curl:curl_fuzzer_smtp: Negative-size-param in fuzz_tlv_to_string

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6288244651589632 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzersmtp Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

curl:curl_fuzzer_rtmp: Negative-size-param in fuzz_tlv_to_string

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5639027763445760 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerrtmp Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in strncpy

Detailed Report: https://oss-fuzz.com/testcase?key=5633780185825280 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f89f7151530 Crash State: strncpy...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBVORBIS_fuzzer: Heap-buffer-overflow in oggpack_read

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5637490098044928 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBVORBISfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

Internet Bug Bounty: mod_http2, read-after-free in h2 connection shutdown (CVE-2019-10082)

Using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown. This is made possible by a race condition in which nghttp2 maintains a reference to a stream after modhttp2 has destroyed it. This vulnerability has been fixed in...

file:magic_fuzzer: Heap-buffer-overflow in cdf_read_property_info

Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=5687868487368704 Project: file Fuzzing Engine: libFuzzer Fuzz Target: magicfuzzer Job Type: libfuzzerasani386file Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0xef4dd848 Cras...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in decode_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5762455661182976 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegDEMUXERfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x60a000000046 Cras...

opensc:fuzz_pkcs15_decode: Heap-buffer-overflow in decode_bit_string

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5150382858174464 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15decode Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

opensc:fuzz_pkcs15_reader: Global-buffer-overflow in fuzz_pkcs15_reader.c

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5648490046160896 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

libmpeg2:mpeg2_dec_fuzzer: Crash in ideint_weave_blk

Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5663742011899904 Project: libmpeg2 Fuzzing Engine: afl Fuzz Target: mpeg2decfuzzer Job Type: aflasanlibmpeg2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

libmpeg2:mpeg2_dec_fuzzer: Heap-buffer-overflow in impeg2_fmt_conv_yuv420p_to_yuv420sp_uv

Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5672508879011840 Project: libmpeg2 Fuzzing Engine: afl Fuzz Target: mpeg2decfuzzer Job Type: aflasanlibmpeg2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

libavc:avc_dec_fuzzer: Heap-buffer-overflow in ih264d_cavlc_parse4x4coeff_n8

Project: https://android.googlesource.com/platform/external/libavc Detailed Report: https://oss-fuzz.com/testcase?key=5721165355548672 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

cryptofuzz:cryptofuzz-openssl: Heap-buffer-overflow in aria_set_encrypt_key

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5181934937833472 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

libvips:jpegsave_buffer_fuzzer: Heap-buffer-overflow in attach_xmp_blob

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5673786296238080 Project: libvips Fuzzing Engine: afl Fuzz Target: jpegsavebufferfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libvips:jpegsave_buffer_fuzzer: Heap-buffer-overflow in exif_entry_get_value

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5768110933540864 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavebufferfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

cryptofuzz:cryptofuzz-openssl-noasm: Heap-buffer-overflow in (__has_construct<std::__1::allocator<unsigned

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5733374043357184 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzerasani386cryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

cryptofuzz:cryptofuzz-openssl-noasm: Heap-buffer-overflow in aria_set_encrypt_key

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5665634448310272 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzerasani386cryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

gdal:gdal_fuzzer: Heap-buffer-overflow in Get

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5757740735004672 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf0e9033f Crash...

imagemagick:encoder_mvg_fuzzer: Heap-use-after-free in TraceBezier

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5665525908111360 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-use-after-free READ 8 Cra...

aspell:aspell_fuzzer: Heap-buffer-overflow in acommon::DecodeDirect<unsigned int>::decode

Project: https://github.com/gnuaspell/aspell.git Detailed Report: https://oss-fuzz.com/testcase?key=5686369787052032 Project: aspell Fuzzing Engine: afl Fuzz Target: aspellfuzzer Job Type: aflasanaspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60a0000003b0 Crash...