ghostscript:gs_device_psdcmyk_fuzzer: Segv on unknown address in gx_device_forward_finalize

Detailed Report: https://oss-fuzz.com/testcase?key=5089320043085824 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepsdcmykfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gxdeviceforwardfinalize...

libraw:libraw_nef_fuzzer: Heap-buffer-overflow in libraw_sget4_static

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5307387977203712 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzerasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

hdf5:h5_extended_fuzzer: Crash in H5SL__release_common

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=5096075250696192 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzerubsanhdf5 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000022580 Crash Stat...

inchi:inchi_input_fuzzer: Crash in inchi_ios_print_nodisplay

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=4516342951182336 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: inchiinputfuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x63000047fffe Crash Stat...

Radamsa - A General-Purpose Fuzzer

Radamsa is a test case generator for robustness testing, a.k.a. a fuzzer. It is typically used to test how well a program can withstand malformed and potentially malicious inputs. It works by reading sample files of valid data and generating interestringly different outputs from them. The main...

libreoffice:fodsfuzzer: Heap-use-after-free in cppu::idestroySequence

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6045390006714368 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: fodsfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash...

PT-2024-40668 · Git +1 · Libxaac

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue was identified, as reported by OSS-Fuzz. The crash type is Heap-buffer-overflow READ 1, and it occurs in the ixaac enco...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in TranslateLetter

Detailed Report: https://oss-fuzz.com/testcase?key=6008047111569408 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7d92b336b130 Crash State: TranslateLetter...

Linux kernel security vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from running syz's reproduction C program locally, which can lead to multiple security issues...

selinux:binpolicy-fuzzer: Heap-buffer-overflow in create_str

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5774251095293952 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: binpolicy-fuzzer Job Type: libfuzzerasanselinux Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address...

selinux:binpolicy-fuzzer: Heap-buffer-overflow in strs_create_and_add

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5843327859621888 Project: selinux Fuzzing Engine: afl Fuzz Target: binpolicy-fuzzer Job Type: aflasanselinux Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

jackson-databind:ObjectReaderRandomClassFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=4744806502825984 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ObjectReaderRandomClassFuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type:...

jackson-databind:AdaLObjectReader3Fuzzer: Security exception in com.fasterxml.jackson.databind.deser.std.ObjectArrayDeserializer.handleNonArray

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=4650956300353536 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: AdaLObjectReader3Fuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type: Security...

PT-2024-40581 · Git +1 · Tarantool

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address, which occurs during a lua pcall. The crash state includes lj BC RET1 and is...

rdkit:smiles_string_to_mol_fuzzer: Heap-use-after-free in RDKit::Canon::initCanonAtoms

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5547297211482112 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzerasanrdkit Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

PT-2024-40869

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves the fuzzer execute ex and ZEND DO FCALL SPEC RETVAL UNUSED HANDLE...

imagemagick:crop_fuzzer: Use-of-uninitialized-value in LibRaw::copy_bayer

Detailed Report: https://oss-fuzz.com/testcase?key=4747134947622912 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::copybayer LibRaw::raw2imageex...

jackson-databind:ObjectReaderRandomClassFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=4610052082171904 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ObjectReaderRandomClassFuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type:...

PT-2024-40833 · Git +1 · Libavif

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, as reported by OSS-Fuzz. The crash state involves LLVMFuzzerRunDriver. No information is provided...

apache-commons-validator:UrlValidator2Fuzzer: Security exception in java.base/java.util.regex.Pattern$Loop.match

Detailed Report: https://oss-fuzz.com/testcase?key=5168308332593152 Project: apache-commons-validator Fuzzing Engine: libFuzzer Fuzz Target: UrlValidator2Fuzzer Job Type: libfuzzerasanapache-commons-validator Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...