gnutls: Use-of-uninitialized-value in __gmpz_limbs_finish

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=4887173172035584 Project: gnutls Fuzzer: libFuzzergnutlspskclientfuzzer Fuzz target binary: gnutlspskclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-valu...

strongswan: Index-out-of-bounds in calc_netbits

Project: https://github.com/strongswan/strongswan.git Detailed report: https://oss-fuzz.com/testcase?key=5401543119470592 Project: strongswan Fuzzer: libFuzzerstrongswanfuzzcerts Fuzz target binary: fuzzcerts Job Type: libfuzzerubsanstrongswan Platform Id: linux Crash Type: Index-out-of-bounds...

gdal: Heap-buffer-overflow in ParseSect4

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5592302649081856 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

gdal: Heap-buffer-overflow in ReadGrib1Sect2

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5105499915681792 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

harfbuzz: Use-of-uninitialized-value in unsafe_to_break_set_mask

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5255344882188288 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

A WebSocket Manipulation Proxy: WSSiP

Short for “WebSocket/Socket.io Proxy”, this tool, written in Node.js, provides a user interface to capture, intercept, send custom messages and view all WebSocket and Socket.IO communications between the client and server. Upstream proxy support also means you can forward HTTP/HTTPS traffic to an...

libreoffice: Crash in SVBT16ToShort

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4647189592670208 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash...

gdal: Heap-use-after-free in OGR_SRSNode::GetChildCount

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6752736441794560 Project: gdal Fuzzer: libFuzzergdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash...

openthread: Stack-buffer-overflow in ot::Coap::Header::FromMessage

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5722785030602752 Project: openthread Fuzzer: aflopenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type:...

gdal: Stack-buffer-overflow in nc4_check_name

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6380982435315712 Project: gdal Fuzzer: libFuzzergdalmitabtabfuzzer Fuzz target binary: mitabtabfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

llvm_libcxxabi: Heap-buffer-overflow in __cxxabiv1::parse_new_expr

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5659565502758912 Project: llvmlibcxxabi Fuzzer: libFuzzerllvmlibcxxabicxademanglefuzzer Fuzz target binary: cxademanglefuzzer Job Type: libfuzzerasanllvmlibcxxabi Platform Id: linux Crash Type:...

gdal: Stack-buffer-overflow in CSLAddNameValue

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4969921421246464 Project: gdal Fuzzer: libFuzzergdalmrffuzzer Fuzz target binary: mrffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

llvm_libcxxabi: Heap-buffer-overflow in __cxxabiv1::parse_encoding

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=4579206207897600 Project: llvmlibcxxabi Fuzzer: libFuzzerllvmlibcxxabicxademanglefuzzer Fuzz target binary: cxademanglefuzzer Job Type: libfuzzerasanllvmlibcxxabi Platform Id: linux Crash Type:...

gdal: Bad-cast to SDTSAttrRecord from SDTSRawLine;SDTSTransfer::GetAttr;OGRSDTSLayer::GetNextUnfilteredFeature

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6414955559518208 Project: gdal Fuzzer: libFuzzergdalogrsdtsfuzzer Fuzz target binary: ogrsdtsfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000009371400 Cras...

llvm_libcxxabi: Bad-free in std::__1::__vector_base<std::__1::vector<__cxxabiv1::Node*, __cxxabiv1::short_al

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=4517276671803392 Project: llvmlibcxxabi Fuzzer: libFuzzerllvmlibcxxabicxademanglefuzzer Fuzz target binary: cxademanglefuzzer Job Type: libfuzzerasanllvmlibcxxabi Platform Id: linux Crash Type:...

FreeRADIUS Update Patches Bugs Static Analysis Tools Missed

FreeRADIUS, the popular open source RADIUS server, today published updates that include fixes for a number of security issues uncovered by a custom fuzzer built by Dutch researcher Guido Vranken. Vranken used a custom version of libFuzzer to find a handful of serious bugs in OpenVPN that were...

libteken: Use-of-uninitialized-value in teken_trim_cursor_pos

Detailed report: https://oss-fuzz.com/testcase?key=6396364558696448 Project: libteken Fuzzer: libFuzzerlibtekenfuzzer Fuzz target binary: libtekenfuzzer Job Type: libfuzzermsanlibteken Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: tekentrimcursorpos...

libpsl: Stack-buffer-overflow in _psl_idna_toASCII

Project: https://github.com/rockdaboot/libpsl.git Detailed report: https://oss-fuzz.com/testcase?key=5165632150568960 Project: libpsl Fuzzer: libFuzzerlibpsliculoadfuzzer Fuzz target binary: libpsliculoadfuzzer Job Type: libfuzzerasanlibpsl Platform Id: linux Crash Type: Stack-buffer-overflow REA...

postgis: Heap-buffer-overflow in ptarray_from_wkb_state

Project: https://git.osgeo.org/gitea/postgis/postgis.git Detailed report: https://oss-fuzz.com/testcase?key=6439724333924352 Project: postgis Fuzzer: libFuzzerpostgiswkbimportfuzzer Fuzz target binary: wkbimportfuzzer Job Type: libfuzzerasanpostgis Platform Id: linux Crash Type:...

gnutls: Use-of-uninitialized-value in ecc_256_modq

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=6126560014761984 Project: gnutls Fuzzer: libFuzzergnutlsclientfuzzer Fuzz target binary: gnutlsclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...