rnp:fuzz_keyring: Stack-buffer-overflow in stream_write_key

Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=5745453998800896 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzkeyring Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7fff35f15c68 Crash...

OSV-2020-1671 Heap-buffer-overflow in Dasher::Dasher

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25243 Crash type: Heap-buffer-overflow READ 4 Crash state: Dasher::Dasher bool drawLineAA& QCosmeticStroker::drawPath...

skia:sksl2spirv: Segv on unknown address in std::__1::default_delete<SkSL::Statement>::operator

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=4664685717356544 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2spirv Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

php:php-fuzz-parser: Heap-use-after-free in shutdown_executor

Detailed Report: https://oss-fuzz.com/testcase?key=6273714575114240 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0xf38297cc Crash State: shutdownexecutor zenddeactivate...

monero:cold-transaction_fuzz_tests: Crash in tools::wallet2::import_outputs

Project: https://github.com/monero-project/monero.git Detailed Report: https://oss-fuzz.com/testcase?key=6050427186184192 Project: monero Fuzzing Engine: libFuzzer Fuzz Target: cold-transactionfuzztests Job Type: libfuzzerasanmonero Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

monero:cold-outputs_fuzz_tests: Crash in tools::wallet2::import_outputs

Project: https://github.com/monero-project/monero.git Detailed Report: https://oss-fuzz.com/testcase?key=5443075625975808 Project: monero Fuzzing Engine: libFuzzer Fuzz Target: cold-outputsfuzztests Job Type: libfuzzerasanmonero Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

open62541:fuzz_binary_message: Heap-use-after-free in UA_NodeMap_delete

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5642268793634816 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzbinarymessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

qt:qtbase_gui_image_qimage_loadfromdata: Heap-buffer-overflow in Dasher::Dasher

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5157481003876352 Project: qt Fuzzing Engine: honggfuzz Fuzz Target: qtbaseguiimageqimageloadfromdata Job Type: honggfuzzasanqt Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

assimp:assimp_fuzzer: Crash in Assimp::ObjFileMtlImporter::getFloatValue

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5086898182422528 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000004080 Crash Stat...

OSV-2020-1668 Memcpy-param-overlap in ot::Message::Write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25226 Crash type: Memcpy-param-overlap Crash state: ot::Message::Write ot::Message::CopyTo ot::Ip6::Ip6::InsertMplOption...

OSV-2020-1667 Heap-use-after-free in xmlTextReaderRead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25210 Crash type: Heap-use-after-free READ 4 Crash state: xmlTextReaderRead xml.c xmlTextReaderFreeNode...

OSV-2020-1664 Negative-size-param in BaseMemStream<char const>::getChars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25221 Crash type: Negative-size-param Crash state: BaseMemStream::getChars Stream::doGetChars Stream::fillString...

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in std::__1::vector<unsigned int, std::__1::allocator<unsigned int> >::reserve

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5762452447559680 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

envoy:server_fuzz_test: Heap-use-after-free in Envoy::Http::AsyncStreamImpl::resetStream

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5539928229019648 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: serverfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

alembic:alembic_dump_info_fuzzer: Segv on unknown address in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/alembic/alembic.git Detailed Report: https://oss-fuzz.com/testcase?key=5723831061446656 Project: alembic Fuzzing Engine: libFuzzer Fuzz Target: alembicdumpinfofuzzer Job Type: libfuzzerasanalembic Platform Id: linux Crash Type: Segv on unknown address Crash Address:...

OSV-2020-1661 Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25181 Crash type: Use-of-uninitialized-value Crash state: fuzzing::memory::memorytestmsan cryptofuzz::ExecutorBase::postp cryptofuzz::ExecutorBase::Run...

OSV-2020-1659 Use-of-uninitialized-value in LibRaw::parse_sinar_ia

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25188 Crash type: Use-of-uninitialized-value Crash state: LibRaw::parsesinaria LibRaw::identify LibRaw::opendatastream...

alembic:alembic_dump_info_fuzzer: Segv on unknown address in std::__1::__tree_node_base<void*>* std::__1::__tree_min<std::__1::__tree_node_ba

Project: https://github.com/alembic/alembic.git Detailed Report: https://oss-fuzz.com/testcase?key=5636402992381952 Project: alembic Fuzzing Engine: afl Fuzz Target: alembicdumpinfofuzzer Job Type: aflasanalembic Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

libreoffice:ww8fuzzer: Heap-use-after-free in SwMSDffManager::ProcessObj

Detailed Report: https://oss-fuzz.com/testcase?key=4776111647752192 Project: libreoffice Fuzzing Engine: afl Fuzz Target: ww8fuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60f00004ef98 Crash State: SwMSDffManager::ProcessObj...

libzmq:test_socket_options_fuzzer: Heap-buffer-overflow in zmq_z85_decode

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5458470013501440 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testsocketoptionsfuzzer Job Type: libfuzzerasanlibzmq Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...