostic::Intl::FormatNumber<int>

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=6197060945575936 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Stack-use-after-scope READ 3 Crash Address: 0x7f3d2ffda0c0 Crash State: char16t const...

Stable Channel Update for Desktop

The stable channel has been updated to 64.0.3282.167 for Mac & Linux, and 64.0.3282.167/168 for Windows, which will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We wil...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in pdf_parse_file_spec

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5996991491342336 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

imagemagick/encoder_mpc_fuzzer: Use-of-uninitialized-value in GetEXIFProperty

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5736450319450112 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermpcfuzzer Fuzz target binary: encodermpcfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

graphicsmagick/coder_PICT_fuzzer: Unknown signal in DestroyCacheInfo

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6624475274543104 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPICTfuzzer Fuzz target binary: coderPICTfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

skia/image_filter_deserialize: Crash in void add_coverage_delta_segment<true, SkCoverageDeltaList>

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6370761758474240 Project: skia Fuzzer: aflskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: aflasanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

graphicsmagick/coder_PICT_fuzzer: Unknown signal in _int_free

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5537542532235264 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPICTfuzzer Fuzz target binary: coderPICTfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

[SECURITY] [DSA 4108-1] mailman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4108-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst February 09, 2018 https://www.debian.org/security/faq -...

yara/dex_fuzzer: Heap-buffer-overflow in dex_parse

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5104899873308672 Project: yara Fuzzer: aflyaradexfuzzer Fuzz target binary: dexfuzzer Job Type: aflasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62e0000178f8...

imagemagick/encoder_mvg_fuzzer: Heap-buffer-overflow in FileToBlob

Detailed report: https://oss-fuzz.com/testcase?key=4892658276237312 Project: imagemagick Fuzzer: aflimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x63200002c801 Crash State:...

graphicsmagick/coder_PCD_fuzzer: Unknown signal in AllocateThreadViewDataSet

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6010870208397312 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPCDfuzzer Fuzz target binary: coderPCDfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

libreoffice/htmlfuzzer: Heap-use-after-free in SwTextFootnote::GetTextNode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4530720392347648 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

graphicsmagick/coder_PCT_fuzzer: Unknown signal in _int_free

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4950737256710144 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPCTfuzzer Fuzz target binary: coderPCTfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_PCT_fuzzer: Unknown signal in cfree

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6411297525596160 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPCTfuzzer Fuzz target binary: coderPCTfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...