OSV-2021-1641 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41582 Crash type: Heap-buffer-overflow READ Crash state: std::1::basicstring, std::1::allocatorch void Assimp::Logger::warnchar const Assimp::NDOImporter::InternReadFile...

matio:matio_fuzzer: Use-of-uninitialized-value in H5T__conv_int_uchar

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5472731620048896 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-val...

OSV-2021-1639 Heap-use-after-free in Segment::write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41553 Crash type: Heap-use-after-free READ 1 Crash state: Segment::write Doublewrite::writepages Doublewrite::flushtodisk...

matio:matio_fuzzer: Heap-buffer-overflow in Mat_VarRead73

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6576490683170816 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow REA...

OSV-2021-1636 Stack-buffer-overflow in MatchRule

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41504 Crash type: Stack-buffer-overflow READ 1 Crash state: MatchRule TranslateRules TranslateWord3...

OSV-2021-1634 Dynamic-stack-buffer-overflow in OutputJsonDNP3SetItem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41487 Crash type: Dynamic-stack-buffer-overflow READ 4 Crash state: OutputJsonDNP3SetItem JsonDNP3LogObjects JsonDNP3LogResponse...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in MatchRule

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=5102054064914432 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

OSV-2021-1633 Heap-buffer-overflow in mk_string_copy_substr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41448 Crash type: Heap-buffer-overflow READ Crash state: mkstringcopysubstr mkrconfread mkrconfopen...

matio:matio_fuzzer: Crash in H5MM_xstrdup

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6643603458359296 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash...

OSV-2021-1631 Stack-buffer-overflow in TranslateNumber

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41437 Crash type: Stack-buffer-overflow READ 1 Crash state: TranslateNumber TranslateWord3 TranslateWord...

php:php-fuzz-exif: Heap-buffer-overflow in _estrdup

Detailed Report: https://oss-fuzz.com/testcase?key=4702980327211008 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 15 Crash Address: 0x6040000478f8 Crash State: estrdup exifprocessusercomment...

OSV-2021-1629 Heap-buffer-overflow in Curl_sasl_decode_mech

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41403 Crash type: Heap-buffer-overflow READ 10 Crash state: Curlsasldecodemech Curlsaslparseurlauthoption smtpparseurloptions...

OSV-2021-1628 Stack-buffer-overflow in sprint_realloc_hinted_integer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41372 Crash type: Stack-buffer-overflow WRITE 1 Crash state: sprintreallochintedinteger sprintreallocinteger snprintinteger...

ndpi:fuzz_process_packet: Use-of-uninitialized-value in ndpi_detection_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5005457090019328 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

matio:matio_fuzzer: Use-of-uninitialized-value in Mat_VarReadNumeric5

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=4688024875171840 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5275682339422208 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash...

assimp:assimp_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4520813181665280 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x005b0000006e Crash State: NULL Sanitizer: undefined UBSAN Recommended...

OSV-2021-1625 Heap-buffer-overflow in junkscan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41390 Crash type: Heap-buffer-overflow READ 16 Crash state: junkscan seturl parseurl...

OpenEXR -- Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute

Cary Phillips reports: OpenEXR Version 3.1.4 is a patch release that ... addresses one public security vulnerability: CVE-2021-45942 Heap-buffer-overflow in Imf31::LineCompositeTask::execute and several specific OSS-fuzz issues...

libyang:lyd_parse_mem_xml: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6094793879453696 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememxml Job Type: libfuzzermsanlibyang Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: memory MSAN Crash Revision:...