harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in OT::CPALV1Tail::serialize

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5715464591376384 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

WAF-A-MoLE - A Guided Mutation-Based Fuzzer For ML-based Web Application Firewalls

A guided mutation-based fuzzer for ML-based Web Application Firewalls, inspired by AFL and based on the FuzzingBook by Andreas Zeller et al. Given an input SQL injection query, it tries to produce a semantic invariant query that is able to bypass the target WAF. You can use this tool for assessin...

harfbuzz:hb-subset-fuzzer: Negative-size-param in OT::VarRegionList* hb_serialize_context_t::allocate_size<OT::VarRegionList>

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5499162606043136 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Negative-size-param Crash Address: Cra...

llvm:llvm-opt-fuzzer--x86_64-instcombine: Use-of-uninitialized-value in bool llvm::DenseMapBase<llvm::DenseMap<llvm::StringRef, llvm::detail::DenseSetEm

Detailed Report: https://oss-fuzz.com/testcase?key=5155703497687040 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-opt-fuzzer--x8664-instcombine Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bool llvm::DenseMapBase...

selinux:secilc-fuzzer: Heap-buffer-overflow in __cil_cat_expr_range_to_bitmap_helper

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5640844534218752 Project: selinux Fuzzing Engine: honggfuzz Fuzz Target: secilc-fuzzer Job Type: honggfuzzasanselinux Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-use-after-free in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSJObjBtreeNode>::

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4735739433713664 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

fluent-bit:flb-it-fuzz-config_fuzzer_OSSFUZZ: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4724867529310208 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f90e3401220 Crash State: NULL Sanitizer:...

apache-commons:CompressSevenZFuzzer: Uncaught exception with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6551935141412864 Project: apache-commons Fuzzing Engine: libFuzzer Fuzz Target: CompressSevenZFuzzer Job Type: libfuzzerasanapache-commons Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: NULL Sanitizer: address ASAN...

selinux:secilc-fuzzer: Crash in is_type_attr

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=4825054889246720 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: secilc-fuzzer Job Type: libfuzzerubsanselinux Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fabf01e500...

imagemagick:ping_dng_fuzzer: Use-of-uninitialized-value in __libcpp_strstr

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4675445609070592 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

gdal:gml_fuzzer: Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5740367449292800 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gmlfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0xef514084 Crash...

pcl:ply_reader_fuzzer: Container-overflow in std::__1::__function::__func<std::__1::tuple<std::__1::function<void

Detailed Report: https://oss-fuzz.com/testcase?key=6556750571503616 Project: pcl Fuzzing Engine: afl Fuzz Target: plyreaderfuzzer Job Type: aflasanpcl Platform Id: linux Crash Type: Container-overflow WRITE 4 Crash Address: 0x616000000d38 Crash State: std::1::function::func Sanitizer: address ASA...

freeradius:fuzzer_tacacs: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5745266295701504 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzertacacs Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x615004e8ba00 Crash State: NULL Sanitizer: address ASAN...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in frame_get_vlmetalayers

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5966065472503808 Project: c-blosc2 Fuzzing Engine: afl Fuzz Target: decompressframefuzzer Job Type: aflasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

gdal:dxf_fuzzer: Negative-size-param in OGRDXFReader::LoadDiskChunk

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5400376672124928 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: dxffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

CVE-2021-26945

An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR...

CVE-2021-23169

A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR...

wget2:libwget_css_url_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5961382498533376 Project: wget2 Fuzzing Engine: libFuzzer Fuzz Target: libwgetcssurlfuzzer Job Type: libfuzzerasanwget2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x4f7b3099dee6 Crash State: NULL Sanitizer: address ASAN Recommend...

fribidi:fribidi-fuzzer: Crash in get_adjacent_run

Project: https://github.com/fribidi/fribidi.git Detailed Report: https://oss-fuzz.com/testcase?key=4770444287803392 Project: fribidi Fuzzing Engine: libFuzzer Fuzz Target: fribidi-fuzzer Job Type: libfuzzerubsanfribidi Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000001158 Cras...

Heap-based Buffer Overflow in squell/id3

✍️ Description Archive.org is a worthy cause to support. 👍 During testing of id3 compiled from commit a899ea with Clang 13+ASan on Ubuntu 20.04.2, we discovered a payload which triggers a heap-buffer-overflow in ID3put. This particular bug was found using the AFL fuzzer. 🕵️‍♂️ Proof of Concept echo...