in squell/id3

✍️ Description Archive.org is a worthy cause to support. 👍 During testing of id3 compiled from commit a899ea with Clang 13+ASan on Ubuntu 20.04.2, we discovered a payload which triggers a negative-size-param: size=-4 error when calling memcpy. This particular bug was discovered with the AFL fuzzer...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Crash in std::__1::enable_if<true, apfs_omap_key const*>::type APFSBtreeNode<apfs_omap_ke

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6402896596959232 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62500001015f...

403Fuzzer - Fuzz 403/401Ing Endpoints For Bypasses

Fuzz 403ing endpoints for bypasses Follow on twitter! @intrudir This tool will check the endpoint with a couple of headers such as X-Forwarded-For It will also apply different payloads typically used in dir traversals, path normalization etc. to each endpoint on the path. e.g. /%2e/test/test2...

harfbuzz:hb-subset-fuzzer: Crash in BEInt<unsigned char, 1>::operator unsigned char

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5417934246772736 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerubsanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000e48918...

ASB-A-173843328

In hidinputchangeresolutionmultipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

fribidi:fribidi-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5280710544982016 Project: fribidi Fuzzing Engine: libFuzzer Fuzz Target: fribidi-fuzzer Job Type: libfuzzerubsanfribidi Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffe01318 Crash State: NULL Sanitizer: undefined UBSAN...

espeak-ng:ssml-fuzzer: Global-buffer-overflow in SubstitutePhonemes

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=4646816825081856 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash Address...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::String::Set

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=4550943501844480 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60500165c5aa...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in InterpretCondition

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=5589246627938304 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

wasm3:fuzzer: Index-out-of-bounds in FindReferencedLocalWithinCurrentBlock

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=4854758130188288 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerubsanwasm3 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

espeak-ng:ssml-fuzzer: Heap-buffer-overflow in string_decoder_getc_utf_8

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=5632950604529664 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

espeak-ng:ssml-fuzzer: Global-buffer-overflow in IsLetterGroup

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=4660555915853824 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in unsigned long grk::N_AVX2::vscheduler<grk::N_AVX2::DecompressDcShiftIrrev>

Detailed Report: https://oss-fuzz.com/testcase?key=5652473520979968 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: unsigned long grk::NAVX2::vscheduler...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in _blosc_getitem

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=6208488536670208 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

imagemagick:ping_dng_fuzzer: Invalid-free in RelinquishMagickMemory

Detailed Report: https://oss-fuzz.com/testcase?key=6662829303267328 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Invalid-free Crash Address: 0x39000000 Crash State: RelinquishMagickMemory...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in TranslateClause

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=6060397091225600 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ 16 Crash Address...

espeak-ng:ssml-fuzzer: Heap-buffer-overflow in string_decoder_getc_utf_8

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=5744645104599040 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

espeak-ng:ssml-fuzzer: Heap-use-after-free in LookupDict2

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=5459428993269760 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in TranslateNumber_1

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=4849410845573120 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

wasm3:fuzzer: Index-out-of-bounds in FindReferencedLocalWithinCurrentBlock

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=5863203801268224 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerubsanwasm3 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...