skia/api_raster_n32_canvas: Crash in SkScan::DAAFillPath

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5713029673517056 Project: skia Fuzzer: aflskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: aflasanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x01018100810...

keystone/fuzz_asm_x86_64: Use-of-uninitialized-value in X86AsmParser::ParseIntelOperand

Detailed report: https://oss-fuzz.com/testcase?key=5742603060903936 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmx8664 Fuzz target binary: fuzzasmx8664 Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Updated kernel packages fix security vulnerabilities

This kernel update is based on the upstream 4.14.70 and adds additional fixes for the L1TF security issues. It also fixes at least the following security issues: Linux kernel from versions 3.9 and up, is vulnerable to a denial of service attack with low rates of specially modified packets targeti...

open62541/fuzz_binary_message: Use-of-uninitialized-value in UA_WorkQueue_cleanup

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5766606660042752 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type:...

unicorn/fuzz_emu_arm64_arm: Crash in reset_temp_aarch64

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5758411325571072 Project: unicorn Fuzzer: aflunicornfuzzemuarm64arm Fuzz target binary: fuzzemuarm64arm Job Type: aflasanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

openvswitch/ofp_print_target: Use-of-uninitialized-value in flow_wildcards_init_for_packet

Detailed report: https://oss-fuzz.com/testcase?key=5758815018942464 Project: openvswitch Fuzzer: libFuzzeropenvswitchofpprinttarget Fuzz target binary: ofpprinttarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

openvswitch/flow_extract_target: Use-of-uninitialized-value in miniflow_map_init

Detailed report: https://oss-fuzz.com/testcase?key=5706708475707392 Project: openvswitch Fuzzer: libFuzzeropenvswitchflowextracttarget Fuzz target binary: flowextracttarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

openvswitch/flow_extract_target: Use-of-uninitialized-value in is_nd

Detailed report: https://oss-fuzz.com/testcase?key=5697050302218240 Project: openvswitch Fuzzer: libFuzzeropenvswitchflowextracttarget Fuzz target binary: flowextracttarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: isn...

radare2/ia_fuzz: Heap-buffer-overflow in r_str_utf16_to_utf8

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5766541564444672 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

CVE-2018-11832

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of input size validation before copying to buffer in PMIC function can lead to heap overflow...

unicorn/fuzz_emu_m68k_be: Crash in [stack]

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5742284360908800 Project: unicorn Fuzzer: libFuzzerunicornfuzzemum68kbe Fuzz target binary: fuzzemum68kbe Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash...

graphicsmagick/coder_MNG_fuzzer: Heap-buffer-overflow in mng_get_long

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5170869563817984 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMNGfuzzer Fuzz target binary: coderMNGfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type:...

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on the upstream 4.14.69 and adds additional fixes for the L1TF and Spectre security issues. Other fixes in this update: all SPIINTELSPI config options have been disable to prevent a potential bios corrupting bug mga23560 For other changes in this update, see the...

skia/api_mock_gpu_canvas: Use-of-uninitialized-value in SkRect::setBoundsCheck

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5695147799478272 Project: skia Fuzzer: libFuzzerskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

skia/api_image_filter: Heap-buffer-overflow in SkPath::Iter::doNext

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5690383439233024 Project: skia Fuzzer: libFuzzerskiaapiimagefilter Fuzz target binary: apiimagefilter Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

glib/fuzz_variant_binary: Heap-buffer-overflow in fast_validate

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed report: https://oss-fuzz.com/testcase?key=5703988117241856 Project: glib Fuzzer: aflglibfuzzvariantbinary Fuzz target binary: fuzzvariantbinary Job Type: aflasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

(RHSA-2018:2684) Low: .NET Core Runtime 2.1.4 and SDK 2.1.402 for Red Hat Enterprise Linux

.NET Core is a managed software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. A new version of .NET Core that addresses several security vulnerabilities is now available. The updated version of the runtime is 2.1.4. The...

libxml2/libxml2_xml_read_memory_fuzzer: Heap-use-after-free in xmlSAX2AttributeNs

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=5721921484750848 Project: libxml2 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Fuzz target binary: libxml2xmlreadmemoryfuzzer Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type:...

graphicsmagick/coder_SFW_fuzzer: Use-of-uninitialized-value in funcDCM_PhotometricInterpretation

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5718655917096960 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderSFWfuzzer Fuzz target binary: coderSFWfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

sqlite3/ossfuzz: Use-of-uninitialized-value in corruptSchema

Detailed report: https://oss-fuzz.com/testcase?key=5153397250981888 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: corruptSchema sqlite3InitCallback...