binutils:fuzz_disassemble: Stack-buffer-overflow in get_register_operand

Detailed Report: https://oss-fuzz.com/testcase?key=5704746958848000 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 15 Crash Address: 0x7ffc8c3d1b3a Crash State: getregisteroperand...

libavc:avc_dec_fuzzer: Heap-use-after-free in ih264_inter_pred_luma_horz_hpel_vert_qpel_ssse3

Project: https://android.googlesource.com/platform/external/libavc Detailed Report: https://oss-fuzz.com/testcase?key=5187410094981120 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux Crash Type: Heap-use-after-free READ 16 Crash...

Internet Bug Bounty: Tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option() (CVE-2018-16229)

Tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccpprintoption. This vulnerability was disclosed to the tpcdump maintainers and was fixed in version 4.9.3 and disclosed as CVE-2018-16229. I was credited with finding and disclosing this vulnerability:...

curl: Race condition with CURL_LOCK_DATA_CONNECT can cause connections to be used at the same time

Summary: We've seen race conditions when using CURLLOCKDATACONNECT in libcurl where sometimes two different threads using two different easy handles ends up sharing the same connection pointer at the same time. This causes UAFs and double frees when both threads are freeing items on the same...

osquery:osqueryfuzz-config: Heap-buffer-overflow in bool rapidjson::GenericValue<rapidjson::UTF8<char>, rapidjson::MemoryPoolAllocat

Project: https://github.com/osquery/osquery.git Detailed Report: https://oss-fuzz.com/testcase?key=5082304661946368 Project: osquery Fuzzing Engine: libFuzzer Fuzz Target: osqueryfuzz-config Job Type: libfuzzerasanosquery Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in fuzz_reader_transmit

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5761407945801728 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in bebytes2ushort

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5645369371525120 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_v1_get_attribute_len

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6319339464818688 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_get_certificate

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5704441479299072 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

libreoffice:docxfuzzer: Heap-use-after-free in SwIndex::Remove

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5638500712185856 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: docxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

lwan:config_fuzzer: Global-buffer-overflow in lex_multiline_string

Project: git://github.com/lpereira/lwan Detailed Report: https://oss-fuzz.com/testcase?key=5670652367601664 Project: lwan Fuzzing Engine: libFuzzer Fuzz Target: configfuzzer Job Type: libfuzzerasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ 3 Crash Address: 0x0000011ab260 Cras...

cryptofuzz:cryptofuzz-openssl: Heap-use-after-free in SM4_decrypt

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5731177046736896 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Heap-use-after-free READ 4 Cra...

libreoffice:ww8fuzzer: Heap-use-after-free in BigPtrEntry::GetArray

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5731367300366336 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

radare2:ia_fuzz: Heap-buffer-overflow in read_uleb128

Detailed Report: https://oss-fuzz.com/testcase?key=6048106239492096 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000365f8 Crash State: readuleb128 walkexports getsymbol...

sqlite3:ossfuzz: Heap-use-after-free in sqlite3GenerateConstraintChecks

Detailed Report: https://oss-fuzz.com/testcase?key=5092981682208768 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzerasansqlite3 Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x61d000002642 Crash State: sqlite3GenerateConstraintChecks...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in _validate_pin

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5693809152753664 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

lz4:decompress_fuzzer: Heap-buffer-overflow in LZ4_decompress_safe_forceExtDict

Project: https://github.com/lz4/lz4.git Detailed Report: https://oss-fuzz.com/testcase?key=5204819744915456 Project: lz4 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzerasani386lz4 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0xf61020c9 Crash...

harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5758358618898432 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

skia:api_skdescriptor: Crash in SkDescriptor::addEntry

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5711802112933888 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apiskdescriptor Job Type: libfuzzerasanskia Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x6030bebec19e Crash...

gdal:fgb_fuzzer: Heap-buffer-overflow in OGRSimpleCurve::setPoints

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5764951997677568 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: fgbfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0xf1708400 Crash...