gdal: Heap-buffer-overflow in ParseGrid

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4754254998798336 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

proj4: Crash in pj_apply_vgridshift

Detailed report: https://oss-fuzz.com/testcase?key=5036113288757248 Project: proj4 Fuzzer: aflproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: aflasanproj4 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f2c32625b3c Crash State: pjapplyvgridshift reverse3d reverseobs...

ffmpeg: Global-buffer-overflow in svq3_decode_mb

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6645980176842752 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDSVQ3fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x0000008b6a99 Crash...

ffmpeg: Stack-buffer-overflow in put_bilin_2d_hv_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6266250911023104 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDVP9fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 2 Crash Address: 0x7f33441d38a0 Crash...

ffmpeg: Global-buffer-overflow in stereo_processing

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4957953339686912 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAACFIXEDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x0000018bb420...

ffmpeg: Stack-use-after-return in put_h264_qpel8_hv_lowpass_9

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4870171724349440 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDH264fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-use-after-return READ 2 Crash Address: 0x7f3acd5b01a0 Crash...

ffmpeg: Stack-use-after-return in put_h264_qpel8_hv_lowpass_9

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4719816059387904 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDH264fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-use-after-return READ 2 Crash Address: 0x7fd5f505c0e0 Crash...

pcre2: Global-buffer-overflow in compare_opcodes

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed report: https://oss-fuzz.com/testcase?key=6674380245434368 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type:...

ffmpeg: Global-buffer-overflow in avpriv_mpegaudio_decode_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4659523174268928 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDMP1fuzzer Fuzz target binary: ffmpegAVCODECIDMP1fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Cras...

gdal: Negative-size-param in NTFRecord::GetField

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4813983888441344 Project: gdal Fuzzer: libFuzzergdalshapefuzzer Fuzz target binary: shapefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

gdal: Crash in OGRCreateFromMultiPatch

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6470377083502592 Project: gdal Fuzzer: libFuzzergdalshapefuzzer Fuzz target binary: shapefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6120d6654360 Crash...

proj4: <no crash state available>

Detailed report: https://oss-fuzz.com/testcase?key=4557239199203328 Project: proj4 Fuzzer: libFuzzerproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: libfuzzerasanproj4 Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer:...

gdal: Heap-buffer-overflow in ILI1Reader::ReadParseLine

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6710597422940160 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

gdal: Heap-buffer-overflow in NITFReadImageBlock

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5767591316422656 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

dlplibs: Heap-buffer-overflow in MsWksDBParser::readFormula

Detailed report: https://oss-fuzz.com/testcase?key=5753657637208064 Project: dlplibs Fuzzer: libFuzzerdlplibsclariswksfuzzer Fuzz target binary: clariswksfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62e00000bd99 Crash State:...

ffmpeg: Crash in FDKreadBits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5021082513833984 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDLIBFDKAACfuzzer Fuzz target binary: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash...

wget2: Heap-buffer-overflow in getContent

Project: https://gitlab.com/gnuwget/wget2.git Detailed report: https://oss-fuzz.com/testcase?key=5103826937839616 Project: wget2 Fuzzer: aflwget2libwgetmetalinkparsefuzzer Fuzz target binary: libwgetmetalinkparsefuzzer Job Type: aflasanwget2 Platform Id: linux Crash Type: Heap-buffer-overflow REA...

gdal: Heap-buffer-overflow in ReadBITDOUBLE

Detailed report: https://oss-fuzz.com/testcase?key=4985169473699840 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60d000000677 Crash State: ReadBITDOUBLE...

grpc: Global-buffer-overflow in grpc_chttp2_hptbl_add

Detailed report: https://oss-fuzz.com/testcase?key=6354411624333312 Project: grpc Fuzzer: libFuzzergrpchpackparserfuzzertest Fuzz target binary: hpackparserfuzzertest Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x000000da36f0 Crash State...

Apple iOS / MacOS NSKeyedArchiver Heap Corruption(CVE-2017-2524)

Using lldb inside a simple helloworld app for iOS we can see that there are over 600 classes which we could get deserialized for persistance for example. The TextInput framework which is loaded has a class TIKeyboardLayout. The initWithCoder: implementation has this code: this is the x86 code, th...