OSV-2022-48 Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43664 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processTLSBlock ndpisearchtlsudp...

freetype2:cff-render-ftengine: Use-of-uninitialized-value in ps_hints_apply

Detailed Report: https://oss-fuzz.com/testcase?key=5462525913726976 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: cff-render-ftengine Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pshintsapply...

ndpi:fuzz_process_packet: Heap-buffer-overflow in processClientServerHello

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5682551937695744 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60c0000005fa...

OSV-2021-1802 UNKNOWN READ in pdfi_count_cff_index

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43599 Crash type: UNKNOWN READ Crash state: pdficountcffindex pdfireadcfffont pdfiloadfont...

libbpf:bpf-object-fuzzer: Crash in bpf_object_open

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6679144220459008 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasani386libbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00fa0000 Crash...

libressl:asn1parse: Heap-buffer-overflow in asn1_parse2

Project: https://github.com/libressl-portable/portable.git Detailed Report: https://oss-fuzz.com/testcase?key=5664610332573696 Project: libressl Fuzzing Engine: libFuzzer Fuzz Target: asn1parse Job Type: libfuzzerasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

OSV-2022-42 Heap-buffer-overflow in md_decode_utf8__

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43589 Crash type: Heap-buffer-overflow READ 1 Crash state: mddecodeutf8 mdlinklabelhash mdislinkreference...

OSV-2022-41 Segv on unknown address in zero

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43538 Crash type: Segv on unknown address Crash state: zero zendexecute fuzzerdorequestfrombuffer...

OSV-2022-40 UNKNOWN READ in md_build_attribute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43587 Crash type: UNKNOWN READ Crash state: mdbuildattribute mdenterleavespana mdprocessnormalblockcontents...

OSV-2022-39 Stack-buffer-overflow in BZ2_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43564 Crash type: Stack-buffer-overflow READ 1 Crash state: BZ2decompress BZ2bzDecompress ftbzip2filefilloutput...

imagemagick:encoder_png32_fuzzer: Index-out-of-bounds in cmsReadTag

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5239561779806208 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpng32fuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash...

md4c:fuzz-mdhtml: Heap-buffer-overflow in md_decode_utf8__

Project: https://github.com/mity/md4c.git Detailed Report: https://oss-fuzz.com/testcase?key=5161754722697216 Project: md4c Fuzzing Engine: honggfuzz Fuzz Target: fuzz-mdhtml Job Type: honggfuzzasanmd4c Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000000ba Crash...

OSV-2022-37 Heap-buffer-overflow in stringProcess

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43535 Crash type: Heap-buffer-overflow READ 1 Crash state: stringProcess tVariantCreateExt tVariantCreate...

OSV-2022-36 Heap-buffer-overflow in void absl::BytesToHexStringInternal<std::__1::basic_string<char, std::__1::char_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43553 Crash type: Heap-buffer-overflow READ 1 Crash state: void absl::BytesToHexStringInternalstd::1::basicstringchar, std::1::char absl::BytesToHexString...

freetype2:bzip2: Stack-buffer-overflow in BZ2_decompress

Detailed Report: https://oss-fuzz.com/testcase?key=4524321446428672 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: bzip2 Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fff9bceb706 Crash State: BZ2decompress BZ2bzDecompress...

dav1d:dav1d_fuzzer_mt: Use-of-uninitialized-value in dav1d_get_cpu_flags_x86

Project: https://code.videolan.org/videolan/dav1d.git Detailed Report: https://oss-fuzz.com/testcase?key=4904312235491328 Project: dav1d Fuzzing Engine: libFuzzer Fuzz Target: dav1dfuzzermt Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

OSV-2022-34 Heap-buffer-overflow in LZ4_decompress_safe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43513 Crash type: Heap-buffer-overflow READ 16 Crash state: LZ4decompresssafe bloscd dojob...

OSV-2022-33 Heap-buffer-overflow in ndlz8_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43519 Crash type: Heap-buffer-overflow READ 8 Crash state: ndlz8decompress bloscd dojob...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::FileFormatDecompress::apply_palette_clr

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=6229625057968128 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

php:php-fuzz-tracing-jit: Segv on unknown address in zero

Detailed Report: https://oss-fuzz.com/testcase?key=5098168402968576 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-tracing-jit Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: zero zendexecute fuzzerdorequestfrombuffer...