wasm3:fuzzer: Heap-use-after-free in AcquireCodePageWithCapacity

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=5406300602761216 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x606000000030 Crash...

lcms:cms_universal_transform_fuzzer: Use-of-uninitialized-value in PackChunkyBytes

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=5476826482343936 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsuniversaltransformfuzzer Job Type: libfuzzermsanlcms Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in org.yaml.snakeyaml.parser.ParserImpl$ParseBlockMappingValueComment.produce

Detailed Report: https://oss-fuzz.com/testcase?key=5029703743832064 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

OSV-2022-857 Heap-double-free in fuzz_textfile.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51072 Crash type: Heap-double-free Crash state: fuzztextfile.c fuzztextfile.c...

cryptofuzz:cryptofuzz-boringssl-noasm: Crash in Sha3Final

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5573556058062848 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzerubsancryptofuzz Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

tomcat:ConnectorSendFileFuzzer: Security exception in ConnectorSendFileFuzzer.fuzzerTestOneInput

Project: https://github.com/apache/tomcat.git Detailed Report: https://oss-fuzz.com/testcase?key=6223303768932352 Project: tomcat Fuzzing Engine: libFuzzer Fuzz Target: ConnectorSendFileFuzzer Job Type: libfuzzerasantomcat Platform Id: linux Crash Type: Security exception Crash Address: Crash...

ngolo-fuzzing:fuzz_ng_math_big: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6424608265338880 Project: ngolo-fuzzing Fuzzing Engine: libFuzzer Fuzz Target: fuzzngmathbig Job Type: libfuzzerasanngolo-fuzzing Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer:...

lcms:cms_universal_transform_fuzzer: Use-of-uninitialized-value in PackPlanarBytes

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=5304997398577152 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsuniversaltransformfuzzer Job Type: libfuzzermsanlcms Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

lcms:cms_transform_all_fuzzer: Heap-buffer-overflow in _cmsMAT3per

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=5218775393239040 Project: lcms Fuzzing Engine: afl Fuzz Target: cmstransformallfuzzer Job Type: aflasanlcms Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x603000000298...

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4847100566831104 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

wolfssl:cryptofuzz-normal-math: Stack-buffer-overflow in wc_Shake256_Final

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5057208924110848 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-normal-math Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Addres...

exiv2:fuzz-read-print-write: Heap-buffer-overflow in Exiv2::MemIo::read

Project: https://github.com/Exiv2/exiv2.git Detailed Report: https://oss-fuzz.com/testcase?key=5744443654799360 Project: exiv2 Fuzzing Engine: honggfuzz Fuzz Target: fuzz-read-print-write Job Type: honggfuzzasanexiv2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

ghostscript:gs_device_xpswrite_fuzzer: Heap-use-after-free in xps_tifsSeekProc

Detailed Report: https://oss-fuzz.com/testcase?key=5528151987453952 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicexpswritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x611000031d78 Crash State:...

spring-framework:AspectJExpressionPointcutFuzzer: Security exception in org.aspectj.weaver.patterns.PatternParser.parseAtomicPointcut

Project: https://github.com/spring-projects/spring-framework.git Detailed Report: https://oss-fuzz.com/testcase?key=6350062699020288 Project: spring-framework Fuzzing Engine: libFuzzer Fuzz Target: AspectJExpressionPointcutFuzzer Job Type: libfuzzerasanspring-framework Platform Id: linux Crash...

spring-framework:AspectJExpressionPointcutFuzzer: Security exception in org.aspectj.weaver.patterns.PatternParser.parseNotOrPointcut

Project: https://github.com/spring-projects/spring-framework.git Detailed Report: https://oss-fuzz.com/testcase?key=5209576781250560 Project: spring-framework Fuzzing Engine: libFuzzer Fuzz Target: AspectJExpressionPointcutFuzzer Job Type: libfuzzerasanspring-framework Platform Id: linux Crash...

Helm Vulnerable to denial of service through string value parsing

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. Out of memory panics cannot be recovered from. Applications that use functions from the strvals package in the Helm SDK can have a Denial of Service...

GHSA-7HFP-QFW3-5JXH Helm Vulnerable to denial of service through string value parsing

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. Out of memory panics cannot be recovered from. Applications that use functions from the strvals package in the Helm SDK can have a Denial of Service...

lcms:cms_transform_all_fuzzer: Use-of-uninitialized-value in _LUTeval16

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=6539233157840896 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmstransformallfuzzer Job Type: libfuzzermsanlcms Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

frankenstein

This is a Python-based framework called Frankenstein, designed to provide a virtual environment for fuzzing wireless firmwares. The framework is currently optimized for the CYW20735 Bluetooth evaluation board but also supports the CYW20819A1 evaluation board. The framework allows users to attach ...

Denial of service through string value parsing

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. Out of memory panics cannot be recovered from. Applications that use functions from the strvals package in the Helm SDK can have a Denial of Service...