glslang:compile_fuzzer: Heap-use-after-free in glslang::TPpContext::tokenPaste

Project: https://github.com/khronosgroup/glslang.git Detailed Report: https://oss-fuzz.com/testcase?key=4875928121245696 Project: glslang Fuzzing Engine: afl Fuzz Target: compilefuzzer Job Type: aflasanglslang Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x608000009520...

OSV-2023-930 Heap-buffer-overflow in OT::cvar::decompile_tuple_variations

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62774 Crash type: Heap-buffer-overflow READ 2 Crash state: OT::cvar::decompiletuplevariations OT::cvar::subset bool trysubset...

OSV-2023-920 Security exception in com.github.javaparser.GeneratedJavaParser.Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62731 Crash type: Security exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression java.base/sun.nio.cs.CESU8$Encoder.to3Bytes java.base/sun.nio.cs.CESU8$Encoder.encodeArrayLoop...

harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in OT::cvar::decompile_tuple_variations

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5842152921628672 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.compiler.CoreFunction.toString

Detailed Report: https://oss-fuzz.com/testcase?key=5942907754119168 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-text:StringSubstitutorInterpolatorFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexRoadblocks.nodeMatchHook

Detailed Report: https://oss-fuzz.com/testcase?key=5267762668503040 Project: apache-commons-text Fuzzing Engine: libFuzzer Fuzz Target: StringSubstitutorInterpolatorFuzzer Job Type: libfuzzerasanapache-commons-text Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-poi:POIHSLFFuzzer: Security exception in org.apache.poi.hslf.record.PPDrawing.writeOut

Detailed Report: https://oss-fuzz.com/testcase?key=5213769426665472 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSLFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.poi.hslf.record.PPDrawing.writeOu...

apache-poi:POIHDGFFuzzer: Security exception with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6586117845286912 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHDGFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL Sanitizer: address ASAN Recommended...

apache-poi:POIHDGFFuzzer: Security exception in org.apache.poi.hdgf.chunks.Chunk.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5284622092861440 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHDGFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.poi.hdgf.chunks.Chunk...

metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.metadata.exif.makernotes.CanonMakernoteDirectory.setObjectArray

Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=4846972357705728 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...

OSV-2023-905 Segv on unknown address in icu_74::UnicodeString::copyFrom

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62651 Crash type: Segv on unknown address Crash state: icu74::UnicodeString::copyFrom icu74::UnicodeString::UnicodeString icu74::number::impl::SimpleModifier::SimpleModifier...

libzip:zip_write_encrypt_aes256_file_fuzzer: Heap-use-after-free in zip_error_fini

Project: https://github.com/nih-at/libzip.git Detailed Report: https://oss-fuzz.com/testcase?key=6114202340950016 Project: libzip Fuzzing Engine: libFuzzer Fuzz Target: zipwriteencryptaes256filefuzzer Job Type: libfuzzerasanlibzip Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

glslang:compile_fuzzer: Heap-buffer-overflow in glslang::HlslGrammar::acceptDeclaration

Project: https://github.com/khronosgroup/glslang.git Detailed Report: https://oss-fuzz.com/testcase?key=4665016688967680 Project: glslang Fuzzing Engine: libFuzzer Fuzz Target: compilefuzzer Job Type: libfuzzerasanglslang Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2023-901 UNKNOWN READ in icu_74::RelativeDateTimeFormatter::formatRelativeImpl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62601 Crash type: UNKNOWN READ Crash state: icu74::RelativeDateTimeFormatter::formatRelativeImpl icu74::FormattedRelativeDateTime icu74::RelativeDateTimeFormatter::doFormatToV icu74::RelativeDateTimeFormatter::formatToValue...

OSV-2023-899 Heap-buffer-overflow in cosm_create_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62613 Crash type: Heap-buffer-overflow READ 1 Crash state: cosmcreatekey scpkcs15initgeneratekey dogeneratekey...

OSV-2023-893 Heap-buffer-overflow in initialize_encryption_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62542 Crash type: Heap-buffer-overflow READ Crash state: initializeencryptionkey cliole2extract cliscanole2...

OSV-2023-890 Heap-use-after-free in dwarf_dealloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62547 Crash type: Heap-use-after-free READ 2 Crash state: dwarfdealloc dwarffdedestructor tdestroyfreenode...

OSV-2023-889 Heap-double-free in regcomp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62529 Crash type: Heap-double-free Crash state: regcomp fileregcomp load1...

OSV-2023-885 UNKNOWN READ in bytes1_char_at

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62508 Crash type: UNKNOWN READ Crash state: bytes1charat asciiatlineend trymatch...

OSV-2023-883 Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62524 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.copyOfSubArray org.apache.lucene.util.BytesRef.deepCopyOf org.apache.lucene.index.Term...