libreoffice:schtmlfuzzer: Crash in ScHTMLLayoutParser::Adjust

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6659224949030912 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: schtmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

gpac:fuzz_route: Heap-buffer-overflow in default_log_callback_color

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4630848151289856 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzroute Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x611000042641 Crash State:...

gpac:fuzz_route: Heap-buffer-overflow in gf_route_dmx_process_service_signaling

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5054025641820160 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzroute Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x602000000dd1 Crash State:...

OSV-2024-233 Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReorderPicturesInDisplay

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66003 Crash type: Use-of-uninitialized-value Crash state: WelsDec::CWelsDecoder::ReorderPicturesInDisplay WelsDec::CWelsDecoder::DecodeFrame2WithCtx WelsDec::CWelsDecoder::DecodeFrame2...

matio:matio_fuzzer: Use-of-uninitialized-value in H5G__ent_to_link

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5889030634930176 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-val...

libxaac:xaac_dec_fuzzer: Heap-buffer-overflow in Codec::decodeXAACStream

Project: https://github.com/ittiam-systems/libxaac.git Detailed Report: https://oss-fuzz.com/testcase?key=5264406360424448 Project: libxaac Fuzzing Engine: libFuzzer Fuzz Target: xaacdecfuzzer Job Type: libfuzzerasanlibxaac Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

kimageformats:kimgio_raw_fuzzer: Heap-buffer-overflow in LibRaw::process_Sony_ADDRESS

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6734963803226112 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiorawfuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libspdm:test_spdm_responder_chunk_send_ack: Heap-buffer-overflow in libspdm_test_responder_chunk_send_ack_case1

Project: https://github.com/DMTF/libspdm.git Detailed Report: https://oss-fuzz.com/testcase?key=6712269464469504 Project: libspdm Fuzzing Engine: libFuzzer Fuzz Target: testspdmresponderchunksendack Job Type: libfuzzerasanlibspdm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

OSV-2024-223 UNKNOWN READ in H5HG_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67725 Crash type: UNKNOWN READ Crash state: H5HGread H5VLnativeblobget H5VLblobget...

ffmpeg:ffmpeg_AV_CODEC_ID_VP4_fuzzer: Crash in vp3_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6291788159385600 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVP4fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000104c27348...

libredwg:llvmfuzz: Heap-buffer-overflow in dxf_entities_read

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5080112333651968 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

OSV-2024-222 Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67637 Crash type: Security exception Crash state: co.nstant.in.cbor.CborDecoder.decodeNext java.base/jdk.internal.misc.Unsafe.putByte jdk.unsupported/sun.misc.Unsafe.putByte...

OSV-2024-221 Heap-buffer-overflow in libspdm_copy_mem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67585 Crash type: Heap-buffer-overflow READ 1 Crash state: libspdmcopymem libspdmgetresponsechunksend libspdmgetresponsechunksend...

OSV-2024-217 Heap-use-after-free in dropNode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67670 Crash type: Heap-use-after-free READ 8 Crash state: dropNode api.c xmlFreeNodeList...

opennavsurf-bag:bag_extended_fuzzer: Heap-buffer-overflow in H5VM_memcpyvv

Detailed Report: https://oss-fuzz.com/testcase?key=5373393081794560 Project: opennavsurf-bag Fuzzing Engine: libFuzzer Fuzz Target: bagextendedfuzzer Job Type: libfuzzerasanopennavsurf-bag Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61200001f948 Crash State:...

libxml2:api: Heap-use-after-free in dropNode

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5078336398229504 Project: libxml2 Fuzzing Engine: afl Fuzz Target: api Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60c0000007e8 Crash Stat...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5766245455560704 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

OSV-2024-204 Heap-use-after-free in JS_NewObjectFromShape

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65872 Crash type: Heap-use-after-free WRITE 8 Crash state: JSNewObjectFromShape jsparsetemplate jsparsepostfixexpr...

OSV-2024-198 Heap-use-after-free in xmlCopyPropInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67586 Crash type: Heap-use-after-free READ 8 Crash state: xmlCopyPropInternal xmlCopyPropList xmlStaticCopyNode...

OSV-2024-194 Heap-use-after-free in xmlDOMWrapNSNormAcquireNormalizedNs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67560 Crash type: Heap-use-after-free READ 8 Crash state: xmlDOMWrapNSNormAcquireNormalizedNs xmlDOMWrapReconcileNamespaces api.c...