Quantcast
Channel: October 2016 – agostino's blog
Browsing latest articles
Browse All 10 View Live

imagemagick: memory allocation failure in AcquireMagickMemory (memory.c)

Description: imagemagick is a software suite to create, edit, compose, or convert bitmap images. A fuzzing with the upstream security policy enabled revealed a memory allocation failure. The complete...

View Article


jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c)

Description: jasper is an open-source initiative to provide a free software-based reference implementation of the codec specified in the JPEG-2000 Part-1 standard. Another round of fuzzing on an...

View Article

jasper: memory allocation failure in jas_malloc (jas_malloc.c)

Description: jasper is an open-source initiative to provide a free software-based reference implementation of the codec specified in the JPEG-2000 Part-1 standard. Another round of fuzzing on an...

View Article

jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete...

Description: jasper is an open-source initiative to provide a free software-based reference implementation of the codec specified in the JPEG-2000 Part-1 standard. Another round of fuzzing on an...

View Article

snzip: memory allocation failure in work_buffer_resize (snzip.c)

Description: snzip is a compression/decompression tool based on snappy. A fuzzing revealed a memory allocation failure. The complete ASan output: # snzip -d $FILE Ȥ�==12351==WARNING: AddressSanitizer...

View Article


libwmf: memory allocation failure in wmf_malloc (api.c)

Description: libwmf is a library for reading vector images in Microsøft’s native Windøws Metafile Format (WMF) and for either (a) displaying them in, e.g., an X window; or (b) converting them to more...

View Article

imagemagick: memory allocation failure in AcquireMagickMemory (memory.c)...

Description: imagemagick is a software suite to create, edit, compose, or convert bitmap images. Another round of fuzzing pointed out that the memory allocation failure I discovered is still...

View Article

jasper: NULL pointer dereference in jpc_tsfb_synthesize (jpc_tsfb.c)

Description: jasper is an open-source initiative to provide a free software-based reference implementation of the codec specified in the JPEG-2000 Part-1 standard. Another round of fuzzing on an...

View Article


jasper: heap-based buffer overflow in jpc_dec_tiledecode (jpc_dec.c)

Description: jasper is an open-source initiative to provide a free software-based reference implementation of the codec specified in the JPEG-2000 Part-1 standard. Another round of fuzzing on an...

View Article


jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (incomplete...

Description: jasper is an open-source initiative to provide a free software-based reference implementation of the codec specified in the JPEG-2000 Part-1 standard. Another round of fuzzing on an...

View Article
Browsing latest articles
Browse All 10 View Live