elfutils:fuzz-dwfl-core: Crash in read_addrs

Detailed Report: https://oss-fuzz.com/testcase?key=4696722113167360 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-dwfl-core Job Type: libfuzzerasani386elfutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xf75b3fe0 Crash State: readaddrs dwfllinkmapreport...

dnsmasq:fuzz_dhcp: Heap-buffer-overflow in print_mac

Detailed Report: https://oss-fuzz.com/testcase?key=6472936406515712 Project: dnsmasq Fuzzing Engine: libFuzzer Fuzz Target: fuzzdhcp Job Type: libfuzzerasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x60700000006c Crash State: printmac logpacket dhcpreply...

OSV-2022-3 UNKNOWN READ in pdfi_free_array

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43255 Crash type: UNKNOWN READ Crash state: pdfifreearray pdfifreeobject pdfifreedict...

OSV-2022-1 Heap-use-after-free in pdfi_dereference

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43268 Crash type: Heap-use-after-free READ 4 Crash state: pdfidereference pdfidictnext pdficheckResources...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::RadiusLayer::isDataValid

Detailed Report: https://oss-fuzz.com/testcase?key=6556752189980672 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pcpp::RadiusLayer::isDataValid...

hiredis:format_command_fuzzer: Heap-double-free in alloc.h

Detailed Report: https://oss-fuzz.com/testcase?key=5687947347755008 Project: hiredis Fuzzing Engine: libFuzzer Fuzz Target: formatcommandfuzzer Job Type: libfuzzerasanhiredis Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x611000000d00 Crash State: alloc.h alloc.h Sanitizer:...

OSV-2021-1797 Heap-buffer-overflow in grk::GrkImage::cieLabToRGB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43161 Crash type: Heap-buffer-overflow WRITE 4 Crash state: grk::GrkImage::cieLabToRGB grk::GrkImage::applyColourManagement grk::CodeStreamDecompress::postProcess...

OSV-2021-1796 Heap-buffer-overflow in Curl_sasl_decode_mech

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43186 Crash type: Heap-buffer-overflow READ 10 Crash state: Curlsasldecodemech Curlsaslparseurlauthoption pop3parseurloptions...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::IPv6Layer::parseExtensions

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=6409201541316608 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

CVE-2021-45930

Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps::growAppend called from QPainterPath::addPath and QPathClipper::intersect...

CVE-2021-45931

HarfBuzz 2.9.0 has an out-of-bounds write in hbbitsetinvertiblet::set called from hbsparsesett::set and hbsetcopy...

OSV-2021-1795 Negative-size-param in general_endcidrange_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43156 Crash type: Negative-size-param Crash state: generalendcidrangefunc cmapendcidrangefunc pdfipscriptinterpret...

OSV-2021-1793 Heap-buffer-overflow in seturl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43160 Crash type: Heap-buffer-overflow READ Crash state: seturl parseurl curlurlset...

go-ethereum:fuzz_trie_nodes: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5934819643621376 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzztrienodes Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

envoy:server_fuzz_test: Container-overflow in std::__1::vector<std::__1::basic_string<char, std::__1::char_traits<char>, std::

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5887932634890240 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: serverfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Container-overflow READ Crash Address: 0x60800014ba...

OSV-2021-1791 Heap-buffer-overflow in ZSTD_createDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43110 Crash type: Heap-buffer-overflow READ Crash state: ZSTDcreateDDict bloscrundecompressionwithcontext blosc2decompressctx...

OSV-2021-1787 Global-buffer-overflow in stbi__jpeg_decode_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43113 Crash type: Global-buffer-overflow READ 4 Crash state: stbijpegdecodeblock stbidecodejpegimage stbijpegload...

stb:stbi_read_fuzzer: Global-buffer-overflow in stbi__jpeg_decode_block

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5165030079856640 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzerasanstb Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000603a68...

tendermint:fuzz_rpc_jsonrpc_server: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5181807589457920 Project: tendermint Fuzzing Engine: libFuzzer Fuzz Target: fuzzrpcjsonrpcserver Job Type: libfuzzerasantendermint Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Cra...

OSV-2021-1785 Heap-use-after-free in ut_allocator<os_event>::allocate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43059 Crash type: Heap-use-after-free READ 8 Crash state: utallocator::allocate oseventcreate rwlockcreatefunc...