dlplibs: Container-overflow in MarinerWrtText::readRulers

Detailed report: https://oss-fuzz.com/testcase?key=6008099066347520 Project: dlplibs Fuzzer: libFuzzerdlplibsmindwrtfuzzer Fuzz target binary: mindwrtfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address: 0x7ff262f8aa40 Crash State:...

libreoffice: Heap-use-after-free in Bundle::GetIndex

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5288817537843200 Project: libreoffice Fuzzer: libFuzzerlibreofficecgmfuzzer Fuzz target binary: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

wireshark: Stack-use-after-return in add_tagged_field

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=6172256742932480 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Stack-use-after-return...

libreoffice: Heap-use-after-free in SwPaM::Start

Detailed report: https://oss-fuzz.com/testcase?key=5797815487823872 Project: libreoffice Fuzzer: libFuzzerlibreofficeww2fuzzer Fuzz target binary: ww2fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61100002c5a8 Crash State:...

dlplibs: Bad-free in std::__1::__shared_ptr_pointer<librevenge::RVNGInputStream*, std::__1::default_d

Detailed report: https://oss-fuzz.com/testcase?key=5495959146463232 Project: dlplibs Fuzzer: afldlplibswpdfuzzer Fuzz target binary: wpdfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Bad-free Crash Address: 0x7f5d72160220 Crash State: std::1::sharedptrpointer::sharedptr...

wireshark: Heap-buffer-overflow in print_address_prefix_buf

Detailed report: https://oss-fuzz.com/testcase?key=5180630432219136 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6070000046d7 Crash State:...

wireshark: Heap-buffer-overflow in OALMarshal_UncompressValue

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5900099865542656 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow RE...

wireshark: Heap-buffer-overflow in bootp_option

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5638972833267712 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkudpport-bootp Fuzz target binary: fuzzsharkudpport-bootp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

libreoffice: Global-buffer-overflow in SwWW8ImplReader::ReadCaptionBox

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5802161055203328 Project: libreoffice Fuzzer: libFuzzerlibreofficeww2fuzzer Fuzz target binary: ww2fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

libreoffice: Heap-use-after-free in HWPFile::AddBox

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6372781283344384 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

wireshark: Heap-buffer-overflow in bootp_option

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=6216983760601088 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkudpport-bootp Fuzz target binary: fuzzsharkudpport-bootp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

wireshark: Heap-buffer-overflow in bootp_option

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=4781424697671680 Project: wireshark Fuzzer: aflwiresharkfuzzsharkdissectorip Fuzz target binary: fuzzsharkdissectorip Job Type: aflasanwireshark Platform Id: linux Crash Type:...

dlplibs: Container-overflow in libvisio::VSDContentCollector::_generateBezierSegmentsFromNURBS

Detailed report: https://oss-fuzz.com/testcase?key=5890037898018816 Project: dlplibs Fuzzer: libFuzzerdlplibsvsdfuzzer Fuzz target binary: vsdfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address: 0x6060000009b0 Crash State:...

grpc: Heap-use-after-free in gpr_unref

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=6462055064272896 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address:...

shopify-scripts: heap-buffer-overflow (read outside of buffer) in mrb_vm_exec()

Triggered in 3231219 14 April 2017. Compiled with afl-gcc + asan. ./mirb test000 ==10555==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60200001c920 at pc 0x52be2c bp 0x7ffe6751ada0 sp 0x7ffe6751ad98 READ of size 16 at 0x60200001c920 thread T0 0 0x52be2b in mrbvmexec...

dlplibs: Container-overflow in MWAWPictBitmapContainerBool::setRowPacked

Detailed report: https://oss-fuzz.com/testcase?key=4685785548718080 Project: dlplibs Fuzzer: afldlplibsapplepictfuzzer Fuzz target binary: applepictfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address: 0x621000001e12 Crash State:...

dlplibs: Global-buffer-overflow in StarEncoding::read

Detailed report: https://oss-fuzz.com/testcase?key=6608338966020096 Project: dlplibs Fuzzer: libFuzzerdlplibssdwfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000a9d1dc Crash State: StarEncoding::read StarEncoding::convert...

dlplibs: Global-buffer-overflow in computeBMPDataOffset

Detailed report: https://oss-fuzz.com/testcase?key=5669948070297600 Project: dlplibs Fuzzer: libFuzzerdlplibsvsdfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000096a278 Crash State: computeBMPDataOffset...

file: Heap-buffer-overflow in cdf_getuint32

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=4879865188712448 Project: file Fuzzer: aflfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: aflasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x611000000280 Cra...

Apple WebKit - Document::adoptNode Use-After-Free Exploit

Exploit for multiple platform in category dos / poc var s = document.body.appendChilddocument.createElement'script'; s.type = '0'; s.textContent = 'document.body.appendChildparent.i0'; var i0 = s.appendChilddocument.createElement'iframe'; s.type = ''; var f =...