selinux:secilc-fuzzer: Heap-use-after-free in cil_list_destroy

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=4833924441047040 Project: selinux Fuzzing Engine: honggfuzz Fuzz Target: secilc-fuzzer Job Type: honggfuzzasanselinux Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

selinux:binpolicy-fuzzer: Crash in hashtab_insert

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5128474841710592 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: binpolicy-fuzzer Job Type: libfuzzerubsanselinux Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=6266239344050176 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void intrapredictionangular vo...

WPAxFuzz - A Full-Featured Open-Source Wi-Fi Fuzzer

This tool is capable of fuzzing either any management, control or data frame of the 802.11 protocol or the SAE exchange. For the management, control or data frames, you can choose either the "standard" mode where all of the frames transmitted have valid size values or the "random" mode where the...

harfbuzz:hb-shape-fuzzer: Heap-buffer-overflow in OT::CmapSubtable::get_glyph

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6046937777045504 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

harfbuzz:hb-shape-fuzzer: Heap-buffer-overflow in OT::CmapSubtable::collect_unicodes

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=4787105656864768 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-shape-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6040000001...

ghostscript:gs_device_psdcmyk_fuzzer: Null-dereference READ in pdf14_cmykspot_get_color_comp_index

Detailed Report: https://oss-fuzz.com/testcase?key=5633229642924032 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepsdcmykfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State:...

CVE-2023-37454

An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF filesystem image causes a use-after-free write operation in the udfputsuper and udfcloselvid functions in fs/udf/super.c. NOTE: the suse.com reference has a different perspective about this...

ASB-A-275041864

In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

harfbuzz:hb-shape-fuzzer: Use-of-uninitialized-value in bool OT::glyf_impl::Glyph::get_points<OT::glyf_accelerator_t>

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5114131137822720 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

harfbuzz:hb-subset-fuzzer: Use-of-uninitialized-value in CFF::Charset::serialize

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5191907895279616 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

harfbuzz:hb-subset-fuzzer: Use-of-uninitialized-value in CFF::Charset::serialize

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=4552226966994944 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

ogre:image_fuzz: Heap-buffer-overflow in stbiw__encode_png_line

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=5353747254214656 Project: ogre Fuzzing Engine: libFuzzer Fuzz Target: imagefuzz Job Type: libfuzzerasanogre Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x605000000c71 Cra...

clamav:clamav_dbload_WDB_fuzzer: Stack-buffer-overflow in parse_regex

Detailed Report: https://oss-fuzz.com/testcase?key=6157029266554880 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadWDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fff3890d260 Crash State: parseregex parsereg...

Firefly - Black Box Fuzzer For Web Applications

Firefly is an advanced black-box fuzzer and not just a standard asset discovery tool. Firefly provides the advantage of testing a target with a large number of built-in checks to detect behaviors in the target. Note: Firefly is in a very new stage v1.0 but works well for now, if the target does n...

poppler:annot_fuzzer: Heap-buffer-overflow in utf8ToUtf16

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5801161144532992 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

javaparser:parseFuzzer: Security exception in com.github.javaparser.CommentsInserter.insertComments

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5593402016923648 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

rdkit:mol_deserialization_fuzzer: Heap-buffer-overflow in RDKit::streamRead

Detailed Report: https://oss-fuzz.com/testcase?key=5912430778384384 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldeserializationfuzzer Job Type: libfuzzerasani386rdkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf6120cd4 Crash State: RDKit::streamRead...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Crash in jpegxl_anim_probe

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6360142686584832 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xf24e32ac Crash...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in SetPitchGradient

Detailed Report: https://oss-fuzz.com/testcase?key=5542902395437056 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x784b7b4ccf94 Crash State: SetPitchGradient...