pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::BgpLayer::getHeaderLen

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=6699162471038976 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

OSV-2024-161 Heap-buffer-overflow in pcre2_fuzzsupport.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67297 Crash type: Heap-buffer-overflow READ 4 Crash state: pcre2fuzzsupport.c...

pcre2:pcre2_fuzzer_32_3l: Heap-buffer-overflow in pcre2_fuzzsupport.c

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed Report: https://oss-fuzz.com/testcase?key=4616409650888704 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer323l Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_dem_MOV_fuzzer: Heap-buffer-overflow in mov_read_ispe

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4996530429820928 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemMOVfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6030000003f0 Crash...

php:php-fuzz-function-jit: Segv on unknown address in cleanup_unfinished_calls

Detailed Report: https://oss-fuzz.com/testcase?key=5127454958092288 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: cleanupunfinishedcalls...

OSV-2024-153 Heap-buffer-overflow in od_ec_dec_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67184 Crash type: Heap-buffer-overflow READ 1 Crash state: odecdecinit aomreaderinit tileworkerhookinit...

gdal:gmlas_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5831365541036032 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gmlasfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x00000000 Crash State: NULL Sanitizer: address ASAN Crash...

OSV-2024-144 UNKNOWN READ in spvtools::val::ValidateAccessChain

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66956 Crash type: UNKNOWN READ Crash state: spvtools::val::ValidateAccessChain spvtools::val::MemoryPass spvtools::val::ValidateBinaryUsingContextAndValidationState...

OSV-2024-142 Heap-buffer-overflow in gf_gz_decompress_payload_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67043 Crash type: Heap-buffer-overflow WRITE 1 Crash state: gfgzdecompresspayloadex gfisomboxparseex gfisomboxarrayread...

ffmpeg:ffmpeg_dem_AIFF_fuzzer: Heap-buffer-overflow in av_channel_layout_copy

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4920720268263424 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemAIFFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6090000000e0 Crash...

libredwg:llvmfuzz: Heap-buffer-overflow in dynapi_set_helper

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4865751229988864 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

OSV-2024-140 Container-overflow in WasmEdge::LLVM::Compiler::compile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67006 Crash type: Container-overflow READ 8 Crash state: WasmEdge::LLVM::Compiler::compile WasmEdge::LLVM::Compiler::compile WasmEdge::Driver::FuzzTool...

OSV-2024-138 Security exception in com.github.javaparser.GeneratedJavaParser.Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67005 Crash type: Security exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression java.base/java.util.concurrent.ConcurrentHashMap.putVal java.base/java.util.concurrent.ConcurrentHashMap.putIfAbsent...

ffmpeg:ffmpeg_IO_DEMUXER_fuzzer: Heap-buffer-overflow in mov_read_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5685384082161664 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegIODEMUXERfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x602000000170...

OSV-2024-137 Global-buffer-overflow in igraph_dl_yylex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66992 Crash type: Global-buffer-overflow READ 2 Crash state: igraphdlyylex igraphdlyyparse igraphreadgraphdl...

OSV-2024-135 Heap-buffer-overflow in BS_ReadByte

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66949 Crash type: Heap-buffer-overflow READ 1 Crash state: BSReadByte gfbsreadu8 dumpsei...

igraph:read_dl: Global-buffer-overflow in igraph_dl_yylex

Project: https://github.com/igraph/igraph.git Detailed Report: https://oss-fuzz.com/testcase?key=4645837244268544 Project: igraph Fuzzing Engine: libFuzzer Fuzz Target: readdl Job Type: libfuzzerasani386igraph Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash Address: 0x082d0e70...

pcre2:pcre2_fuzzer: Use-of-uninitialized-value in fast_forward_first_n_chars

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed Report: https://oss-fuzz.com/testcase?key=4593633133133824 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzermsanpcre2 Platform Id: linux Crash Type:...

jq:jq_fuzz_execute: Heap-buffer-overflow in jv_parse

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=4891865084133376 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzexecute Job Type: libfuzzerasanjq Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6030000113c1 Crash...

OSV-2024-120 Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66743 Crash type: Security exception Crash state: com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer java.base/java.lang.StringCoding.encode java.base/java.lang.String.getBytes...