OSV-2018-280 Heap-buffer-overflow in xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7931 Crash type: Heap-buffer-overflow READ Crash state: xstrdup ftpparsewinntls wgetftplsfuzzer.c...

gitea -- multiple vulnerabilities

The Gitea Team reports for release 1.13.2: Prevent panic on fuzzer provided string Add secure/httpOnly attributes to the lang cookie...

llvm:llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::StringMapImpl::LookupBucketFor

Detailed Report: https://oss-fuzz.com/testcase?key=5071836601384960 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x607000000148 Crash State:...

ToothPicker - An In-Process, Coverage-Guided Fuzzer For iOS

ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically targets iOS's Bluetooth daemon bluetoothd and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This repository also...

Fuzzilli - A JavaScript Engine Fuzzer

A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the Targets/...

llvm:clang-objc-fuzzer: Use-of-uninitialized-value in clang::Lexer::getTokenPrefixLength

Detailed Report: https://oss-fuzz.com/testcase?key=5735061403729920 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::Lexer::getTokenPrefixLength Diag...

llvm:clang-fuzzer: Global-buffer-overflow in ProcessCharEscape

Detailed Report: https://oss-fuzz.com/testcase?key=5730186039132160 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000ccfc3dc Crash State: ProcessCharEscape...

llvm:clang-objc-fuzzer: Global-buffer-overflow in clang::Lexer::tryReadUCN

Detailed Report: https://oss-fuzz.com/testcase?key=5120846479491072 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000ccf823c Crash State: clang::Lexer::tryReadUCN...

libass:libass_fuzzer: Heap-buffer-overflow in decode_chars

Project: https://github.com/libass/libass.git Detailed Report: https://oss-fuzz.com/testcase?key=4806521227313152 Project: libass Fuzzing Engine: afl Fuzz Target: libassfuzzer Job Type: aflasanlibass Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x62b0000061fc Crash...

AutoGadgetFS - USB Testing Made Easy

What’s AutoGadgetFS ? AutoGadgetFS is an open source framework that allows users to assess USB devices and their associated hosts/drivers/software without an in-depth knowledge of the USB protocol. The tool is written in Python3 and utilizes RabbitMQ and WiFi access to enable researchers to condu...

OSV-2020-2085 UNKNOWN READ in decoder_fuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26428 Crash type: UNKNOWN READ Crash state: decoderfuzzer...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::packet_analysis::GRE::GREAnalyzer::AnalyzePacket

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=5436906734878720 Project: zeek Fuzzing Engine: honggfuzz Fuzz Target: zeek-packet-fuzzer Job Type: honggfuzzasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60300127b09...

golang:fuzzer-gzip: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6198139272560640 Project: golang Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-gzip Job Type: libfuzzerasangolang Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

ffmpeg:ffmpeg_dem_VIVIDAS_fuzzer: Stack-buffer-overflow in get_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5721057325219840 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemVIVIDASfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

wolfssl:fuzzer-wolfssh-server: Heap-buffer-overflow in wolfSSH_accept

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5752343091740672 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-server Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address...

grok:grk_decompress_fuzzer: Crash in grk::SparseBuffer<6u, 6u>::read_or_write

Detailed Report: https://oss-fuzz.com/testcase?key=5197905562173440 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000003c00 Crash State: grk::SparseBuffer::readorwrite...

OSV-2020-2024 Heap-buffer-overflow in pixFindHorizontalRuns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26268 Crash type: Heap-buffer-overflow WRITE 4 Crash state: pixFindHorizontalRuns pixFillPolygon graphicsfuzzer.cc...

ffmpeg:ffmpeg_AV_CODEC_ID_CRI_fuzzer: Heap-buffer-overflow in unpack_10bit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5161495882891264 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDCRIfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x7f513aa7828...

wolfssl:fuzzer-wolfssl-server: Crash in wolfCrypt_custom_free

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5171589131534336 Project: wolfssl Fuzzing Engine: afl Fuzz Target: fuzzer-wolfssl-server Job Type: aflasanwolfssl Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000788e50 Crash...

wolfssl:fuzzer-wolfssl-rsa: Index-out-of-bounds in fp_read_radix_16

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4899197473783808 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-rsa Job Type: libfuzzerubsanwolfssl Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...