OSV-2025-486 Bad-cast to cv::PngDecoder from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=426783958 Crash type: Bad-cast Crash state: Bad-cast to cv::PngDecoder from invalid vptr cv::PngDecoder::readData cv::imdecode...

PT-2025-37380

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=426783958 Crash type: Bad-cast Crash state: Bad-cast to cv::PngDecoder from invalid vptr cv::PngDecoder::readData cv::imdecode...

opencv:imdecode_fuzzer: Bad-cast to cv::PngDecoder from invalid vptr in cv::PngDecoder::readData

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=6008590106427392 Project: opencv Fuzzing Engine: libFuzzer Fuzz Target: imdecodefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5b0893119561 Crash State:...

arrow:parquet-arrow-fuzz: Bad-cast to typename shared_ptr<TypedStatistics<PhysicalType<parquet::Type::DOUBLE>>>::element_type' (aka 'parquet::TypedStatistics<parquet::PhysicalType<parquet::Type::DOUBLE>>') from parquet::(anonymous namespace)::TypedStatisticsImpl<parquet::PhysicalType<(parquet::Type::type)2>> in std::__1::shared_ptr<parquet::TypedStatistics<parquet::PhysicalType<

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5638988460785664 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: Bad-cast Crash Address: 0x56c0f7c9db98 Crash State...

mruby:mruby_proto_fuzzer: Bad-cast to ::ruby_fuzzer::BuiltinFuncsruby_fuzzer::Statement::clear_stmt_oneof in ruby_fuzzer::Statement::~Statement

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6611845320605696 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: Bad-cast Crash Address: 0x58f69a47ec30 Crash State:...

mruby:mruby_proto_fuzzer: Bad-cast to ::ruby_fuzzer::StatementSeq from invalid vptr in ruby_fuzzer::Statement::clear_stmt_oneof

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4557807244607488 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5a676e898400 Crash State:...

mruby:mruby_proto_fuzzer: Bad-cast to ::ruby_fuzzer::BuiltinFuncs from invalid vptr in ruby_fuzzer::Statement::clear_stmt_oneof

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4641941434466304 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: Bad-cast Crash Address: 0x598bb83514a0 Crash State:...

mruby:mruby_proto_fuzzer: Bad-cast to ::ruby_fuzzer::AssignmentStatementruby_fuzzer::Statement::clear_stmt_oneof in ruby_fuzzer::Statement::~Statement

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6357807624683520 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: Bad-cast Crash Address: 0x55f734dac4d0 Crash State:...

mruby:mruby_proto_fuzzer: Bad-cast to ::ruby_fuzzer::BuiltinFuncs from invalid vptr in ruby_fuzzer::Statement::clear_stmt_oneof

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5765598491770880 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5bdf9499dcf0 Crash State:...

mruby:mruby_proto_fuzzer: Bad-cast to ::ruby_fuzzer::BuiltinFuncsruby_fuzzer::Statement::clear_stmt_oneof in ruby_fuzzer::Statement::~Statement

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4892028584656896 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: Bad-cast Crash Address: 0x58105699ac40 Crash State:...

freetype2:cff: Bad-cast to bdf_property_t' (aka 'struct bdf_property_t_')bdf_add_property_ in bdf_parse_properties_

Detailed Report: https://oss-fuzz.com/testcase?key=5435111083933696 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: cff Job Type: libfuzzerubsanfreetype2 Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000000000c0 Crash State: Bad-cast to bdfpropertyt' aka 'struct...

qt:qtbase_gui_image_qimage_loadfromdata: Bad-cast to const QSvgPolyline from QSvgPolygon in QSvgMarker::drawHelper

Detailed Report: https://oss-fuzz.com/testcase?key=4907860466663424 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguiimageqimageloadfromdata Job Type: libfuzzerubsanqt Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5cda4a1c8d30 Crash State: Bad-cast to const QSvgPolyline from...

wamr:wasm_mutator_fuzz_loader: Bad-cast to WASMGlobal' (aka 'struct WASMGlobal')load_from_sections in wasm_loader_load

Project: https://github.com/bytecodealliance/wasm-micro-runtime.git Detailed Report: https://oss-fuzz.com/testcase?key=6434344809332736 Project: wamr Fuzzing Engine: libFuzzer Fuzz Target: wasmmutatorfuzzloader Job Type: libfuzzerubsanwamr Platform Id: linux Crash Type: Bad-cast Crash Address:...

OSV-2024-1372 Bad-cast to Assimp::LogStream from Assimp::OptimizeMeshesProcess

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=383595860 Crash type: Bad-cast Crash state: Bad-cast to Assimp::LogStream from Assimp::OptimizeMeshesProcess CallbackToLogRedirector Assimp::DefaultLogger::WriteToStreams...

PT-2024-40641

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to a crash caused by a bad-cast in the Assimp library. Specifically, the crash occurs due to a bad-cast to Assimp::LogStream from...

assimp:assimp_fuzzer: Bad-cast to Assimp::LogStream from Assimp::OptimizeMeshesProcess in CallbackToLogRedirector

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4521646748139520 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5be18c08e0b0 Crash State:...

assimp:assimp_fuzzer: Bad-cast to Assimp::LogStreamCallbackToLogRedirector in Assimp::DefaultLogger::WriteToStreams

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4735827571179520 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5cbc303690c0 Crash State:...

assimp:assimp_fuzzer: Bad-cast to Assimp::LogStream from invalid vptr in LogToCallbackRedirector::~LogToCallbackRedirector

Detailed Report: https://oss-fuzz.com/testcase?key=5651401240281088 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x570dfd37cab0 Crash State: Bad-cast to Assimp::LogStream from invalid vptr...

OSV-2024-1054 Bad-cast to Assimp::LogStream from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538150 Crash type: Bad-cast Crash state: Bad-cast to Assimp::LogStream from invalid vptr CallbackToLogRedirector Assimp::DefaultLogger::WriteToStreams...

PT-2024-40570 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to a crash caused by a bad-cast in the Assimp library. Specifically, it involves a bad-cast to Assimp::LogStream from an invalid vptr, occurring in the...