harfbuzz:hb-subset-fuzzer: Invalid-free in hb_free_impl

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5388270411579392 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Invalid-free Crash Address: 0x621000004f34...

harfbuzz:hb-draw-fuzzer: Global-buffer-overflow in OT::gvar::accelerator_t::apply_deltas_to_points

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5953342850596864 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-draw-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash Address:...

spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

Project: https://github.com/spring-projects/spring-data-mongodb.git Detailed Report: https://oss-fuzz.com/testcase?key=5142463343099904 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linu...

llvm:clang-objc-fuzzer: Use-of-uninitialized-value in clang::CharLiteralParser::CharLiteralParser

Detailed Report: https://oss-fuzz.com/testcase?key=6599944396210176 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::CharLiteralParser::CharLiteralParser...

harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in OT::Layout::Common::Coverage::get_population

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5120727025319936 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libdwarf:fuzz_die_cu_offset: Heap-use-after-free in dwarf_attrlist

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5866690199289856 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzdiecuoffset Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in hb-subset-fuzzer.cc

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5222130632753152 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

SUSE CVE-2021-45940

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 4 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...

libreoffice:hwpfuzzer: Index-out-of-bounds in Outline::GetUnicode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6241452339625984 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: hwpfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

clamav:clamav_dbload_WDB_fuzzer: Heap-buffer-overflow in cli_bm_addpatt

Detailed Report: https://oss-fuzz.com/testcase?key=5271728031137792 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadWDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000001017 Crash State: clibmaddpatt addhash...

php:php-fuzz-parser: Heap-buffer-overflow in lex_scan

Detailed Report: https://oss-fuzz.com/testcase?key=4719196903964672 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000002035 Crash State: lexscan zendlex zendparse...

stb:stbi_read_fuzzer: Use-of-uninitialized-value in stbi__hdr_load

Detailed Report: https://oss-fuzz.com/testcase?key=5648330640719872 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: stbihdrload stbiloadmain stbiloadandpostprocess8b...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::packet_analysis::teredo::TeredoAnalyzer::DetectProtocol

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=6120705550057472 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60c000a548c...

wolfSSL 5.5.0 Session Resumption Denial Of Service Vulnerability

wolfSSL versions prior to 5.5.0 suffer from a denial of service condition related to session resumption. When a TLS 1.3 client connects to a wolfSSL server and SSLclear is called on its session, the server crashes with a segmentation fault. The bug occurs after a client performs a handshake again...

harfbuzz:hb-shape-fuzzer: Heap-buffer-overflow in OT::Layout::GPOS_impl::PairSet<OT::Layout::MediumTypes>::apply

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5965759719538688 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-shape-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6190000009...

graphicsmagick:coder_WPG_fuzzer: Use-of-uninitialized-value in GrayscalePseudoClassImage

Detailed Report: https://oss-fuzz.com/testcase?key=5231345528078336 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderWPGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: GrayscalePseudoClassImage...

Solaris 10 dtprintinfo / libXm / libXpm Security Issues

-- HNS-2022-01 - HN Security Advisory - https://security.humanativaspa.it/ Title: Multiple vulnerabilities in Solaris dtprintinfo and libXm/libXpm Products: Common Desktop Environment 1.6, Motif 2.1, X.Org libXpm Date: 2023-01-18 Oracle vulnerability tracking numbers: S1597707 - Arbitrary printer...

mupdf:pdf_fuzzer: Stack-buffer-overflow in pdf_map_one_to_many

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=6321306205552640 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzerasanmupdf Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7fbf89fb0c20...

clamav:clamav_dbload_CDB_fuzzer: Memcpy-param-overlap in repeat

Detailed Report: https://oss-fuzz.com/testcase?key=5048191626379264 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x7f95860aa728,0x7f958c333d68 and 0x7f957fe210f0,...

harfbuzz:hb-subset-fuzzer: Use-of-uninitialized-value in OT::COLR::closure_V0palette_indices

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6572113563877376 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...