libredwg:llvmfuzz: Heap-buffer-overflow in dwg_decode_LWPOLYLINE_private

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5561541119574016 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2023-162 Global-buffer-overflow in xmlCurrentChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56841 Crash type: Global-buffer-overflow READ 1 Crash state: xmlCurrentChar xmlParseNCName xmlParseQName...

croaring:croaring_fuzzer_cc: Heap-buffer-overflow in array_container_to_uint32_array

Project: https://github.com/RoaringBitmap/CRoaring.git Detailed Report: https://oss-fuzz.com/testcase?key=5001666564063232 Project: croaring Fuzzing Engine: libFuzzer Fuzz Target: croaringfuzzercc Job Type: libfuzzerasancroaring Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

cryptofuzz:cryptofuzz-openssl-noasm: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5544186750566400 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-val...

OSV-2023-160 Global-buffer-overflow in OT::gvar::accelerator_t::apply_deltas_to_points

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56800 Crash type: Global-buffer-overflow READ 2 Crash state: OT::gvar::acceleratort::applydeltastopoints bool OT::glyfimpl::Glyph::getpoints bool OT::glyfimpl::Glyph::getpoints...

OSV-2023-159 UNKNOWN READ in isvce_cabac_flush

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56816 Crash type: UNKNOWN READ Crash state: isvcecabacflush isvcecabacencodeterminate isvceentropy...

OSV-2023-158 Heap-use-after-free in ddsi_type_unref_impl_locked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56837 Crash type: Heap-use-after-free READ 4 Crash state: ddsitypeunrefimpllocked ddsitypeunreflocked ddsixttypefini...

libreoffice:docxfuzzer: Heap-use-after-free in ZipFile::readExtraFields

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5255157345812480 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: docxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash...

harfbuzz:hb-draw-fuzzer: Global-buffer-overflow in OT::gvar::accelerator_t::apply_deltas_to_points

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5953342850596864 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-draw-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash Address:...

OSV-2023-156 Heap-use-after-free in HashMgr::add_word

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56737 Crash type: Heap-use-after-free READ 2 Crash state: HashMgr::addword HashMgr::loadtables HashMgr::HashMgr...

OSV-2023-153 Heap-use-after-free in ucl_hash_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56716 Crash type: Heap-use-after-free READ 8 Crash state: uclhashfunc khresizeuclhashnode khputuclhashnode...

OSV-2023-152 UNKNOWN READ in dissect_oran_c_section

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56724 Crash type: UNKNOWN READ Crash state: dissectorancsection dissectoran calldissectorwork...

hunspell:affdicfuzzer: Heap-use-after-free in HashMgr::add_word

Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=4826079711068160 Project: hunspell Fuzzing Engine: libFuzzer Fuzz Target: affdicfuzzer Job Type: libfuzzerasanhunspell Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...

binutils:fuzz_objdump_safe: Heap-buffer-overflow in bfd_coff_reloc16_get_relocated_section_contents

Detailed Report: https://oss-fuzz.com/testcase?key=5390549143388160 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzobjdumpsafe Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60c0000003c0 Crash State:...

wireshark:fuzzshark_ip_proto-udp: Crash in dissect_oran_c_section

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=4695723494211584 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux...

OSV-2023-151 UNKNOWN READ in mrb_vm_find_method

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56687 Crash type: UNKNOWN READ Crash state: mrbvmfindmethod mrbvmexec mrbvmrun...

OSV-2023-137 Heap-buffer-overflow in OT::Layout::Common::Coverage::get_population

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56510 Crash type: Heap-buffer-overflow READ 1 Crash state: OT::Layout::Common::Coverage::getpopulation OT::Layout::GPOSimpl::SinglePosFormat1::sanitize hbsanitizecontextt::returnt OT::Layout::GPOSimpl::PosLookupSubTable::dispa...

OSV-2023-135 Heap-buffer-overflow in json_cquote

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56473 Crash type: Heap-buffer-overflow READ 1 Crash state: jsoncquote dwgjsonLTYPE jsonobjectswrite...

libdwarf:fuzz_findfuncbypc: Heap-use-after-free in dwarf_attrlist

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=6272642689925120 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzfindfuncbypc Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

cri-o:fuzz_generate_passwd: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6216399287877632 Project: cri-o Fuzzing Engine: libFuzzer Fuzz Target: fuzzgeneratepasswd Job Type: libfuzzerasancri-o Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...