poppler/pdf_fuzzer: Use-of-uninitialized-value in TT_Process_Simple_Glyph

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5689090034368512 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

freetype2/ftfuzzer: Crash in TT_Process_Simple_Glyph

Detailed report: https://oss-fuzz.com/testcase?key=5666646934421504 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerubsanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fff00000009 Crash State: TTProcessSimpleGlyph...

karchive/karchive_fuzzer: Use-of-uninitialized-value in QByteArray::endsWith

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5699436728025088 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

envoy/header_map_impl_fuzz_test: Heap-buffer-overflow in Envoy::Http::HeaderString::setCopy

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5182326490791936 Project: envoy Fuzzer: libFuzzerenvoyheadermapimplfuzztest Fuzz target binary: headermapimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-buffer-overflo...

open62541/fuzz_json_decode_encode: Use-of-uninitialized-value in UA_base64

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5748564526891008 Project: open62541 Fuzzer: libFuzzeropen62541fuzzjsondecodeencode Fuzz target binary: fuzzjsondecodeencode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type:...

open62541/fuzz_json_decode_encode: Heap-buffer-overflow in UA_unbase64

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5207216900014080 Project: open62541 Fuzzer: libFuzzeropen62541fuzzjsondecodeencode Fuzz target binary: fuzzjsondecodeencode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

open62541/fuzz_json_decode: Use-of-uninitialized-value in Variant_decodeJson

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5671796885422080 Project: open62541 Fuzzer: libFuzzeropen62541fuzzjsondecode Fuzz target binary: fuzzjsondecode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type:...

open62541/fuzz_json_decode_encode: Heap-buffer-overflow in searchObjectForKeyRec

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5163330924183552 Project: open62541 Fuzzer: libFuzzeropen62541fuzzjsondecodeencode Fuzz target binary: fuzzjsondecodeencode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

skia/sksl2spirv: Use-of-uninitialized-value in std::__1::__constrain_hash

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5680592508682240 Project: skia Fuzzer: libFuzzerskiasksl2spirv Fuzz target binary: sksl2spirv Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

Arbitrary Code Execution

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Buffer Over-Read

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Buffer Over-Read

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Arbitrary Code Execution

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Information Disclosure

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Integer Overflows

The X11 Xorg libraries provide library routines that are used within all X Window applications. Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol da...

Denial Of Service (DoS)

Red Hat Enterprise Linux OpenStack Platform provides the facilities for building a private or public infrastructure-as-a-service IaaS cloud running on commonly available physical hardware. This update addresses the following issues: This package rebases mariadb-galera to 5.5.42, fixing an issue...

Denial Of Service (DoS)

Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. A flaw was found in the way NSS handled...

Denial Of Service (DoS)

Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. A flaw was found in the way NSS handled...

Denial Of Service (DoS)

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...

Denial Of Service (DoS)

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...