imagemagick/crop_fuzzer: Use-of-uninitialized-value in ParseCommandOption

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6232677838487552 Project: imagemagick Fuzzer: libFuzzerimagemagickcropfuzzer Fuzz target binary: cropfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/huffman_decode_fuzzer: Use-of-uninitialized-value in ReadPGXImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5828212144734208 Project: imagemagick Fuzzer: libFuzzerimagemagickhuffmandecodefuzzer Fuzz target binary: huffmandecodefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type...

imagemagick/encoder_svgz_fuzzer: Use-of-uninitialized-value in ReadBlobLZWByte

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5292498759974912 Project: imagemagick Fuzzer: libFuzzerimagemagickencodersvgzfuzzer Fuzz target binary: encodersvgzfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_epdf_fuzzer: Use-of-uninitialized-value in PushColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5270640597663744 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderepdffuzzer Fuzz target binary: encoderepdffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_vda_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5243340443353088 Project: imagemagick Fuzzer: libFuzzerimagemagickencodervdafuzzer Fuzz target binary: encodervdafuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_k_fuzzer: Use-of-uninitialized-value in ConstantString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5202761055469568 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderkfuzzer Fuzz target binary: encoderkfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_b_fuzzer: Use-of-uninitialized-value in ReadBlobString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4831902440620032 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderbfuzzer Fuzz target binary: encoderbfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_pcds_fuzzer: Use-of-uninitialized-value in ReadVIFFImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4766863213985792 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpcdsfuzzer Fuzz target binary: encoderpcdsfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

Microsoft Edge Chakra JIT - Escape Analysis Bug

/ Escape analysis: https://en.wikipedia.org/wiki/Escapeanalysis Chakra fails to detect if "tmp" escapes the scope, allocates it to the stack. This may lead to dereference uninitialized stack values. PoC: / function opt let tmp = ; tmp0 = tmp; return tmp0; function main for let i = 0; i 0x1000; i+...

librawspeed/TiffDecoderFuzzer-DcrDecoder: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6168972937396224 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-DcrDecoder Fuzz target binary: TiffDecoderFuzzer-DcrDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

Debian DSA-4064-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2017-15407 Ned Williamson discovered an out-of-bounds write issue. - CVE-2017-15408 Ke Liu discovered a heap overflow issue in the pdfium library. - CVE-2017-15409 An out-of-bounds write issue was discovered in the sk...

unrar/unrar_fuzzer: Use-of-uninitialized-value in Archive::ConvertFileHeader

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=5344878679556096 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

dlplibs/bmifuzzer: Use-of-uninitialized-value in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<unsi

Detailed report: https://oss-fuzz.com/testcase?key=5836862116593664 Project: dlplibs Fuzzer: libFuzzerdlplibsbmifuzzer Fuzz target binary: bmifuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::treenodebase&...

dlplibs/wrifuzzer: Use-of-uninitialized-value in __gxx_personality_v0

Detailed report: https://oss-fuzz.com/testcase?key=4921771384897536 Project: dlplibs Fuzzer: libFuzzerdlplibswrifuzzer Fuzz target binary: wrifuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gxxpersonalityv0...

unrar/unrar_fuzzer: NULL

Detailed report: https://oss-fuzz.com/testcase?key=6436091927199744 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: NULL Sanitizer: memory MSAN Recommende...

unrar/unrar_fuzzer: Use-of-uninitialized-value in SetExtraInfo20

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=5407414712008704 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

librawspeed/RawParserFuzzer-GetDecoder-Decode: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6696296816574464 Project: librawspeed Fuzzer: libFuzzerlibrawspeedRawParserFuzzer-GetDecoder-Decode Fuzz target binary: RawParserFuzzer-GetDecoder-Decode Job Type: libfuzzermsanlibrawspeed...

yara/rules_fuzzer: Use-of-uninitialized-value in hex_yylex

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5637751744495616 Project: yara Fuzzer: libFuzzeryararulesfuzzer Fuzz target binary: rulesfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

yara/rules_fuzzer: Use-of-uninitialized-value in yr_arena_destroy

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=6753625905823744 Project: yara Fuzzer: libFuzzeryararulesfuzzer Fuzz target binary: rulesfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

yara/rules_fuzzer: Use-of-uninitialized-value in re_yy_scan_string

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=4791136381042688 Project: yara Fuzzer: libFuzzeryararulesfuzzer Fuzz target binary: rulesfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...