imagemagick/encoder_mvg_fuzzer: Stack-buffer-overflow in GetNextToken

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6428407182131200 Project: imagemagick Fuzzer: aflimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

skia/image_filter_deserialize: Use-of-uninitialized-value in sse2::blit_row_s32a_opaque

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=4641263824404480 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in pdf_read_new_xref_section

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=4702104183635968 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

mupdf/pdf_fuzzer: Heap-use-after-free in fz_fin_cached_color_converter

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=4866555528609792 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6060000005f8...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in fz_adjust_ft_glyph_width

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5817553579409408 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

imagemagick/encoder_pdb_fuzzer: Use-of-uninitialized-value in ReadPDBImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4872539105918976 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpdbfuzzer Fuzz target binary: encoderpdbfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_dcm_fuzzer: Use-of-uninitialized-value in IsPixelGray

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5265350707904512 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdcmfuzzer Fuzz target binary: encoderdcmfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

CVE-2017-13221

An elevation of privilege vulnerability in the Upstream kernel wifi driver. Product: Android. Versions: Android kernel. Android ID: A-64709938...

libreoffice/ww8fuzzer: Bad-cast to SwContentNode from SwClient in SwNode::GetContentNode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5558739118587904 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

open62541/fuzz_binary_message: Use-of-uninitialized-value in UA_SecureChannel_deleteMembersCleanup

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5307098192674816 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type:...

bind: Improper fetch cleanup sequencing in the resolver can cause named to crash

A use-after-free flaw leading to denial of service was found in the way BIND internally handled cleanup operations on upstream recursion fetch contexts. A remote attacker could potentially use this flaw to make named, acting as a DNSSEC validating resolver, exit unexpectedly with an assertion...

bind: Improper fetch cleanup sequencing in the resolver can cause named to crash

A use-after-free flaw leading to denial of service was found in the way BIND internally handled cleanup operations on upstream recursion fetch contexts. A remote attacker could potentially use this flaw to make named, acting as a DNSSEC validating resolver, exit unexpectedly with an assertion...

ffmpeg/ffmpeg_AV_CODEC_ID_SCPR_fuzzer: Heap-buffer-overflow in decompress_p

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6122458273808384 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDSCPRfuzzer Fuzz target binary: ffmpegAVCODECIDSCPRfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

libreoffice/xlsfuzzer: Heap-use-after-free in ScAddress::ScAddress

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6359195528986624 Project: libreoffice Fuzzer: libFuzzerlibreofficexlsfuzzer Fuzz target binary: xlsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

mupdf/pdf_fuzzer: Stack-buffer-overflow in pdf_lookup_cmap_full

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5267574158786560 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7f86eb165ec0...

Gone Phishing For The Holidays

Written by Or Katz and Amiram Cohen Overview: While our team, Akamai's Enterprise Threat Protector Security Research Team, monitored internet traffic throughout the 2017 holiday season, we spotted a wide-spread phishing campaign targeting users through an advertising tactic. During the six week...

OracleVM 3.4 : microcode_ctl (OVMSA-2018-0011) (Spectre)

The remote OracleVM system is missing necessary patches to address critical security updates : - Enable early microcode load to allow updating Broadwell model 79 - Make sure 'modprobe microcode' is not executed on Broadwell model 79 - Run dracut upon microcode update - Add updated Intel 20180108...

imagemagick/encoder_psd_fuzzer: Use-of-uninitialized-value in ScaleQuantumToShort

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5941577940729856 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpsdfuzzer Fuzz target binary: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_xpm_fuzzer: Use-of-uninitialized-value in ParseCommandOption

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5459937892237312 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderxpmfuzzer Fuzz target binary: encoderxpmfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

CVE-2017-3145

BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1...