php:php-fuzz-execute: Heap-use-after-free in zval_call_destructor

Detailed Report: https://oss-fuzz.com/testcase?key=6561659590934528 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60e000002f80 Crash State: zvalcalldestructor...

apache-commons-imaging:ImagingTiffFuzzer: Security exception in org.apache.commons.imaging.common.Allocator.intArray

Detailed Report: https://oss-fuzz.com/testcase?key=5824662127640576 Project: apache-commons-imaging Fuzzing Engine: libFuzzer Fuzz Target: ImagingTiffFuzzer Job Type: libfuzzerasanapache-commons-imaging Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

mysql-server:fuzz_initfile: Heap-buffer-overflow in my_ismbchar_utf8mb3

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=5477722185662464 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

nccl:fuzz_xml: Crash in xmlLoadSub

Project: https://github.com/NVIDIA/nccl.git Detailed Report: https://oss-fuzz.com/testcase?key=4539745888501760 Project: nccl Fuzzing Engine: libFuzzer Fuzz Target: fuzzxml Job Type: libfuzzerasannccl Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x792a25dd33d0 Crash State: xmlLoadS...

OSV-2023-397 Heap-buffer-overflow in json_write_TF

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58915 Crash type: Heap-buffer-overflow READ 1 Crash state: jsonwriteTF jsonpreR13headerwriteprivate dwgwritejson...

OSV-2023-396 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58938 Crash type: Security exception Crash state: org.springframework.expression.spel.ast.OpPlus.getValueInternal java.base/java.util.Arrays.hashCode java.base/sun.reflect.generics.reflectiveObjects.ParameterizedTypeImpl.hashC...

OSV-2023-392 Negative-size-param in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58892 Crash type: Negative-size-param Crash state: H5MMmemcpy H5Olinkdecode H5Omsgiteratereal...

OSV-2023-390 Heap-buffer-overflow in sdhci_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58813 Crash type: Heap-buffer-overflow WRITE 1 Crash state: sdhciwrite memoryregionwriteaccessor memoryregiondispatchwrite...

libredwg:llvmfuzz: Heap-buffer-overflow in json_write_TF

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6027934943805440 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2023-388 Heap-buffer-overflow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58786 Crash type: Heap-buffer-overflow READ 4 Crash state: NULL...

PT-2023-35822 · Git +1 · Tcmalloc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported, with a crash state of NULL. This issue was identified through an OSS-Fuzz report. Recommendations:...

OSV-2023-385 Bad-cast to Assimp::BaseImporter from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58724 Crash type: Bad-cast Crash state: Bad-cast to Assimp::BaseImporter from invalid vptr Assimp::Importer::ReadFile Assimp::BatchLoader::LoadAll...

OSV-2023-384 Heap-use-after-free in mrb_str_hash_m

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58723 Crash type: Heap-use-after-free READ 1 Crash state: mrbstrhashm mrbfuncallwithblock mrbfuncallargv...

OSV-2023-383 Security exception in org.json.JSONStringer.value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58722 Crash type: Security exception Crash state: org.json.JSONStringer.value org.json.JSONArray.writeTo org.json.JSONStringer.beforeValue...

OSV-2023-382 Use-of-uninitialized-value in wabt::BinaryReaderObjdump::PrintInitExpr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58694 Crash type: Use-of-uninitialized-value Crash state: wabt::BinaryReaderObjdump::PrintInitExpr wabt::BinaryReaderObjdump::EndInitExpr wabt::BinaryReaderObjdump::EndGlobalInitExpr...

OSV-2023-381 UNKNOWN READ in H5FL__blk_gc_list

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58701 Crash type: UNKNOWN READ Crash state: H5FLblkgclist H5FLgarbagecoll H5FLtermpackage...

OSV-2023-380 UNKNOWN WRITE in bool OT::Layout::Common::Coverage::serialize<hb_map_iter_t<hb_map_iter_t<hb_filt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58663 Crash type: UNKNOWN WRITE Crash state: bool OT::Layout::Common::Coverage::serialize::subset hbsubsetcontextt::returnt OT::Layout::GSUBimpl::SubstLookupSubTable::dispat...

OSV-2023-379 Heap-buffer-overflow in void sort_r_simple<>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58662 Crash type: Heap-buffer-overflow READ 1 Crash state: void sortrsimple bool OT::ClassDef::serializehbsortedarraythbpairtunsigned int, unsigned OT::ClassDefremapandserialize...

OSV-2023-377 UNKNOWN WRITE in bool OT::Layout::Common::CoverageFormat2_4<OT::Layout::MediumTypes>::serialize<h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58671 Crash type: UNKNOWN WRITE Crash state: bool OT::Layout::Common::CoverageFormat24::serialize::subset...

OSV-2023-375 Heap-buffer-overflow in H5MM_memcpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58658 Crash type: Heap-buffer-overflow WRITE Crash state: H5MMmemcpy H5Oallocchunk H5Oalloc...