OSV-2020-1702 Heap-buffer-overflow in mem_src_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25388 Crash type: Heap-buffer-overflow READ Crash state: memsrcread srcpeek srceof...

OSV-2020-1700 UNKNOWN READ in zend_gc_delref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25384 Crash type: UNKNOWN READ Crash state: zendgcdelref izvalptrdtor zenduncleanzvalptrdtor...

OSV-2020-1699 Heap-buffer-overflow in rnp_key_store_kbx_from_src

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25386 Crash type: Heap-buffer-overflow READ 1 Crash state: rnpkeystorekbxfromsrc rnploadkeys keyringkbx.c...

OSV-2020-1698 Heap-buffer-overflow in macho_handle_segment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25385 Crash type: Heap-buffer-overflow READ Crash state: machohandlesegment machoparsefile machoload...

OSV-2020-1695 Stack-buffer-overflow in uWS::TopicTree::trimTree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25381 Crash type: Stack-buffer-overflow WRITE 8 Crash state: uWS::TopicTree::trimTree uWS::TopicTree::unsubscribeAll TopicTree.cpp...

OSV-2020-1694 Segv on unknown address in std::__1::__tree<std::__1::__value_type<unsigned int, std::__1::pair<std::__1::b

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25376 Crash type: Segv on unknown address Crash state: std::1::treestd::1::valuetypeunsigned int, std::1::pairstd::1::b uWS::TopicTree::drain std::1::function::funcLLVMFuzzerTestOneInput::$1, std::1::allocatorLL...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::HMPImporter::ReadFirstSkin

Detailed Report: https://oss-fuzz.com/testcase?key=5205584746643456 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60c000000b3c Crash State:...

libreoffice:ww6fuzzer: Heap-buffer-overflow in rtl::OUString::equalsAsciiL

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4970802532057088 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: ww6fuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

rnp:fuzz_keyring_kbx: Heap-buffer-overflow in mem_src_read

Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=6221139846889472 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzkeyringkbx Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60e000000376 Crash...

rnp:fuzz_keyring_kbx: Heap-buffer-overflow in rnp_key_store_kbx_from_src

Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=5632243442384896 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzkeyringkbx Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6030000005d2 Cras...

yara:macho_fuzzer: Heap-buffer-overflow in macho_handle_segment

Detailed Report: https://oss-fuzz.com/testcase?key=5067096227315712 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: machofuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60600000011b Crash State: machohandlesegment machoparsefile...

php:php-fuzz-execute: Crash in zend_gc_delref

Detailed Report: https://oss-fuzz.com/testcase?key=5700128755941376 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f67427c7800 Crash State: zendgcdelref izvalptrdtor zenduncleanzvalptrdt...

uwebsockets:TopicTree: Stack-buffer-overflow in uWS::TopicTree::trimTree

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=4864981424930816 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: TopicTree Job Type: libfuzzerasanuwebsockets Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash...

nginx:http_request_fuzzer: Heap-use-after-free in ngx_http_free_request

Detailed Report: https://oss-fuzz.com/testcase?key=4898341660655616 Project: nginx Fuzzing Engine: honggfuzz Fuzz Target: httprequestfuzzer Job Type: honggfuzzasannginx Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x62100117e288 Crash State: ngxhttpfreerequest...

libucl:ucl_add_string_fuzzer: Crash in kh_get_ucl_hash_node

Detailed Report: https://oss-fuzz.com/testcase?key=5281773624492032 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00d89fe4d5e4 Crash State: khgetuclhashnode uclhashsearch...

libsndfile:sndfile_fuzzer: Negative-size-param in vfread

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=4838501290606592 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzerasanlibsndfile Platform Id: linux Crash Type: Negative-size-param Crash Address:...

php:php-fuzz-execute: Heap-use-after-free in zend_generator_search_multi_children_node

Detailed Report: https://oss-fuzz.com/testcase?key=6185129708617728 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x612000014de0 Crash State:...

OSV-2020-1683 UNKNOWN READ in zend_gc_delref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25321 Crash type: UNKNOWN READ Crash state: zendgcdelref zvaldelrefp zvalptrdtornogc...

pcapplusplus:FuzzTarget: Bad-cast to pcpp::Layer from invalid vptr in pcpp::IDnsResource::getRawData

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5759761977704448 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerubsanpcapplusplus Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000000ef089...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in void arrow::internal::TransferBitmap<

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5677954426994688 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x619000000ee4...