llvm/llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::DWARFUnitIndex::parseImpl

Detailed report: https://oss-fuzz.com/testcase?key=5696067787554816 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x6020000008d0 Crash State:...

imagemagick/encoder_heic_fuzzer: Heap-buffer-overflow in derive_collocated_motion_vectors

Detailed report: https://oss-fuzz.com/testcase?key=5664200942157824 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61b000034e25...

kimageformats/kimgio_fuzzer: Heap-use-after-free in KArchiveDirectory::addEntry

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5645496628019200 Project: kimageformats Fuzzer: aflkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Heap-use-after-free READ 8...

radare2/ia_fuzz: Heap-buffer-overflow in r_buf_cpy

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5651817880354816 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

ffmpeg/ffmpeg_AV_CODEC_ID_AGM_fuzzer: Crash in copy_block8

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5649184864075776 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAGMfuzzer Fuzz target binary: ffmpegAVCODECIDAGMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN Crash Address:...

gdal/srp_fuzzer: Heap-use-after-free in Curl_llist_remove

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5145526598631424 Project: gdal Fuzzer: aflgdalsrpfuzzer Fuzz target binary: srpfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61b0000012e0 Crash...

libreoffice/slkfuzzer: Global-buffer-overflow in ScAttrArray::GetDoc

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5673715972440064 Project: libreoffice Fuzzer: libFuzzerlibreofficeslkfuzzer Fuzz target binary: slkfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

libreoffice/qpwfuzzer: Heap-buffer-overflow in std::__1::unique_ptr<ScColumn, std::__1::default_delete<ScColumn> >::operator*

Detailed report: https://oss-fuzz.com/testcase?key=5762190755233792 Project: libreoffice Fuzzer: afllibreofficeqpwfuzzer Fuzz target binary: qpwfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x61500001c6f0 Crash State: std::1::uniquep...

libreoffice/slkfuzzer: Heap-buffer-overflow in std::__1::vector<mdds::multi_type_vector<mdds::mtv::custom_block_func3<mdds::mtv

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5754291572178944 Project: libreoffice Fuzzer: libFuzzerlibreofficeslkfuzzer Fuzz target binary: slkfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

libreoffice/wksfuzzer: Heap-buffer-overflow in std::__1::unique_ptr<ScColumn, std::__1::default_delete<ScColumn> >::operator*

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5644717359890432 Project: libreoffice Fuzzer: libFuzzerlibreofficewksfuzzer Fuzz target binary: wksfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

libreoffice/slkfuzzer: Global-buffer-overflow in mdds::multi_type_vector<mdds::mtv::custom_block_func1<mdds::mtv::noncopyable_man

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5665026985164800 Project: libreoffice Fuzzer: libFuzzerlibreofficeslkfuzzer Fuzz target binary: slkfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

libreoffice/diffuzzer: Heap-buffer-overflow in std::__1::unique_ptr<ScColumn, std::__1::default_delete<ScColumn> >::operator*

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5661196948078592 Project: libreoffice Fuzzer: libFuzzerlibreofficediffuzzer Fuzz target binary: diffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

openh264/decoder_fuzzer: Heap-use-after-free in WelsDec::MapColToList0

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5644886558113792 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free READ 4...

Internet Bug Bounty: CVE-2019-0196: mod_http2 with scoreboard Use-After-Free (Read)

A crafted HTTP2 request can trigger reference to request data from a memory pool after its destruction. This memory is subsequently used as input to an sprintf type function for constructing a string value. This unsafe memory access ultimately means that the r-therequest string is poisoned with...

opencv/imdecode_fuzzer: Heap-buffer-overflow in Luv32toXYZ

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5638950225444864 Project: opencv Fuzzer: libFuzzeropencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Cras...

php/php-fuzz-exif: Heap-buffer-overflow in _estrndup

Detailed report: https://oss-fuzz.com/testcase?key=5740255098961920 Project: php Fuzzer: libFuzzerphpphp-fuzz-exif Fuzz target binary: php-fuzz-exif Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6120000032e0 Crash State: estrndup...

openh264/decoder_fuzzer: Heap-use-after-free in WelsDec::MapColToList0

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5644115477266432 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free READ 4...

skia/sksl2glsl: Crash in SkSL::Constructor::getVecComponent

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5670815980322816 Project: skia Fuzzer: aflskiasksl2glsl Fuzz target binary: sksl2glsl Job Type: aflasanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000dfff801a Crash State:...

kimageformats/kimgio_fuzzer: Negative-size-param in QImage::fill

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5118681342803968 Project: kimageformats Fuzzer: aflkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Negative-size-param Crash...

radare2/ia_fuzz: Heap-buffer-overflow in dex_parse_debug_item

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5664432685842432 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...