OSV-2022-612 Heap-buffer-overflow in fxGetNextEntity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49357 Crash type: Heap-buffer-overflow WRITE 1 Crash state: fxGetNextEntity fxGetNextTokenJSXChild fxJSXElement...

OSV-2022-611 Heap-use-after-free in cras_iodev_list_disable_dev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49368 Crash type: Heap-use-after-free READ 4 Crash state: crasiodevlistdisabledev crasiodevlistrmoutput a2dppcmiodevdestroy...

mruby:mruby_fuzzer: Index-out-of-bounds in str_init_embed

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4876299788746752 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: strinitemb...

apache-commons-jxpath:JXPathFuzzer: Uncaught exception in java.base/java.lang.StringBuffer.append

Detailed Report: https://oss-fuzz.com/testcase?key=5062161688297472 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

libssh:ssh_client_config_fuzzer: Command injection in std::__Fuzzer::condition_variable::wait

Detailed Report: https://oss-fuzz.com/testcase?key=4939842982641664 Project: libssh Fuzzing Engine: libFuzzer Fuzz Target: sshclientconfigfuzzer Job Type: libfuzzerasanlibssh Platform Id: linux Crash Type: Command injection Crash Address: Crash State: std::Fuzzer::conditionvariable::wait Sanitize...

wasmtime:table_ops: Heap-use-after-free in wasmtime_runtime::externref::VMExternData::drop_and_dealloc::h16a22f20001bc5da

Project: https://github.com/bytecodealliance/wasmtime.git Detailed Report: https://oss-fuzz.com/testcase?key=4600104241201152 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: tableops Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address:...

github_scarecrow:scarecrow: Command injection with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5591770330693632 Project: githubscarecrow Fuzzing Engine: libFuzzer Fuzz Target: scarecrow Job Type: libfuzzerasangithubscarecrowtest Platform Id: linux Crash Type: Command injection Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

libssh:ssh_client_config_fuzzer: Command injection with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5371772710551552 Project: libssh Fuzzing Engine: libFuzzer Fuzz Target: sshclientconfigfuzzer Job Type: libfuzzerasanlibssh Platform Id: linux Crash Type: Command injection Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

imagemagick:encoder_ept2_fuzzer: Command injection with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6565282214182912 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderept2fuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Command injection Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

net-snmp:snmp_transport_fuzzer: Command injection with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6380153185370112 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmptransportfuzzer Job Type: libfuzzerubsannet-snmp Platform Id: linux Crash Type: Command injection Crash Address: Crash State: NULL Sanitizer: undefined UBSAN Crash...

OSV-2022-607 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49289 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2022-606 Heap-buffer-overflow in mrb_bint_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49282 Crash type: Heap-buffer-overflow READ 8 Crash state: mrbbintadd mrbintadd intadd...

OSV-2022-604 Stack-buffer-overflow in sc_asn1_read_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49248 Crash type: Stack-buffer-overflow READ 1 Crash state: scasn1readtag scasn1findtag cardoslistfiles...

OSV-2022-603 Heap-buffer-overflow in mrb_vm_exec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49259 Crash type: Heap-buffer-overflow WRITE 8 Crash state: mrbvmexec mrbvmrun mrbtoprun...

OSV-2022-601 Heap-buffer-overflow in mrb_bint_xor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49255 Crash type: Heap-buffer-overflow READ 8 Crash state: mrbbintxor intxor mrbvmexec...

OSV-2022-600 Segv on unknown address in mrb_bint_to_s

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49269 Crash type: Segv on unknown address Crash state: mrbbinttos mrbintegertostr inttos...

OSV-2022-599 Use-of-uninitialized-value in mrb_bint_as_int

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49268 Crash type: Use-of-uninitialized-value Crash state: mrbbintasint mrbensureinttype mrbgetargs...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Heap-buffer-overflow in sao_filter_CTB

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5424984922652672 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_bint_xor

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4796845888503808 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyfuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x609000012b38...

OSV-2022-598 Heap-buffer-overflow in get_symbols_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49209 Crash type: Heap-buffer-overflow READ 8 Crash state: getsymbols64 getmain64 binsym...