pcapplusplus:FuzzTarget: Bad-cast to pcpp::IDnsResource from invalid vptr in pcpp::DnsLayer::~DnsLayer

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5187603245826048 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerubsanpcapplusplus Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000263260...

rdkit:mol_data_stream_to_mol_fuzzer: Bad-cast to RDKit::AtomRDKit::SGroupParsing::ParseSGroupV2000SAPLine in RDKit::ParseMolBlockProperties

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5742068432633856 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000024d3df0 Crash...

rdkit:mol_data_stream_to_mol_fuzzer: Bad-cast to RDKit::ATOM_EQUALS_QUERY' (aka 'EqualityQuery<int, const RDKit::Atom *, true>') from Queries::AndQuery<int, RDKit::Atom const*, true> in RDKit::completeMolQueries

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5739632884187136 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002320160 Crash...

rdkit:smiles_string_to_mol_fuzzer: Bad-cast to RDKit::ATOM_EQUALS_QUERY' (aka 'EqualityQuery<int, const RDKit::Atom *, true>') from Queries::Query<int, RDKit::Atom const*, true> in RDKit::makeAHAtomQuery

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6304138320412672 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000035715f0 Crash...

rdkit:mol_data_stream_to_mol_fuzzer: Bad-cast to RDKit::Atom from invalid vptr in RDKit::SubstanceGroup::addAtomWithBookmark

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5763595412701184 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000021f5a90 Crash...

keystone:fuzz_asm_x86_64: Bad-cast to const llvm_ks::MCSectionELF from llvm_ks::MCSectionMachO in llvm_ks::MCELFStreamer::ChangeSection

Detailed Report: https://oss-fuzz.com/testcase?key=5733234540544000 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmx8664 Job Type: libfuzzerubsankeystone Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002a51160 Crash State: Bad-cast to const llvmks::MCSectionELF from...

envoy:codec_impl_fuzz_test: Bad-cast to testing::internal::FunctionMocker<Envoy::Network::Connection::State ()> from testing::internal::UntypedFunctionMockerBase in Envoy::Network::MockConnection::state

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5653835151572992 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: codecimplfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffe11206980 Crash...

envoy:server_fuzz_test: Bad-cast to Envoy::Network::ActiveDnsQuery from invalid vptr in Envoy::Upstream::StrictDnsClusterImpl::ResolveTarget::~ResolveTarget

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5157098222780416 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: serverfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000128fb670 Crash State...

libsass:data_context_fuzzer: Bad-cast to Sass::PreValue from Sass::SelectorList in Sass::Eval::operator

Detailed Report: https://oss-fuzz.com/testcase?key=5635227418624000 Project: libsass Fuzzing Engine: libFuzzer Fuzz Target: datacontextfuzzer Job Type: libfuzzerubsanlibsass Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000191b2a0 Crash State: Bad-cast to Sass::PreValue from...

CVE-2011-1460

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks...

CVE-2011-1460

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks...

CVE-2011-1460

CVE-2011-1460 affects WebKit in Google Chrome prior to Blink M11. The vulnerability is a faulty cast to RenderBlock when anonymous blocks are renderblocks, caused by a type-casting issue in WebKit's rendering path. The impact, as reflected in CVSS, includes partial confidentiality, integrity, and...

CVE-2011-1460

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks...

libreoffice:docxfuzzer: Bad-cast to SwIndexReg from invalid vptr in SwIndex::Remove

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5675859411468288 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: docxfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address:...

libreoffice:docxfuzzer: Bad-cast to SwDrawContact from SwFlyDrawContact in FindFrameFormat

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5068778198532096 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: docxfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address:...

libsass/data_context_fuzzer: Bad-cast to Sass::PreValue from Sass::Unary_Expression in Sass::SharedImpl<Sass::PreValue>::SharedImpl<Sass::Expression>

Detailed report: https://oss-fuzz.com/testcase?key=5636165890211840 Project: libsass Fuzzer: libFuzzerdatacontextfuzzer Fuzz target binary: datacontextfuzzer Job Type: libfuzzerubsanlibsass Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000031e1f40 Crash State: Bad-cast to Sass::PreVal...

imagemagick/encoder_heic_fuzzer: Bad-cast to std::__1::__shared_weak_count from invalid vptr in std::__1::shared_ptr<heif::HeifPixelImage>::~shared_ptr

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5669433122488320 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type:...

Apple macOS < 10.14.5 / iOS < 12.3 XNU - Wild-read due to bad cast in stf_ioctl

/ Reproduction Tested on macOS 10.14.3: $ clang -o stfwildread stfwildread.cc $ ./stfwildread Explanation SIOCSIFADDR is an ioctl that sets the address of an interface. The stf interface ioctls are handled by the stfioctl function. The crash occurs in the following case where a struct ifreq is re...

keystone/fuzz_asm_x86_64: Bad-cast to llvm_ks::X86OperandX86AsmParser::MatchAndEmitATTInstruction in AsmParser::parseStatement

Detailed report: https://oss-fuzz.com/testcase?key=5121855985287168 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmx8664 Fuzz target binary: fuzzasmx8664 Job Type: libfuzzerubsankeystone Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000210d120 Crash State: Bad-cast to...

libreoffice/slkfuzzer: Bad-cast to ScPoolHelper from invalid vptr in ScDocument::GetDefPattern

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5728793961955328 Project: libreoffice Fuzzer: libFuzzerlibreofficeslkfuzzer Fuzz target binary: slkfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...