upx:decompress_packed_file_fuzzer: Heap-buffer-overflow in N_BELE_RTP::BEPolicy::get64

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=6326501934956544 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: decompresspackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

libtpms:fuzz: Index-out-of-bounds in RsaAdjustPrimeCandidate

Project: https://github.com/stefanberger/libtpms.git Detailed Report: https://oss-fuzz.com/testcase?key=5287535597125632 Project: libtpms Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerubsanlibtpms Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

upx:test_packed_file_fuzzer: Heap-buffer-overflow in acc_safe_hread

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=4983061775187968 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: testpackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7adadecf86e4...

libavc:mvc_dec_fuzzer: Heap-buffer-overflow in ih264d_get_bits_h264

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=6600447909494784 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: mvcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in IEC104Stats::processPacket

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=5971865889734656 Project: ntopng Fuzzing Engine: libFuzzer Fuzz Target: fuzzdissectpacket Job Type: libfuzzerasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

htslib:hts_open_fuzzer: Heap-buffer-overflow in process_one_read

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6707644370649088 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000005697 Crash...

gpac:fuzz_probe_analyze: Index-out-of-bounds in oggpack_read

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5187757047611392 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: oggpackre...

javaparser:parseFuzzer: Security exception in com.github.javaparser.CommentsInserter.insertComments

Detailed Report: https://oss-fuzz.com/testcase?key=4684654577778688 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=4792596870266880 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerubsancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

PT-2023-35669 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash has been reported. The crash occurs in the processClientServerHello function, specifically in the process tls and fuz...

CLZero - A Project For Fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors

A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors. About Thank you to @albinowax, @defparam and @d3d else this tool would not exist. Inspired by the tool Smuggler all attack gadgets adapted from Smuggler and...

jackson-datatypes-collections:GuavaDeserializerFuzzer: Security exception in jaz.Zer.reportFinding

Project: https://github.com/FasterXML/jackson-datatypes-collections.git Detailed Report: https://oss-fuzz.com/testcase?key=6656734344904704 Project: jackson-datatypes-collections Fuzzing Engine: libFuzzer Fuzz Target: GuavaDeserializerFuzzer Job Type: libfuzzerasanjackson-datatypes-collections...

jq:jq_fuzz_execute: Heap-buffer-overflow in jv_string_vfmt

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=6170924017385472 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzexecute Job Type: libfuzzerasanjq Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x603000000201 Crash...

OSV-2023-1324 Heap-use-after-free in memory_bclose

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65104 Crash type: Heap-use-after-free READ 8 Crash state: memorybclose bfdclosealldone fuzzdwarf.c...

jq:jq_fuzz_fixed: Stack-buffer-overflow in decNaNs

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=6610410589257728 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzfixed Job Type: libfuzzerasanjq Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 2 Crash Address: 0x7ffd1e3e2b30 Crash...

apache-poi:POIHDGFFuzzer: Security exception in org.apache.poi.hdgf.chunks.Chunk.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=4900165382963200 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHDGFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.poi.hdgf.chunks.Chunk...

PT-2023-35636 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state includes functions such as ih264d...

ruby:fuzz_ruby_gems: Heap-use-after-free in iseq_compile_each0

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4605946869186560 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubygems Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x612000024408 Crash...

libavc:svc_dec_fuzzer: Heap-buffer-overflow in ih264d_compute_bs_non_mbaff

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=4688779507793920 Project: libavc Fuzzing Engine: afl Fuzz Target: svcdecfuzzer Job Type: aflasanlibavc Platform Id: linux Crash Type:...

apache-poi:POIHSSFFuzzer: Security exception in org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock

Detailed Report: https://oss-fuzz.com/testcase?key=5140308748533760 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSSFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...