skia:colrv1: Heap-buffer-overflow in tt_face_get_paint

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5219227543863296 Project: skia Fuzzing Engine: afl Fuzz Target: colrv1 Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x619000000ebc Crash State:...

skia:colrv1: Heap-buffer-overflow in tt_face_get_paint

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5696723985235968 Project: skia Fuzzing Engine: afl Fuzz Target: colrv1 Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6190000009bc Crash State:...

skia:colrv1: Heap-buffer-overflow in tt_face_get_paint

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5110784221118464 Project: skia Fuzzing Engine: afl Fuzz Target: colrv1 Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6190000009bc Crash State:...

skia:colrv1: Segv on unknown address in TT_Get_MM_Var

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5699992790106112 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: colrv1 Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: TTGetMMVar...

freetype2:colrv1: Crash in tt_face_load_svg

Detailed Report: https://oss-fuzz.com/testcase?key=4788084699430912 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: colrv1 Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61a004000804 Crash State: ttfaceloadsvg sfntloadface ttfaceinit...

freetype2:colrv1: Heap-buffer-overflow in tt_face_get_color_glyph_clipbox

Detailed Report: https://oss-fuzz.com/testcase?key=5574700563038208 Project: freetype2 Fuzzing Engine: afl Fuzz Target: colrv1 Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61a00000117e Crash State: ttfacegetcolorglyphclipbox...

freetype2:colrv1: Heap-buffer-overflow in tt_face_get_paint_layers

Detailed Report: https://oss-fuzz.com/testcase?key=4990722490105856 Project: freetype2 Fuzzing Engine: afl Fuzz Target: colrv1 Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62a000012546 Crash State: ttfacegetpaintlayers FTGetPaintLayers...

harfbuzz:hb-subset-fuzzer: Crash in BEInt<unsigned char, 1>::operator unsigned char

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5417934246772736 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerubsanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000e48918...

freetype2:colrv1: Crash in find_base_glyph_v1_record

Detailed Report: https://oss-fuzz.com/testcase?key=5882092637519872 Project: freetype2 Fuzzing Engine: honggfuzz Fuzz Target: colrv1 Job Type: honggfuzzasanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62a1000102c4 Crash State: findbaseglyphv1record ttfacegetcolrglyphpain...

PT-2021-28242

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the tt face get paint layers and FT Get Paint Layers functions, as well as the...

freetype2:colrv1: Heap-buffer-overflow in tt_face_get_paint_layers

Detailed Report: https://oss-fuzz.com/testcase?key=6215123103514624 Project: freetype2 Fuzzing Engine: afl Fuzz Target: colrv1 Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62a000012546 Crash State: ttfacegetpaintlayers FTGetPaintLayers...

freetype2:colrv1: Heap-buffer-overflow in read_paint

Detailed Report: https://oss-fuzz.com/testcase?key=4704166036504576 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: colrv1 Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62a000011fe4 Crash State: readpaint ttfacegetpaint...

freetype2:colrv1: Heap-buffer-overflow in read_color_line

Detailed Report: https://oss-fuzz.com/testcase?key=4764526315700224 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: colrv1 Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62a000019c26 Crash State: readcolorline readpaint...