spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

Project: https://github.com/spring-projects/spring-data-mongodb.git Detailed Report: https://oss-fuzz.com/testcase?key=5909008059072512 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linu...

harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in OT::Layout::Common::Coverage::get_population

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5120727025319936 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libdwarf:fuzz_die_cu_offset: Heap-use-after-free in dwarf_attrlist

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5866690199289856 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzdiecuoffset Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in hb-subset-fuzzer.cc

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5222130632753152 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

OSV-2023-119 Use-of-uninitialized-value in rename_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56401 Crash type: Use-of-uninitialized-value Crash state: renameprocess safeforkfull parsetimestamp...

OSV-2023-118 Heap-use-after-free in mrb_gc_mark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56406 Crash type: Heap-use-after-free READ 4 Crash state: mrbgcmark mrbgcmarkiv gcmarkchildren...

OSV-2023-117 Heap-buffer-overflow in isvcd_nal_byte_swap_emulation

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56386 Crash type: Heap-buffer-overflow WRITE 4 Crash state: isvcdnalbyteswapemulation isvcdnalparsenonvclnal isvcdpreparserefineau...

OSV-2023-116 Security exception in org.codehaus.janino.Parser.parseUnaryExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56367 Crash type: Security exception Crash state: org.codehaus.janino.Parser.parseUnaryExpression java.base/java.nio.ByteBuffer.limit java.base/java.nio.Buffer...

mruby:mruby_proto_fuzzer: Heap-use-after-free in mrb_gc_mark

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5931151182397440 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x62f00001c5...

flac:fuzzer_tool_flac: Stack-buffer-overflow in dump_stats

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=4839661043580928 Project: flac Fuzzing Engine: afl Fuzz Target: fuzzertoolflac Job Type: aflasanflac Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7fffce05161c Crash State:...

caddy:fuzz-replacer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5581786832044032 Project: caddy Fuzzing Engine: libFuzzer Fuzz Target: fuzz-replacer Job Type: libfuzzerasancaddy Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

wolfssl:fuzzer-wolfssl-ocsp: Heap-buffer-overflow in DecodeBasicOcspResponse

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4536341141782528 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-ocsp Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

OSV-2023-106 UNKNOWN WRITE in sudo_lbuf_append_quoted_v1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56278 Crash type: UNKNOWN WRITE Crash state: sudolbufappendquotedv1 sudoersformatmemberint sudoersformatmemberint...

OSV-2023-104 Heap-buffer-overflow in H5FS__sect_link

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56234 Crash type: Heap-buffer-overflow READ 8 Crash state: H5FSsectlink H5FSsectadd H5MFaddsect...

OSV-2023-102 Segv on unknown address in ndpi_free_flow_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56272 Crash type: Segv on unknown address Crash state: ndpifreeflowdata ndpifreeflow fuzzprocesspacket.c...

OSV-2023-101 Heap-use-after-free in pci_enum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56243 Crash type: Heap-use-after-free READ 4 Crash state: pcienum gptrarrayforeach genericfuzz...

PT-2023-35532 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash involves the functions ndpi free flow data and ndpi fr...

OSV-2023-98 Heap-buffer-overflow in sc_hsm_write_ef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56213 Crash type: Heap-buffer-overflow READ Crash state: schsmwriteef schsmupdatebinary scupdatebinary...

OSV-2023-96 Heap-buffer-overflow in load_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56208 Crash type: Heap-buffer-overflow READ 8 Crash state: loadbuffer rbinobjectnew rbinfilenewfrombuffer...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::parse_tiff_ifd

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5842767634104320 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...