lua:luaL_loadbuffer_proto_test: Heap-use-after-free in luaV_finishget

Detailed Report: https://oss-fuzz.com/testcase?key=5350818532360192 Project: lua Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferprototest Job Type: libfuzzerasanlua Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x61b000004338 Crash State: luaVfinishget luaVexecute...

Stable Channel Update for Desktop

The Stable channel has been updated to 123.0.6312.86/.87 for Windows and Mac and 123.0.6312.86 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

samba:fuzz_ndr_spoolss_TYPE_OUT: Segv on unknown address in ndr_print_and_forget

Detailed Report: https://oss-fuzz.com/testcase?key=5465351317946368 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrspoolssTYPEOUT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: ndrprintandforget ndrprintstring...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6664564840136704 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

apache-commons-codec:PhoneticEngineFuzzer: Security exception in java.base/java.lang.AbstractStringBuilder.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5078600585904128 Project: apache-commons-codec Fuzzing Engine: libFuzzer Fuzz Target: PhoneticEngineFuzzer Job Type: libfuzzerasanapache-commons-codec Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

mysql-server:fuzz_real_query: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5128598837067776 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzrealquery Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 123 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 123.0.6312.58 Linux 123.0.6312.58/.59 Windows, Mac contains a number of fixes and improvements -- a list of changes is...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5369419582734336 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

threetenbp:ThreetenbpFuzzer: Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse

Project: https://github.com/ThreeTen/threetenbp.git Detailed Report: https://oss-fuzz.com/testcase?key=5672384906461184 Project: threetenbp Fuzzing Engine: libFuzzer Fuzz Target: ThreetenbpFuzzer Job Type: libfuzzerasanthreetenbp Platform Id: linux Crash Type: Security exception Crash Address:...

Stable Channel Update for Desktop

The Stable channel has been updated to 122.0.6261.128/.129 for Windows and Mac and 122.0.6261.128 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 122.0.6261.129 for Windows and M...

maven-model:Xpp3ReaderFuzzer: Security exception in java.base/java.lang.AbstractStringBuilder.<init>

Project: https://github.com/apache/maven.git Detailed Report: https://oss-fuzz.com/testcase?key=6132570150469632 Project: maven-model Fuzzing Engine: libFuzzer Fuzz Target: Xpp3ReaderFuzzer Job Type: libfuzzerasanmaven-model Platform Id: linux Crash Type: Security exception Crash Address: Crash...

libxaac:xaac_enc_fuzzer: Heap-buffer-overflow in ixheaace_process

Project: https://github.com/ittiam-systems/libxaac.git Detailed Report: https://oss-fuzz.com/testcase?key=5206503495630848 Project: libxaac Fuzzing Engine: libFuzzer Fuzz Target: xaacencfuzzer Job Type: libfuzzerasanlibxaac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

gpac:fuzz_probe_analyze: Stack-buffer-overflow in rtpin_satip_get_server_ip

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4807164113780736 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffc8283ca2...

jsoncons:fuzz_json_cursor: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5194851282911232 Project: jsoncons Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsoncursor Job Type: libfuzzerasanjsoncons Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revisio...

apache-poi:POIHSLFFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=5286044125691904 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSLFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Arrays.copyOf...

maven-model:Xpp3ReaderFuzzer: Security exception in java.base/java.lang.StringUTF16.newBytesFor

Project: https://github.com/apache/maven.git Detailed Report: https://oss-fuzz.com/testcase?key=5055900853272576 Project: maven-model Fuzzing Engine: libFuzzer Fuzz Target: Xpp3ReaderFuzzer Job Type: libfuzzerasanmaven-model Platform Id: linux Crash Type: Security exception Crash Address: Crash...

gdal:gmlas_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5831365541036032 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gmlasfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x00000000 Crash State: NULL Sanitizer: address ASAN Crash...

maven-model:Xpp3ReaderFuzzer: Security exception in com.ctc.wstx.util.WordResolver$Builder.constructBranch

Project: https://github.com/apache/maven.git Detailed Report: https://oss-fuzz.com/testcase?key=5940394326032384 Project: maven-model Fuzzing Engine: libFuzzer Fuzz Target: Xpp3ReaderFuzzer Job Type: libfuzzerasanmaven-model Platform Id: linux Crash Type: Security exception Crash Address: Crash...

ffmpeg:ffmpeg_dem_MOV_fuzzer: Heap-buffer-overflow in av_freep

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6517723242758144 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemMOVfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

inchi:inchi_input_fuzzer: Global-buffer-overflow in OAD_Polymer_SetAtProps

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=4675082079240192 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: inchiinputfuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...