OSV-2023-19 Heap-buffer-overflow in ndpi_search_bittorrent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55218 Crash type: Heap-buffer-overflow READ Crash state: ndpisearchbittorrent checkndpidetectionfunc ndpicheckflowfunc...

OSV-2023-16 Heap-buffer-overflow in wc_AesFeedbackEncrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55174 Crash type: Heap-buffer-overflow WRITE 1 Crash state: wcAesFeedbackEncrypt wcAesOfbEncrypt evpCipherBlock...

OSV-2023-14 Stack-buffer-overflow in AffixMgr::compound_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55191 Crash type: Stack-buffer-overflow READ 1 Crash state: AffixMgr::compoundcheck SuggestMgr::checkword SuggestMgr::testsug...

OSV-2023-13 Heap-buffer-overflow in wc_AesCbcEncrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55161 Crash type: Heap-buffer-overflow WRITE 16 Crash state: wcAesCbcEncrypt evpCipherBlock wolfSSLEVPCipherUpdate...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_search_bittorrent

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6336634658619392 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60600068fe7d Cras...

OSV-2023-11 Heap-buffer-overflow in node_from_openstep

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55146 Crash type: Heap-buffer-overflow READ 1 Crash state: nodefromopenstep nodefromopenstep plistfromopenstep...

skia:animated_image_decode: Heap-buffer-overflow in read_metadata

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5215823465938944 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: animatedimagedecode Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

fastjson2:JsonFuzzer: Security exception in com.alibaba.fastjson.parser.DefaultJSONParser.parseArray

Detailed Report: https://oss-fuzz.com/testcase?key=5807481534414848 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2023-6 Heap-buffer-overflow in parse_skip_ws

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55035 Crash type: Heap-buffer-overflow READ 1 Crash state: parseskipws nodefromopenstep parsedictdata...

mupdf:pdf_fuzzer: Segv on unknown address with empty stacktrace

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=6626875218984960 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL...

mupdf:pdf_fuzzer: Stack-buffer-overflow in pdf_map_one_to_many

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=6321306205552640 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzerasanmupdf Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7fbf89fb0c20...

htmlunit:HtmlParserFuzzer: Security exception in com.gargoylesoftware.htmlunit.css.ComputedCssStyleDeclaration.getStyleAttribute

Detailed Report: https://oss-fuzz.com/testcase?key=6524750832992256 Project: htmlunit Fuzzing Engine: libFuzzer Fuzz Target: HtmlParserFuzzer Job Type: libfuzzerasanhtmlunit Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

libplist:oplist_fuzzer: Heap-buffer-overflow in node_from_openstep

Project: https://github.com/libimobiledevice/libplist.git Detailed Report: https://oss-fuzz.com/testcase?key=4683683569467392 Project: libplist Fuzzing Engine: afl Fuzz Target: oplistfuzzer Job Type: aflasanlibplist Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

imagemagick:encoder_png00_fuzzer: Use-of-uninitialized-value in WriteOnePNGImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4867751305150464 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpng00fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

ffmpeg:ffmpeg_AV_CODEC_ID_SVQ3_fuzzer: Heap-buffer-overflow in ff_emulated_edge_mc_8

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5352418248622080 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSVQ3fuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_VC1_fuzzer: Heap-buffer-overflow in put_no_rnd_vc1_chroma_mc8_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5840588224462848 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVC1fuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

graphicsmagick:coder_SUN_fuzzer: Heap-buffer-overflow in ReadSUNImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6348811671044096 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderSUNfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

graphicsmagick:coder_RAS_fuzzer: Heap-buffer-overflow in ReadSUNImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4885054235213824 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderRASfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ...

XStream can cause a Denial of Service by injecting deeply nested objects raising a stack overflow

Impact The vulnerability may allow a remote attacker to terminate the application with a stack overflow error resulting in a denial of service only by manipulating the processed input stream. Patches XStream 1.4.20 handles the stack overflow and raises an InputManipulationException instead...

systemd:fuzz-network-parser: Use-of-uninitialized-value in rename_process

Detailed Report: https://oss-fuzz.com/testcase?key=6404885946171392 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-network-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: renameprocess safeforkfull...