imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in transform_4x4_luma_add_16_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=5708690734579712 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: transform4x4lumaadd16fallback...

Snapshot fuzzing direct composition with WTF

Cisco Talos has developed a custom fuzzer using the popular snapshot fuzzer "WTF" which targets Direct Composition in Windows. Talos vulnerability research team used Protocol Buffers developed by Google to serialize and deserialize test cases. The Bochscpu backend of WTF was patched and other...

llvm:clangd-fuzzer: Heap-buffer-overflow in llvm::raw_ostream::copy_to_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=6365487988342784 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clangd-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x625000004900 Crash State: llvm::rawostream::copytobuffer...

ghostscript:gs_device_tiffsep1_fuzzer: Heap-use-after-free in gx_image_enum_begin

Detailed Report: https://oss-fuzz.com/testcase?key=6443257430933504 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address: 0x62b00000e748 Crash State:...

apache-poi:POIHSSFFuzzer: Security exception in java.base/java.util.regex.Pattern$Branch.match

Detailed Report: https://oss-fuzz.com/testcase?key=4657005060816896 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSSFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.regex.Pattern$Branch.mat...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in TranslateWord3

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=4884369355177984 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Index-out-of-bounds in decode_sublayer_hrd

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4685160840560640 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

apache-poi:POIHSLFFuzzer: Security exception in org.apache.poi.hslf.record.PPDrawing.writeOut

Detailed Report: https://oss-fuzz.com/testcase?key=5213769426665472 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSLFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.poi.hslf.record.PPDrawing.writeOu...

apache-poi:POIHWPFFuzzer: Security exception in org.apache.poi.util.IOUtils.safelyAllocate

Detailed Report: https://oss-fuzz.com/testcase?key=5832867957309440 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHWPFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.poi.util.IOUtils.safelyAllocate...

ffmpeg:ffmpeg_AV_CODEC_ID_FLIC_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=5558602804625408 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDFLICfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Global-buffer-overflow in parse_nal_unit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4858264984354816 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegDEMUXERfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000001575278...

OSV-2023-903 Heap-double-free in snmp_e2e_fuzzer.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62604 Crash type: Heap-double-free Crash state: snmpe2efuzzer.c netsnmpcleanupsession snmpe2efuzzer.c...

imagemagick:encoder_label_fuzzer: Heap-buffer-overflow in ExecuteRPN

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5203724806782976 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderlabelfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 8...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in cbs_h266_read_nal_unit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5837632490569728 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in jpegNUMBER_get_SIZ_segment

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4628889915490304 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

clamav:clamav_scanfile_OLE2_fuzzer: Heap-buffer-overflow in initialize_encryption_key

Detailed Report: https://oss-fuzz.com/testcase?key=5074536418377728 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavscanfileOLE2fuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x621000007500 Crash State:...

graphicsmagick:coder_BMP_fuzzer: Use-of-uninitialized-value in WriteBMPImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5879145860825088 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderBMPfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

mruby:mruby_fuzzer: Heap-buffer-overflow in read_tmpl

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5584468330807296 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60300000047d Crash State:...

libbpf:bpf-object-fuzzer: Crash in btf_ext_setup_info

Detailed Report: https://oss-fuzz.com/testcase?key=4607488395444224 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasani386libbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x128039bd Crash State: btfextsetupinfo btfextsetupcorerelos...

PT-2023-36021 · Git +1 · Icu

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state involves the icu 74::Calendar::set function, as indicated by the calendar fuzzer.c...