librawspeed/TiffDecoderFuzzer-ArwDecoder: Use-of-uninitialized-value in rawspeed::TiffEntry::TiffEntry

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6192213462614016 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-ArwDecoder Fuzz target binary: TiffDecoderFuzzer-ArwDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

dlplibs/cdrfuzzer: Heap-buffer-overflow in libcdr::CDRStylesCollector::collectBmp

Detailed report: https://oss-fuzz.com/testcase?key=6291912840445952 Project: dlplibs Fuzzer: afldlplibscdrfuzzer Fuzz target binary: cdrfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000002bf3 Crash State:...

libreoffice/lwpfuzzer: Bad-cast to XFTextStyle from XFParaStyle in LwpFrib::RegisterStyle

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5179243848794112 Project: libreoffice Fuzzer: libFuzzerlibreofficelwpfuzzer Fuzz target binary: lwpfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

imagemagick/ping_png_fuzzer: Heap-use-after-free in read_user_chunk_callback

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6139944834695168 Project: imagemagick Fuzzer: libFuzzerimagemagickpingpngfuzzer Fuzz target binary: pingpngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_mng_fuzzer: Use-of-uninitialized-value in Magick_RenderingIntent_from_PNG_RenderingIntent

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6350986827268096 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmngfuzzer Fuzz target binary: pingmngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

Video Downloader Universal Cross Site Scripting

Video Downloader Extension: Universal XSS Browsing through the list of most popular Chrome extensions, I noticed this extension with 4M users: https://chrome.google.com/webstore/detail/video-downloader-professi/elicpjhcidhpjomhibiffojpinpmmpil?hl=en It has a pretty obvious universal XSS i.e. it...

wireshark/fuzzshark_udp_port-dns: Heap-buffer-overflow in add_rr_to_tree

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5928838602162176 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkudpport-dns Fuzz target binary: fuzzsharkudpport-dns Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

graphicsmagick/coder_TIM_fuzzer: Use-of-uninitialized-value in SyncImageCallBack

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5173489750245376 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderTIMfuzzer Fuzz target binary: coderTIMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

imagemagick/ping_wpg_fuzzer: Heap-buffer-overflow in SetPixelIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5076244040253440 Project: imagemagick Fuzzer: libFuzzerimagemagickpingwpgfuzzer Fuzz target binary: pingwpgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_webp_fuzzer: Heap-buffer-overflow in ReadWebPLSBWord

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5114460055273472 Project: imagemagick Fuzzer: libFuzzerimagemagickpingwebpfuzzer Fuzz target binary: pingwebpfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

ots/ots-fuzzer: Crash in ots::Buffer::ReadU16

Project: https://github.com/khaledhosny/ots.git Detailed report: https://oss-fuzz.com/testcase?key=4904400788127744 Project: ots Fuzzer: libFuzzerotsots-fuzzer Fuzz target binary: ots-fuzzer Job Type: libfuzzerasanots Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x627000385430 Crash...

librawspeed/TiffDecoderFuzzer-ArwDecoder: Use-of-uninitialized-value in rawspeed::TiffIFD::TiffIFD

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5990033396858880 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-ArwDecoder Fuzz target binary: TiffDecoderFuzzer-ArwDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

libreoffice/fodsfuzzer: Heap-use-after-free in ScXMLDatabaseRangeContext::endFastElement

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6030863839002624 Project: libreoffice Fuzzer: libFuzzerlibreofficefodsfuzzer Fuzz target binary: fodsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

dlplibs/cdrfuzzer: Stack-use-after-scope in libcdr::CDRParser::_redirectX6Chunk

Detailed report: https://oss-fuzz.com/testcase?key=5193637206949888 Project: dlplibs Fuzzer: libFuzzerdlplibscdrfuzzer Fuzz target binary: cdrfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address: 0x7f8e30db6bd8 Crash State:...

dlplibs/cdrfuzzer: Use-of-uninitialized-value in libcdr::CDRContentCollector::_generateBitmapFromPattern

Detailed report: https://oss-fuzz.com/testcase?key=5929090067464192 Project: dlplibs Fuzzer: libFuzzerdlplibscdrfuzzer Fuzz target binary: cdrfuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick/encoder_pdb_fuzzer: Use-of-uninitialized-value in PushColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5687802160218112 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpdbfuzzer Fuzz target binary: encoderpdbfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_psd_fuzzer: Use-of-uninitialized-value in ClampPixel

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5650303102746624 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpsdfuzzer Fuzz target binary: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

gdal/envi_fuzzer: Heap-buffer-overflow in ENVIDataset::ReadHeader

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5710112736935936 Project: gdal Fuzzer: libFuzzergdalenvifuzzer Fuzz target binary: envifuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

gdal/avce00_fuzzer: Heap-use-after-free in OGRAVCLayer::AppendTableDefinition

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5310171959001088 Project: gdal Fuzzer: aflgdalavce00fuzzer Fuzz target binary: avce00fuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x611000000faa...

imagemagick/encoder_mvg_fuzzer: Crash in TracePoint

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5950563343663104 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...