OSV-2022-65 Heap-buffer-overflow in parse_regex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43845 Crash type: Heap-buffer-overflow READ 1 Crash state: parseregex parseregex parseregex...

OSV-2022-64 Heap-buffer-overflow in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43870 Crash type: Heap-buffer-overflow WRITE Crash state: repeat pere cliregcompreal...

OSV-2022-62 Stack-buffer-overflow in load_regex_matcher

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43869 Crash type: Stack-buffer-overflow WRITE 1 Crash state: loadregexmatcher cliloadwdb cliload...

OSV-2022-61 Heap-buffer-overflow in cli_loadcrt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43828 Crash type: Heap-buffer-overflow READ Crash state: cliloadcrt cliload clload...

harfbuzz:hb-subset-fuzzer: Use-of-uninitialized-value in graph_t::update_distances

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=4822434270806016 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

testing-native-go-fuzzing:normalizer_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5571437979631616 Project: testing-native-go-fuzzing Fuzzing Engine: libFuzzer Fuzz Target: normalizerfuzzer Job Type: libfuzzerasantesting-native-go-fuzzing Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL...

OSV-2022-60 Heap-buffer-overflow in parse_regex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43812 Crash type: Heap-buffer-overflow READ 1 Crash state: parseregex cliregex2suffix regexlistaddpattern...

clamav:clamav_dbload_CRB_fuzzer: Heap-buffer-overflow in cli_loadcrt

Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=4504434707660800 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCRBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

clamav:clamav_dbload_FTM_fuzzer: Heap-buffer-overflow in cli_bcomp_freemeta

Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=5603299540205568 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadFTMfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

clamav:clamav_dbload_PDB_fuzzer: Heap-buffer-overflow in parse_regex

Detailed Report: https://oss-fuzz.com/testcase?key=6059794031575040 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadPDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60a000002052 Crash State: parseregex cliregex2suffix...

graphicsmagick:coder_DCM_fuzzer: Use-of-uninitialized-value in jp2_box_get

Detailed Report: https://oss-fuzz.com/testcase?key=6147496928215040 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderDCMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jp2boxget jp2decode...

OSV-2022-58 Heap-buffer-overflow in internal_huf_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43763 Crash type: Heap-buffer-overflow READ 1 Crash state: internalhufdecompress internalexrundopiz defaultdecompresschunk...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_h323

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5258804877459456 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000000f9...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in internal_huf_decompress

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=6627441303486464 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow RE...

php:php-fuzz-exif: Heap-buffer-overflow in _estrdup

Detailed Report: https://oss-fuzz.com/testcase?key=5047977448701952 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 15 Crash Address: 0x60300042692e Crash State: estrdup exifprocessusercomment...

imagemagick:encoder_label_fuzzer: Heap-buffer-overflow in InterpolatePixelChannel

Detailed Report: https://oss-fuzz.com/testcase?key=6537505778827264 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderlabelfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60a000005e34 Crash State:...

OSV-2022-55 Heap-buffer-overflow in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43687 Crash type: Heap-buffer-overflow READ 1 Crash state: ndlz4decompress ndlzdecompress bloscd...

OSV-2021-1803 UNKNOWN READ in chunk_obj_alloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43680 Crash type: UNKNOWN READ Crash state: chunkobjalloc chunkallocbytes cmapendfbrangefunc...

gstreamer:gst-discoverer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5115101261201408 Project: gstreamer Fuzzing Engine: libFuzzer Fuzz Target: gst-discoverer Job Type: libfuzzerubsangstreamer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fa400000002 Crash State: NULL Sanitizer: undefined UBSAN...

OSV-2022-51 Negative-size-param in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43671 Crash type: Negative-size-param Crash state: ndlz4decompress ndlzdecompress bloscd...