poppler/pdf_fuzzer: Use-of-uninitialized-value in Decrypt::makeFileKey2

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=6307526613139456 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

libvirt security update

CentOS Errata and Security Advisory CESA-2018:1632 An update for libvirt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

poppler/pdf_fuzzer: Use-of-uninitialized-value in JBIG2Stream::readSymbolDictSeg

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5760120146362368 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2018:1651 An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: rhevm-setup-plugins security update

An update for rhevm-setup-plugins is now available for RHEV Manager version 3.6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

poppler/pdf_fuzzer: Heap-buffer-overflow in Splash::fillGlyph2

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5133947200602112 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzerasanpoppler Platform Id: linux Crash Type: Heap-buffer-overflow...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6224172706430976 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

mbedtls/fuzz_privkey: Heap-buffer-overflow in pk_get_ecparams

Project: https://github.com/ARMmbed/mbedtls.git https://github.com/catenacyber/mbedtls.git Detailed report: https://oss-fuzz.com/testcase?key=5922466286272512 Project: mbedtls Fuzzer: aflmbedtlsfuzzprivkey Fuzz target binary: fuzzprivkey Job Type: aflasanmbedtls Platform Id: linux Crash Type:...

graphicsmagick/coder_BIGTIFF_fuzzer: Heap-buffer-overflow in put1bitbwtile

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4971411109052416 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderBIGTIFFfuzzer Fuzz target binary: coderBIGTIFFfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_MPEG4_fuzzer: Heap-buffer-overflow in ff_h263_pred_motion

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5385746536988672 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMPEG4fuzzer Fuzz target binary: ffmpegAVCODECIDMPEG4fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overfl...

mbedtls/fuzz_dtlsclient: Heap-buffer-overflow in ssl_parse_certificate_request

Project: https://github.com/ARMmbed/mbedtls.git https://github.com/catenacyber/mbedtls.git Detailed report: https://oss-fuzz.com/testcase?key=6329468963520512 Project: mbedtls Fuzzer: libFuzzermbedtlsfuzzdtlsclient Fuzz target binary: fuzzdtlsclient Job Type: libfuzzerasanmbedtls Platform Id: lin...

skia/image_filter_deserialize_width: Use-of-uninitialized-value in SkBlurMaskFilterImpl::filterRRectToNine

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5735437942390784 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserializewidth Fuzz target binary: imagefilterdeserializewidth Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...

qpid-proton/fuzz-connection-driver: Crash in __msan_memmove.part.53

Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=6266408911503360 Project: qpid-proton Fuzzer: libFuzzerqpid-protonfuzz-connection-driver Fuzz target binary: fuzz-connection-driver Job Type: libfuzzermsanqpid-proton Platform Id: linux Crash Typ...

imagemagick/encoder_dng_fuzzer: Stack-buffer-overflow in LibRaw::kodak_radc_load_raw

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5751921557110784 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

qpid-proton/fuzz-connection-driver: Heap-use-after-free in pni_sniff_header

Project: https://github.com/apache/qpid-proton.git Detailed report: https://oss-fuzz.com/testcase?key=5972719047802880 Project: qpid-proton Fuzzer: aflqpid-protonfuzz-connection-driver Fuzz target binary: fuzz-connection-driver Job Type: aflasanqpid-proton Platform Id: linux Crash Type:...

CVE-2018-11037

In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote attackers to cause an information leak via a crafted file...

gdal/dxf_fuzzer: Crash in OGRSimpleCurve::getPoint

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6213050452410368 Project: gdal Fuzzer: libFuzzergdaldxffuzzer Fuzz target binary: dxffuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Cras...

skia/api_mock_gpu_canvas: Use-of-uninitialized-value in sse2::store_bgra

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6083875636772864 Project: skia Fuzzer: libFuzzerskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

graphicsmagick/coder_PTIF_fuzzer: Heap-double-free in Magick::BlobRef::~BlobRef

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5669995324375040 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPTIFfuzzer Fuzz target binary: coderPTIFfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type:...

imagemagick/encoder_mvg_fuzzer: Use-of-uninitialized-value in ClipPixelCacheNexus

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5736248416141312 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...