quickjs:fuzz_regexp: Heap-buffer-overflow in re_parse_disjunction

Detailed Report: https://oss-fuzz.com/testcase?key=6405049668993024 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzregexp Job Type: libfuzzerasanquickjs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x61800002c3b9 Crash State: reparsedisjunction lrecompil...

OSV-2022-403 Heap-use-after-free in dwg_add_handleref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47319 Crash type: Heap-use-after-free READ 8 Crash state: dwgaddhandleref dwgaddSTYLE decodepreR13section...

OSV-2022-401 UNKNOWN READ in OT::gvar::subset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47281 Crash type: UNKNOWN READ Crash state: OT::gvar::subset bool trysubset hbsubsetplanexecuteorfail...

OSV-2022-400 Heap-double-free in dwg_free_XRECORD_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47300 Crash type: Heap-double-free Crash state: dwgfreeXRECORDprivate dwgfreeXRECORD dwgfreeobject...

envoy:filter_fuzz_test: Stack-use-after-return in Envoy::Extensions::HttpFilters::ExtAuthz::Filter::decodeData

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=6613344095698944 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: filterfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address:...

libredwg:llvmfuzz: Heap-double-free in dwg_free_XRECORD_private

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5408231167492096 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x60700005b040 Cra...

OSV-2022-398 Heap-buffer-overflow in json_common_entity_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47259 Crash type: Heap-buffer-overflow READ 8 Crash state: jsoncommonentitydata dwgjsonREPEAT dwgjsonobject...

libredwg:llvmfuzz: Heap-buffer-overflow in json_common_entity_data

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4527865128943616 Project: libredwg Fuzzing Engine: honggfuzz Fuzz Target: llvmfuzz Job Type: honggfuzzasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

OSV-2022-396 Heap-buffer-overflow in ucl_object_free_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47206 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectfreeinternal uclparserfree uclstatemachine...

OSV-2022-395 Uncaught exception in com.alibaba.fastjson.JSONPath.deepScan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47192 Crash type: Uncaught exception Crash state: com.alibaba.fastjson.JSONPath.deepScan java.base/java.lang.Boolean.valueOf com.alibaba.fastjson.parser.ParserConfig$2.apply...

OSV-2022-394 Incorrect-function-pointer-type in cv::split

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47190 Crash type: Incorrect-function-pointer-type Crash state: cv::split cv::split TestSplitAndMerge...

OSV-2022-393 Heap-use-after-free in mrb_funcall_with_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47213 Crash type: Heap-use-after-free READ 8 Crash state: mrbfuncallwithblock mrbinstancenew mrbfuncallwithblock...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_object_free_internal

Detailed Report: https://oss-fuzz.com/testcase?key=6363900985081856 Project: libucl Fuzzing Engine: afl Fuzz Target: ucladdstringfuzzer Job Type: aflasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x603000014f40 Crash State: uclobjectfreeinternal uclparserfree...

OSV-2022-389 Global-buffer-overflow in _dwarf_pathjoinl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47150 Crash type: Global-buffer-overflow READ 1 Crash state: dwarfpathjoinl dwarfconstructlinkedtopath dwarfgnudebuglink...

OSV-2022-387 Segv on unknown address in bit_write_TV

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47126 Crash type: Segv on unknown address Crash state: bitwriteTV bitwriteT dwgencodeBLOCK...

OSV-2022-386 Invalid-free in change_pin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47143 Crash type: Invalid-free Crash state: changepin main fuzzpkcs15tool.c...

apache-commons-jxpath:JXPathFuzzer: Uncaught exception in jaz.Zer.<clinit>

Detailed Report: https://oss-fuzz.com/testcase?key=4854085561483264 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: jaz.Zer...

OSV-2022-385 Uncaught exception in jaz.Zer.<clinit>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47116 Crash type: Uncaught exception Crash state: jaz.Zer. java.base/java.lang.Class.forName0 java.base/java.lang.Class.forName...

OSV-2022-383 Heap-use-after-free in r_asm_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47113 Crash type: Heap-use-after-free READ 4 Crash state: rasmfree rcorefini rcorefree...

mysql-server:fuzz_initfile: Heap-use-after-free in Segment::write

Detailed Report: https://oss-fuzz.com/testcase?key=4582657536688128 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6080000135a8 Crash State: Segment::write...