inchi:inchi_input_fuzzer: Heap-buffer-overflow in ParseSegmentMobileH

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=5073027562799104 Project: inchi Fuzzing Engine: afl Fuzz Target: inchiinputfuzzer Job Type: aflasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x60e000000200...

lcms:cmsIT8_load_fuzzer: Heap-buffer-overflow in ParseIT8

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=5931248909352960 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsIT8loadfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

CVE-2024-27342

Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

libredwg:llvmfuzz: Heap-buffer-overflow in dxf_entities_read

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5080112333651968 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

radare2:ia_fuzz: Heap-buffer-overflow in buf_bytes_write

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5149294791294976 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

zstd: Heap-buffer-overflow in ZSTD_generateSequences

Hi! This is a manual report, different from the robot-generated ones you've probably seen in the past. With the following new fuzz target and NDEBUG set to disable assertions: include include include include define ZSTDSTATICLINKINGONLY include "fuzzhelpers.h" include "zstd.h" include...

gpac:fuzz_parse: Heap-buffer-overflow in gf_gz_decompress_payload_ex

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5518364279635968 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzparse Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x621000004d00 Crash State:...

ffmpeg:ffmpeg_dem_MOV_fuzzer: Heap-buffer-overflow in mov_read_iloc

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6022289906794496 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemMOVfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

readstat:fuzz_format_sav: Heap-buffer-overflow in sav_process_row

Project: https://github.com/WizardMac/ReadStat.git Detailed Report: https://oss-fuzz.com/testcase?key=4710802625986560 Project: readstat Fuzzing Engine: afl Fuzz Target: fuzzformatsav Job Type: aflasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x6300000003...

libavc:svc_dec_fuzzer: Heap-buffer-overflow in isvcd_start_of_pic

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=6312187152695296 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: svcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux...

ffmpeg:ffmpeg_BSF_H264_MP4TOANNEXB_fuzzer: Heap-buffer-overflow in h264_mp4toannexb_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4966763443650560 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegBSFH264MP4TOANNEXBfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 5 Crash Address:...

libxslt:xslt: Heap-buffer-overflow in xmlParseCommentComplex

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5238655469617152 Project: libxslt Fuzzing Engine: honggfuzz Fuzz Target: xslt Job Type: honggfuzzasanlibxslt Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

OESA-2023-1606 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal...

CVE-2023-40031 Notepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::convert

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in Utf816Read::convert. This issue may lead to arbitrary code execution. As of time of publication, no known patches are available in existing versions of Notepad++...

CVE-2023-40031

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in Utf816Read::convert. This issue may lead to arbitrary code execution. As of time of publication, no known patches are available in existing versions of Notepad++...

CVE-2023-40031: Buffer Copy without Checking Size of Input

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in Utf816Read::convert. This issue may lead to arbitrary code execution. As of time of publication, no known patches are available in existing versions of Notepad++...

libjpeg-turbo:transform_fuzzer_2_0_x: Heap-buffer-overflow in finish_pass_huff

Detailed Report: https://oss-fuzz.com/testcase?key=5108227015311360 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: transformfuzzer20x Job Type: libfuzzerasani386libjpeg-turbo Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0xf1f5da00 Crash State:...

libraw:libraw_fuzzer: Stack-buffer-overflow in LibRaw::xtrans_interpolate

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5138254876508160 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzerasanlibraw Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address:...

libjpeg-turbo:transform_fuzzer_2_1_x: Heap-buffer-overflow in flush_bits

Detailed Report: https://oss-fuzz.com/testcase?key=6132209715904512 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: transformfuzzer21x Job Type: libfuzzerasani386libjpeg-turbo Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0xf1310800 Crash State: flushbit...

gdal:mitab_mif_fuzzer: Heap-buffer-overflow in utf8ToUtf16

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5609298328420352 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: mitabmiffuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0xf4502150...