imagemagick:encoder_jpg_fuzzer: Heap-use-after-free in LocaleNCompare

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5068234538680320 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderjpgfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-use-after-free READ 1 Cra...

OSV-2024-272 Heap-buffer-overflow in DDS_Security_Deserialize_ParticipantBuiltinTopicData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68028 Crash type: Heap-buffer-overflow READ 2 Crash state: DDSSecurityDeserializeParticipantBuiltinTopicData fuzzsecuritydeser.c...

OSV-2024-269 Security exception in java.base/java.util.stream.AbstractPipeline.evaluate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66703 Crash type: Security exception Crash state: java.base/java.util.stream.AbstractPipeline.evaluate java.base/java.util.stream.ReferencePipeline.collect...

OSV-2024-267 Heap-buffer-overflow in SetDataFormat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68047 Crash type: Heap-buffer-overflow WRITE 8 Crash state: SetDataFormat ParseIT8 cmsIT8LoadFromMem...

fwupd:uswid_fuzzer: Heap-buffer-overflow in cbor_get_uint16

Project: https://github.com/fwupd/fwupd.git Detailed Report: https://oss-fuzz.com/testcase?key=5615161965608960 Project: fwupd Fuzzing Engine: libFuzzer Fuzz Target: uswidfuzzer Job Type: libfuzzerasanfwupd Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x606000000770...

OSV-2024-265 Heap-buffer-overflow in Mat_VarDuplicate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68065 Crash type: Heap-buffer-overflow READ 8 Crash state: MatVarDuplicate MatioRead matiofuzzer.cpp...

glslang:compile_fuzzer: Crash in glslang::TInfoSinkBase::location

Project: https://github.com/khronosgroup/glslang.git Detailed Report: https://oss-fuzz.com/testcase?key=5252427918934016 Project: glslang Fuzzing Engine: libFuzzer Fuzz Target: compilefuzzer Job Type: libfuzzerasanglslang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff8000...

lcms:cmsIT8_load_fuzzer: Heap-buffer-overflow in SetDataFormat

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=4862316173656064 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsIT8loadfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

cyclonedds:fuzz_security_deser: Heap-buffer-overflow in DDS_Security_Deserialize_ParticipantBuiltinTopicData

Project: https://github.com/eclipse-cyclonedds/cyclonedds.git Detailed Report: https://oss-fuzz.com/testcase?key=5398850366930944 Project: cyclonedds Fuzzing Engine: honggfuzz Fuzz Target: fuzzsecuritydeser Job Type: honggfuzzasancyclonedds Platform Id: linux Crash Type: Heap-buffer-overflow READ...

OSV-2024-255 UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66797 Crash type: UNKNOWN READ Crash state: NULL...

OSV-2024-251 Heap-use-after-free in gx_device_forward_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67932 Crash type: Heap-use-after-free READ 8 Crash state: gxdeviceforwardfinalize gxdevicefinalize gsgcreclaim...

OSV-2024-248 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67850 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

vulkan-loader:json_load_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6627566543765504 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: jsonloadfuzzer Job Type: libfuzzerubsanvulkan-loader Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000003c752c0 Crash State: NULL Sanitizer: undefined...

ghostscript:gs_device_pxlmono_fuzzer: Heap-use-after-free in gx_device_forward_finalize

Detailed Report: https://oss-fuzz.com/testcase?key=4911891349569536 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepxlmonofuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x62a00020a290 Crash State:...

OSV-2024-246 UNKNOWN READ in ndpi_detection_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67881 Crash type: UNKNOWN READ Crash state: ndpidetectionprocesspacket fuzzprocesspacket.c...

OSV-2024-245 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67672 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel...

matio:matio_fuzzer: Heap-buffer-overflow in H5T__bit_find

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5998366719803392 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libreoffice:schtmlfuzzer: Heap-buffer-overflow in ScHTMLLayoutParser::SetWidths

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4785401047875584 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: schtmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

binutils:fuzz_nm: Invalid-free in display_rel_file

Detailed Report: https://oss-fuzz.com/testcase?key=6228948632535040 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzznm Job Type: aflasanbinutils Platform Id: linux Crash Type: Invalid-free Crash Address: 0x7a31fef2b021 Crash State: displayrelfile displayfile fuzznm.c Sanitizer: address ASA...

Internet Bug Bounty: CVE-2019-1551: rsaz_512_sqr overflow bug on x86_64

The CVE-2019-1551 vulnerability was an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli in the OpenSSL library. The vulnerability was found and reported by researchers. The issue was mitigated in the 1.1.1 and 1.0.2 versions of OpenSSL...