OSV-2024-81 Heap-use-after-free in xmlRemoveID

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66502 Crash type: Heap-use-after-free READ 4 Crash state: xmlRemoveID xmlFreeProp xmlFreeNodeList...

graphicsmagick:coder_JXL_fuzzer: Heap-buffer-overflow in jxl::ColorCorrelationMap::ColorCorrelationMap

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6044032358744064 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJXLfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow WRIT...

OSV-2024-80 Stack-buffer-overflow in line_join_points

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66455 Crash type: Stack-buffer-overflow WRITE 4 Crash state: linejoinpoints strokeaddcompat gxstrokepathonly...

OSV-2024-79 Heap-double-free in supported_features

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66398 Crash type: Heap-double-free Crash state: supportedfeatures handleatcommand handleatcommandfortest...

OSV-2024-77 Heap-use-after-free in xmlRemoveID

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66446 Crash type: Heap-use-after-free READ 8 Crash state: xmlRemoveID xmlFreeProp xmlFreeNodeList...

http-pattern-matcher:http_template_fuzz_test: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6624741750276096 Project: http-pattern-matcher Fuzzing Engine: libFuzzer Fuzz Target: httptemplatefuzztest Job Type: libfuzzerasanhttp-pattern-matcher Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x588ff322bd85 Crash State: NULL...

freeradius:fuzzer_dhcpv6: Heap-buffer-overflow in __covrec_88E4222CA2171C30

Detailed Report: https://oss-fuzz.com/testcase?key=6187443531350016 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdhcpv6 Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000c0 Crash State: covrec88E4222CA2171C3...

freeradius:fuzzer_dhcpv6: Heap-buffer-overflow in __covrec_13D23F7E87111AC6

Detailed Report: https://oss-fuzz.com/testcase?key=4607808850952192 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdhcpv6 Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000c0 Crash State: covrec13D23F7E87111AC...

OSV-2024-74 Heap-buffer-overflow in hts_log

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66369 Crash type: Heap-buffer-overflow READ Crash state: htslog processoneread cramencodecontainer...

OSV-2024-73 Heap-buffer-overflow in pdf_finalize_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66093 Crash type: Heap-buffer-overflow READ 1 Crash state: pdffinalizestring clipdf cliscanpdf...

mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_memsearch

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4596476730736640 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60300000041d...

OSV-2024-72 UNKNOWN READ in LLVMFuzzerRunDriver

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66204 Crash type: UNKNOWN READ Crash state: LLVMFuzzerRunDriver...

http-pattern-matcher:http_template_fuzz_test: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6624741750276096 Project: http-pattern-matcher Fuzzing Engine: libFuzzer Fuzz Target: httptemplatefuzztest Job Type: libfuzzerasanhttp-pattern-matcher Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x588ff322bd85 Crash State: NULL...

libucl:ucl_add_string_fuzzer: Heap-use-after-free in ucl_hash_func

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=6239072880230400 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

OSV-2024-68 Heap-buffer-overflow in gsfdmx_probe_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66169 Crash type: Heap-buffer-overflow READ 3 Crash state: gsfdmxprobedata gffilterpidrawnew fileinprocess...

http-pattern-matcher:http_template_fuzz_test: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6624741750276096 Project: http-pattern-matcher Fuzzing Engine: libFuzzer Fuzz Target: httptemplatefuzztest Job Type: libfuzzerasanhttp-pattern-matcher Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x588ff322bd85 Crash State: NULL...

OSV-2024-66 Heap-buffer-overflow in mrb_memsearch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66209 Crash type: Heap-buffer-overflow READ 8 Crash state: mrbmemsearch strconvertrange mrbstraref...

OSV-2024-65 Heap-buffer-overflow in mrb_memsearch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66208 Crash type: Heap-buffer-overflow READ 8 Crash state: mrbmemsearch mrbstrsplitm mrbvmexec...

FreeBSD : OpenSSL -- Multiple vulnerabilities (10dee731-c069-11ee-9190-84a93843eb75)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 10dee731-c069-11ee-9190-84a93843eb75 advisory. - Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash...

upx:test_packed_file_fuzzer: Heap-buffer-overflow in ucl_nrv2e_decompress_safe_le16

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=5089751338123264 Project: upx Fuzzing Engine: afl Fuzz Target: testpackedfilefuzzer Job Type: aflasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7e06e86f79b8 Crash State:...