ffmpeg: Memcpy-param-overlap in xan_wc3_copy_pixel_run

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6393461273001984 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDXANWC3fuzzer Fuzz target binary: ffmpegAVCODECIDXANWC3fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

libpng: Heap-buffer-overflow in OSS_FUZZ_png_combine_row

Project: https://github.com/glennrp/libpng.git Detailed report: https://oss-fuzz.com/testcase?key=5466114885681152 Project: libpng Fuzzer: libFuzzerlibpngreadfuzzer Fuzz target binary: libpngreadfuzzer Job Type: libfuzzerasanlibpng Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

libpng: Heap-buffer-overflow in OSS_FUZZ_png_combine_row

Detailed report: https://oss-fuzz.com/testcase?key=4838858534420480 Project: libpng Fuzzer: afllibpngreadfuzzer Fuzz target binary: libpngreadfuzzer Job Type: aflasanlibpng Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x608000000080 Crash State: OSSFUZZpngcombinerow...

binutils 2.29.51.20170921 - read_1_byte Heap Buffer Overflow

binutils 2.29.51.20170921 - read1byte Heap Buffer Overflow Source: https://blogs.gentoo.org/ago/2017/09/26/binutils-heap-based-buffer-overflow-in-read1byte-dwarf2-c/ Description: binutils is a set of tools necessary to build programs. The complete ASan output of the issue: nm -A -a -l -S -s...

binutils 2.29.51.20170921 - 'read_1_byte' Heap Buffer Overflow

Source: https://blogs.gentoo.org/ago/2017/09/26/binutils-heap-based-buffer-overflow-in-read1byte-dwarf2-c/ Description: binutils is a set of tools necessary to build programs. The complete ASan output of the issue: nm -A -a -l -S -s --special-syms --synthetic --with-symbol-versions -D $FILE...

curl: Heap-buffer-overflow in Curl_client_write

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5836302881652736 Project: curl Fuzzer: libFuzzercurlfuzzer Fuzz target binary: curlfuzzer Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60c000000173...

gdal: Heap-double-free in Selafin::Header::~Header

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5292629949415424 Project: gdal Fuzzer: libFuzzergdalmitabtabfuzzer Fuzz target binary: mitabtabfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-double-free Crash Address:...

proj4: Heap-use-after-free in pj_projection_specific_setup_geos

Detailed report: https://oss-fuzz.com/testcase?key=4742466918940672 Project: proj4 Fuzzer: libFuzzerproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: libfuzzerasanproj4 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6170000001c8 Crash State:...

wpantund: Global-buffer-overflow in nlpt_select_update_fd_set

Detailed report: https://oss-fuzz.com/testcase?key=5512201428271104 Project: wpantund Fuzzer: libFuzzerwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: libfuzzerasanwpantund Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000001809b60 Crash State:...

dlplibs: Global-buffer-overflow in QuattroSpreadsheet::readFormula

Detailed report: https://oss-fuzz.com/testcase?key=6450112764051456 Project: dlplibs Fuzzer: libFuzzerdlplibswqfuzzer Fuzz target binary: wqfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000e20e88 Crash State:...

llvm: Heap-buffer-overflow in llvm::DataExtractor::getCStr

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6309856848904192 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

librawspeed: Heap-buffer-overflow in rawspeed::NikonDecompressor::createCurve

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6484242584305664 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-NefDecoder Fuzz target binary: TiffDecoderFuzzer-NefDecoder Job Type: libfuzzerasanlibrawspeed Platform Id:...

wireshark: Global-buffer-overflow in dissect_gtpv2_ie_common

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=5241250057814016 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark...

Dnsmasq Integer Underflow

Sources: https://raw.githubusercontent.com/google/security-research-pocs/master/vulnerabilities/dnsmasq/CVE-2017-14496.py https://security.googleblog.com/2017/10/behind-masq-yet-more-dns-and-dhcp.html dnsmasq is vulnerable only if one of the following option is specified: --add-mac, --add-cpe-id ...

boost: Heap-buffer-overflow in boost::detail::shared_count::~shared_count

Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=6641095329972224 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerasanboost Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

libreoffice: Heap-use-after-free in SwNumRule::GetNumFormat

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4591319768891392 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

librawspeed: Use-after-poison in void rawspeed::SamsungV2Decompressor::decompressRow<

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6137765290835968 Project: librawspeed Fuzzer: afllibrawspeedTiffDecoderFuzzer-SrwDecoder Fuzz target binary: TiffDecoderFuzzer-SrwDecoder Job Type: aflasanlibrawspeed Platform Id: linux Crash...

libreoffice: Heap-use-after-free in rtl::OUString::OUString

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5504242112528384 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

ffmpeg: Crash in gmc_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4608518562775040 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMPEG4fuzzer Job Type: libfuzzerasanffmpeg Crash Type: UNKNOWN READ Crash Address: 0x620ffffffbf8 Crash State: gmcmmx gmcmotion...

librawspeed: Use-after-poison in void rawspeed::SamsungV2Decompressor::decompressRow<

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5856496673882112 Project: librawspeed Fuzzer: afllibrawspeedTiffDecoderFuzzer-SrwDecoder Fuzz target binary: TiffDecoderFuzzer-SrwDecoder Job Type: aflasanlibrawspeed Platform Id: linux Crash...