OSV-2022-550 Heap-use-after-free in mrb_bint_new_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48873 Crash type: Heap-use-after-free READ 1 Crash state: mrbbintnewstr mrbvmexec mrbvmrun...

fluxcd:fuzz_gitlab: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5520154049511424 Project: fluxcd Fuzzing Engine: libFuzzer Fuzz Target: fuzzgitlab Job Type: libfuzzerasanfluxcd Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

flac:fuzzer_metadata: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6124835096363008 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzermetadata Job Type: libfuzzermsanflac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000100005c18 Crash State: NULL Sanitizer: memory MSAN Recommended Securi...

lz4:round_trip_frame_uncompressed_fuzzer: Use-of-uninitialized-value in round_trip_frame_uncompressed_fuzzer.c

Project: https://github.com/lz4/lz4.git Detailed Report: https://oss-fuzz.com/testcase?key=5922533848776704 Project: lz4 Fuzzing Engine: libFuzzer Fuzz Target: roundtripframeuncompressedfuzzer Job Type: libfuzzermsanlz4 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

mruby:mruby_fuzzer: Heap-use-after-free in mrb_bint_new_str

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5309866209574912 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyfuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x60d000000161...

mruby:mruby_fuzzer: Crash in udiv

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4699215460171776 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000011dbff8 Crash State:...

libpcap:fuzz_pcap: Heap-buffer-overflow in fixup_pcap_pkthdr

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed Report: https://oss-fuzz.com/testcase?key=5363394118549504 Project: libpcap Fuzzing Engine: libFuzzer Fuzz Target: fuzzpcap Job Type: libfuzzerasanlibpcap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

binutils:fuzz_nm: Heap-double-free in fuzz_display_file2

Detailed Report: https://oss-fuzz.com/testcase?key=6650226768740352 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzznm Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x6210000e2500 Crash State: fuzzdisplayfile2 adanm.h Sanitizer: address ASAN...

envoy:config_fuzz_test: Container-overflow in std::__1::vector<std::__1::basic_string<char, std::__1::char_traits<char>, std::

Detailed Report: https://oss-fuzz.com/testcase?key=5235342973730816 Project: envoy Fuzzing Engine: honggfuzz Fuzz Target: configfuzztest Job Type: honggfuzzasanenvoy Platform Id: linux Crash Type: Container-overflow READ Crash Address: 0x6080001c3168 Crash State: std::1::vector, std:: void...

envoy:filter_fuzz_test: Segv on unknown address in Envoy::Extensions::HttpFilters::FileSystemBuffer::Fragment::isMemory

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5717378360541184 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: filterfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

OSV-2022-538 Memcpy-param-overlap in FT_Stream_TryRead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48749 Crash type: Memcpy-param-overlap Crash state: FTStreamTryRead bdfloadfont BDFFaceInit...

OSV-2022-534 Heap-buffer-overflow in json_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48736 Crash type: Heap-buffer-overflow READ 1 Crash state: jsonparse fileisjson filebuffer...

dragonfly:uploader_fuzz: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4548254406148096 Project: dragonfly Fuzzing Engine: libFuzzer Fuzz Target: uploaderfuzz Job Type: libfuzzerasandragonfly Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN...

file:magic_fuzzer: Heap-buffer-overflow in json_parse

Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=4507447821205504 Project: file Fuzzing Engine: libFuzzer Fuzz Target: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000d5 Crash...

github_scarecrow:scarecrow: Command injection in scarecrow.cc

Detailed Report: https://oss-fuzz.com/testcase?key=4824786613698560 Project: githubscarecrow Fuzzing Engine: libFuzzer Fuzz Target: scarecrow Job Type: libfuzzerasangithubscarecrowtest Platform Id: linux Crash Type: Command injection Crash Address: Crash State: scarecrow.cc Sanitizer: address ASA...

OSV-2022-533 Check failed in CheckUnwind

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48629 Crash type: Check failed Crash state: CheckUnwind vp9loopfilterdealloc vp9decoderremove...

OSV-2022-532 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48658 Crash type: Null-dereference READ Crash state: NULL...

OSV-2022-531 Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48684 Crash type: Heap-buffer-overflow WRITE 4 Crash state: perfetto::traceprocessor::TrackEventParser::ParseTrackDescriptor perfetto::traceprocessor::TrackEventModule::ParsePacket...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5311285578825728 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

libvpx:vpx_dec_fuzzer_vp9: Segv on unknown address in std::__Fuzzer::pair<std::__Fuzzer::__hash_iterator<std::__Fuzzer::__hash_node<st

Detailed Report: https://oss-fuzz.com/testcase?key=5824217953730560 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxdecfuzzervp9 Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...