ffmpeg:ffmpeg_AV_CODEC_ID_MSMPEG4V1_fuzzer: Use-of-uninitialized-value in ff_msmpeg4_decode_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5583223747313664 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMSMPEG4V1fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...

ffmpeg:ffmpeg_BSF_H264_METADATA_fuzzer: Use-of-uninitialized-value in cbs_h264_write_sei_pic_timing_internal

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5458626041413632 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFH264METADATAfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_MEDIA100_fuzzer: Use-of-uninitialized-value in mjpeg_decode_scan

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5537446610141184 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMEDIA100fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5294063859859456 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

ghostscript:gs_device_bmpmono_fuzzer: Crash in ireclaim

Detailed Report: https://oss-fuzz.com/testcase?key=6292204293783552 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicebmpmonofuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x52a0001dbc98 Crash State: ireclaim interpreclaim...

PT-2024-40825 · Git +1 · Kimageformats

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write error. Technical details include a crash type of Heap-buffer-overflow WRITE 1. The crash state...

UBUNTU-CVE-2022-48834

In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Fix bug in pipe direction for control transfers The syzbot fuzzer reported a minor bug in the usbtmc driver: usb 5-1: BOGUS control dir, pipe 80001e80 doesn't match bRequestType 0 WARNING: CPU: 0 PID: 3813 at...

CVE-2022-48838 usb: gadget: Fix use-after-free bug by not setting udc->dev.driver

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: Fix use-after-free bug by not setting udc-dev.driver The syzbot fuzzer found a use-after-free bug: BUG: KASAN: use-after-free in devuevent+0x712/0x780 drivers/base/core.c:2320 Read of size 8 at addr ffff88802b934098 ...

CVE-2022-48834 usb: usbtmc: Fix bug in pipe direction for control transfers

In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Fix bug in pipe direction for control transfers The syzbot fuzzer reported a minor bug in the usbtmc driver: usb 5-1: BOGUS control dir, pipe 80001e80 doesn't match bRequestType 0 WARNING: CPU: 0 PID: 3813 at...

CVE-2022-48834

CVE-2022-48834 refers to a Linux kernel issue in the usb: usbtmc driver where usbtmc_ioctl_request incorrectly used usb_rcvctrlpipe() for all transfers (in or out). The fix separates control transfers by direction. The vulnerability impact described is a local issue tied to incorrect control pipe...

lcms:cms_virtual_profile_fuzzer: Stack-buffer-overflow in UnrollChunkyBytes

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=5344770998730752 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsvirtualprofilefuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

PT-2024-40807 · Git +1 · Openssl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a null-dereference read crash. Technical details include a crash type of null-dereference READ and a crash state involving do evp...

CVE-2024-40996 bpf: Avoid splat in pskb_pull_reason

In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid splat in pskbpullreason syzkaller builds CONFIGDEBUGNET=y frequently trigger a debug hint in pskbmaypull. We'd like to retain this debug check because it might hint at integer overflows and other issues kernel code...

libraw:libraw_cr2_fuzzer: Index-out-of-bounds in AAHD::make_ahd_rb_hv

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4713405714333696 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::parseLeicaMakernote

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6494926154563584 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libucl:ucl_add_string_fuzzer: Crash in ucl_hash_search

Detailed Report: https://oss-fuzz.com/testcase?key=6107381256224768 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000002dc6d0 Crash State: uclhashsearch uclincludefilesingle...

AZL-43267 CVE-2024-39472 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: xfs: fix log recovery buffer allocation for the legacy hsize fixup Commit a70f9fe52daa "xfs: detect and handle invalid iclog size set by mkfs" added a fixup for incorrect hsize values used for the initial umount record in old...

BIT-BPFTOOL-2021-45940

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 4 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...

usrsctp:fuzzer_connect: Heap-use-after-free in sodealloc

Detailed Report: https://oss-fuzz.com/testcase?key=4958762998235136 Project: usrsctp Fuzzing Engine: libFuzzer Fuzz Target: fuzzerconnect Job Type: libfuzzerasanusrsctp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x51900000cf00 Crash State: sodealloc sctptimeouthandle...

bignum-fuzzer:fuzzer_openssl_go_no_negative_num_len_1200_all_operations: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4855278512701440 Project: bignum-fuzzer Fuzzing Engine: libFuzzer Fuzz Target: fuzzeropensslgononegativenumlen1200alloperations Job Type: libfuzzerasanbignum-fuzzer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000f718 Crash...