ffmpeg:ffmpeg_AV_CODEC_ID_CFHD_fuzzer: Heap-buffer-overflow in filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5148519623819264 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDCFHDfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6220000000d...

libreoffice:fodtfuzzer: Segv on unknown address in com::sun::star::uno::BaseReference::iquery

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5128563175718912 Project: libreoffice Fuzzing Engine: afl Fuzz Target: fodtfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_JPEG2000_fuzzer: Heap-buffer-overflow in jpegNUMBER_decode_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5700973918683136 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDJPEG2000fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

OSV-2020-1570 Heap-buffer-overflow in x265::PicYuv::copyFromPicture

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24590 Crash type: Heap-buffer-overflow READ Crash state: x265::PicYuv::copyFromPicture x265::Encoder::encode x265encoderencode...

leptonica:barcode_fuzzer: Crash in sarrayAddString

Detailed Report: https://oss-fuzz.com/testcase?key=6278653881876480 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: barcodefuzzer Job Type: libfuzzermsanleptonica Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7f474f571000 Crash State: sarrayAddString gplotAddPlot...

qt:qtsvg_svg_qsvgrenderer_render: Heap-buffer-overflow in QPointF::x

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5721393736712192 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasanqt Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60c0000064b0...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_expand_variable

Detailed Report: https://oss-fuzz.com/testcase?key=5469837653180416 Project: libucl Fuzzing Engine: honggfuzz Fuzz Target: ucladdstringfuzzer Job Type: honggfuzzasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x61d00000122d Crash State: uclexpandvariable...

libheif:encoder-fuzzer: Heap-buffer-overflow in x265::PicYuv::copyFromPicture

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5148929759641600 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: encoder-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

nanopb:fuzztest: Heap-buffer-overflow in allocate_field

Project: https://github.com/nanopb/nanopb.git Detailed Report: https://oss-fuzz.com/testcase?key=5646298464911360 Project: nanopb Fuzzing Engine: afl Fuzz Target: fuzztest Job Type: aflasannanopb Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x621000008956 Crash State...

nanopb:fuzztest: Heap-buffer-overflow in allocate_field

Project: https://github.com/nanopb/nanopb.git Detailed Report: https://oss-fuzz.com/testcase?key=6271277476872192 Project: nanopb Fuzzing Engine: libFuzzer Fuzz Target: fuzztest Job Type: libfuzzerasannanopb Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x612000000820...

OSV-2020-1563 UNKNOWN READ in OT::VariationSelectorRecord::operator=

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24548 Crash type: UNKNOWN READ Crash state: OT::VariationSelectorRecord::operator= OT::VariationSelectorRecord::VariationSelectorRecord hbarrayt::reverse...

OSV-2020-1559 UNKNOWN WRITE in hb_vector_t<CFF::parsed_cs_op_t>::resize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24532 Crash type: UNKNOWN WRITE Crash state: hbvectort::resize hbvectort::push CFF::parsedvaluest::addop...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_workflow_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6256390180700160 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x604000000140...

go-dns:fuzz_msg_unpack: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5642061701971968 Project: go-dns Fuzzing Engine: libFuzzer Fuzz Target: fuzzmsgunpack Job Type: libfuzzerasango-dns Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000002d140 Crash State: NULL Sanitizer: address ASAN Recommended...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::CommentRemover::RemoveLineComments

Detailed Report: https://oss-fuzz.com/testcase?key=6281828265361408 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6030000007d2 Crash State:...

OSV-2020-1554 Object-size in void hb_ot_map_t::apply<GPOSProxy>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24508 Crash type: Object-size Crash state: void hbotmapt::apply hbotmapt::position hbotshapeplant::position...

OSV-2020-1553 UNKNOWN READ in hb_realloc_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24497 Crash type: UNKNOWN READ Crash state: hbreallocimpl hbvectort::alloc hbvectort::resize...

OSV-2020-1551 UNKNOWN WRITE in CFF::parsed_cs_op_t::set_skip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24507 Crash type: UNKNOWN WRITE Crash state: CFF::parsedcsopt::setskip CFF::parsedcsstrt::addcallop cff1csopsetsubrsubsett::processcallsubr...

OSV-2020-1550 UNKNOWN WRITE in hb_vector_t<CFF::dict_val_t>::resize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24489 Crash type: UNKNOWN WRITE Crash state: hbvectort::resize hbvectort::push CFF::dictvalt hbvectort::push...

OSV-2020-1549 UNKNOWN WRITE in hb_vector_t<CFF::op_str_t>::resize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24500 Crash type: UNKNOWN WRITE Crash state: hbvectort::resize hbvectort::push CFF::parsedvaluest::addop...