rnp:fuzz_dump: Stack-buffer-overflow in dst_print_s2k

Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=5156863386320896 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzdump Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7ffeefb264b8 Crash...

harfbuzz:hb-subset-fuzzer: Crash in hb_vector_t<CFF::parsed_cs_op_t>::resize

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5707809174585344 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000000c660...

rnp:fuzz_dump: Negative-size-param in armored_src_read

Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=5105305323831296 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzdump Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: armoredsrcread srcpe...

harfbuzz:hb-subset-fuzzer: Crash in CFF::parsed_cs_op_t::set_skip

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5668566628827136 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000000ffd3...

OSV-2020-1547 Heap-use-after-free in destroy_op_array

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24436 Crash type: Heap-use-after-free READ 4 Crash state: destroyoparray fuzzerdorequest fuzzerdorequestfrombuffer...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::MDLImporter::InternReadFile_3DGS_MDL345

Detailed Report: https://oss-fuzz.com/testcase?key=5671215415689216 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x608000000c77 Crash State:...

harfbuzz:hb-subset-fuzzer: Crash in hb_vector_t<CFF::op_str_t>::resize

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5448978976735232 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000094e0...

harfbuzz:hb-shape-fuzzer: Crash in hb_realloc_impl

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5675987258572800 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_JPEG2000_fuzzer: Heap-buffer-overflow in jpegNUMBER_read_main_headers

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5165847820369920 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDJPEG2000fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Addres...

assimp:assimp_fuzzer: Container-overflow in std::__1::enable_if<

Detailed Report: https://oss-fuzz.com/testcase?key=5666827234181120 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address: 0x61b00000116d Crash State: std::1::enableif...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::IOStreamBuffer<char>::getNextDataLine

Detailed Report: https://oss-fuzz.com/testcase?key=5183227204206592 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x602000000200 Crash State:...

assimp:assimp_fuzzer: Heap-buffer-overflow in ODDLParser::OpenDDLParser::parseIdentifier

Detailed Report: https://oss-fuzz.com/testcase?key=5161012492500992 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000000239 Crash State:...

assimp:assimp_fuzzer: Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Detailed Report: https://oss-fuzz.com/testcase?key=4847905282981888 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7ffc14401cd0 Crash State: std::1::basicstring,...

OSV-2020-1541 UNKNOWN READ in eval_expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22919 Crash type: UNKNOWN READ Crash state: evalexpr pathxeval pathxsymtabdefine...

OSV-2020-1540 UNKNOWN READ in eval_expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23781 Crash type: UNKNOWN READ Crash state: evalexpr evalbinary evalexpr...

OSV-2020-1538 Use-of-uninitialized-value in cmsMLUgetASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19724 Crash type: Use-of-uninitialized-value Crash state: cmsMLUgetASCII cmsGetProfileInfoASCII GetICCProperty...

OSV-2020-1536 Segv on unknown address in GetValueFromLinkedList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20923 Crash type: Segv on unknown address Crash state: GetValueFromLinkedList Magick::throwException Magick::Image::read...

OSV-2020-1534 Use-of-uninitialized-value in void transform_idct_add<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23918 Crash type: Use-of-uninitialized-value Crash state: void transformidctadd transform8x8add16fallback void accelerationfunctions::transformadd...

OSV-2020-1532 Heap-buffer-overflow in Op_RGB_to_RGB24_32::convert_colorspace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22109 Crash type: Heap-buffer-overflow READ 1 Crash state: OpRGBtoRGB2432::convertcolorspace heif::ColorConversionPipeline::convertimage heif::convertcolorspace...

OSV-2020-1528 Use-of-uninitialized-value in PushColormapIndex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10379 Crash type: Use-of-uninitialized-value Crash state: PushColormapIndex SyncImage WriteOnePNGImage...