glib/fuzz_markup: Heap-buffer-overflow in fuzz_markup.c

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed report: https://oss-fuzz.com/testcase?key=4818618314391552 Project: glib Fuzzer: aflglibfuzzmarkup Fuzz target binary: fuzzmarkup Job Type: aflasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60300000014...

chakra: Global-buffer-overflow in ThreadContext::FindPropertyRecord

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=5969175091609600 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x562fc67cdc80 Crash State:...

gdal/gdal_fuzzer: Heap-buffer-overflow in void GDALUnrolledCopyGeneric<unsigned char, 1, 3>

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5679329223639040 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

graphicsmagick/coder_MVG_fuzzer: Heap-buffer-overflow in ConvertPrimitiveToPath

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5107973054529536 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type:...

Skia - Heap Overflow in SkScan::FillPath due to Precision Error Vulnerability

Exploit for multiple platform in category dos / poc There is a heap overflow in Skia when drawing paths with antialiasing turned off. This issue can be triggered in both Google Chrom and Mozilla Firefox by rendering a specially crafted SVG image. PoCs for both browsers are attached. Details: When...

llvm/llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::DataExtractor::getU32

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=4561877290975232 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

gdal/gdal_fuzzer: Heap-buffer-overflow in VSIMemHandle::Read

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5411373956726784 Project: gdal Fuzzer: aflgdalfuzzer Fuzz target binary: gdalfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x6130000022c4 Crash...

freetype2/type1: Heap-buffer-overflow in mm_weights_unmap

Detailed report: https://oss-fuzz.com/testcase?key=5650962751422464 Project: freetype2 Fuzzer: libFuzzerfreetype2type1 Fuzz target binary: type1 Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x615000046218 Crash State: mmweightsunmap...

bloaty/fuzz_target: Global-buffer-overflow in bloaty::wasm::Section::Read

Project: https://github.com/google/bloaty.git Detailed report: https://oss-fuzz.com/testcase?key=5887976193130496 Project: bloaty Fuzzer: aflbloatyfuzztarget Fuzz target binary: fuzztarget Job Type: aflasanbloaty Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address:...

freetype2/ftfuzzer: Crash in pcf_get_encodings

Detailed report: https://oss-fuzz.com/testcase?key=6221557377531904 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6170000c8f60 Crash State: pcfgetencodings pcfloadfon...

freetype2/ftfuzzer: Heap-buffer-overflow in PCF_Glyph_Load

Detailed report: https://oss-fuzz.com/testcase?key=5371339878694912 Project: freetype2 Fuzzer: aflfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x621000003a5e Crash State: PCFGlyphLoad FTLoadGlyp...

pcre2/pcre2_fuzzer: Heap-buffer-overflow in get_chr_property_list

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://oss-fuzz.com/testcase?key=4868465176346624 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

graphicsmagick/graphicsmagick_coder_MVG_fuzzer: Heap-buffer-overflow in AcquireCacheNexus

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5265209760415744 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMVGfuzzer Fuzz target binary: graphicsmagickcoderMVGfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux...

ffmpeg/ffmpeg_AV_CODEC_ID_CFHD_fuzzer: Heap-buffer-overflow in peak_table

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5283250636324864 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDCFHDfuzzer Fuzz target binary: ffmpegAVCODECIDCFHDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

libreoffice/wmffuzzer: Global-buffer-overflow in ImplUnicodeToDBCS

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4981819731607552 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

freetype2/glyphs-outlines: Bad-free in ft_smooth_render_generic

Detailed report: https://oss-fuzz.com/testcase?key=4776853456814080 Project: freetype2 Fuzzer: aflfreetype2glyphs-outlines Fuzz target binary: glyphs-outlines Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Bad-free Crash Address: 0x7f0ad9d8fc1a Crash State: ftsmoothrendergeneric...

Internet Bug Bounty: Int Overflow lead to Heap OverFlow in exif_thumbnail_extract of exif.c

This bug was reported to PHP last month and a fix was public last week:https://bugs.php.net/bug.php?id=76423 Heap OverFlow in exifthumbnailextract of exif.c This vulnerability can be triggered by exifreaddata in any 32-bit system. exif.c:2947: if ImageInfo-Thumbnail.offset +...

Google Chrome - Swiftshader Blitting Floating-Point Precision Errors

Google Chrome - Swiftshader Blitting Floating-Point Precision Errors getInternalFormat == FORMATNULL return; ifblitReactorsource, sourceRect, dest, destRect, options return; SliceRectF sRect = sourceRect; SliceRect dRect = destRect; bool flipX = destRect.x0 destRect.x1; bool flipY = destRect.y0...

gdal/gdal_filesystem_fuzzer: Heap-buffer-overflow in ycc_rgb_convert

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5359746084241408 Project: gdal Fuzzer: aflgdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

graphicsmagick/coder_MVG_fuzzer: Heap-buffer-overflow in AllocateString

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5929937486741504 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...