OSV-2021-1563 Global-buffer-overflow in xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40915 Crash type: Global-buffer-overflow READ 1 Crash state: xstrdup scanfilteredsymbols scanallsymbols...

OSV-2021-1562 Heap-buffer-overflow in __bpf_object__open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40868 Crash type: Heap-buffer-overflow WRITE 4 Crash state: bpfobjectopen bpfobjectopenmem bpf-object-fuzzer.c...

imagemagick:encoder_dng_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5975982159298560 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xbebebed2 Crash State: NULL Sanitizer: address ASAN...

libavc:avc_dec_fuzzer: Heap-buffer-overflow in ih264d_mark_err_slice_skip

Project: https://android.googlesource.com/platform/external/libavc Detailed Report: https://oss-fuzz.com/testcase?key=6177319069286400 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcdecfuzzer Job Type: libfuzzerasani386libavc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4...

OSV-2021-1554 UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40797 Crash type: UNKNOWN READ Crash state: helpeructracecode...

OSV-2021-1553 Segv on unknown address in bfd_getl16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40809 Crash type: Segv on unknown address Crash state: bfdgetl16 bfdmipselfrelocunshuffle bfdmipself32gprel16reloc...

OSV-2021-1549 Uncaught exception in com.google.gson.internal.bind.TypeAdapters$27.read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40830 Crash type: Uncaught exception Crash state: com.google.gson.internal.bind.TypeAdapters$27.read java.base/java.lang.StringUTF16.compress java.base/java.lang.String...

OSV-2021-1546 Heap-buffer-overflow in pn_buffer_append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40748 Crash type: Heap-buffer-overflow READ Crash state: pnbufferappend pnidatainternnode pnidecoderdecodevalue...

OSV-2021-1540 Heap-buffer-overflow in consume_list

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40723 Crash type: Heap-buffer-overflow READ 1 Crash state: consumelist pnamqpdecodeDqEoQBIoIe pnmessagedecode...

freetype2:truetype: Heap-buffer-overflow in tt_face_vary_cvt

Detailed Report: https://oss-fuzz.com/testcase?key=5649991339737088 Project: freetype2 Fuzzing Engine: afl Fuzz Target: truetype Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x602000000cb8 Crash State: ttfacevarycvt ttfaceloadcvt ttsetmmblen...

php:php-fuzz-exif: Heap-buffer-overflow in _estrdup

Detailed Report: https://oss-fuzz.com/testcase?key=5120731294334976 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6030001cdbae Crash State: estrdup exifprocessusercomment...

libexif:exif_from_data_fuzzer: Use-of-uninitialized-value in exif_entry_format_value

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=5780913485643776 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exiffromdatafuzzer Job Type: libfuzzermsanlibexif Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

net-snmp:snmp_mib_fuzzer: Stack-buffer-overflow in parse_objecttype

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4658956098732032 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpmibfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: Stack-buffer-overfl...

binutils:fuzz_objdump_safe: Heap-buffer-overflow in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=5691484599353344 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzobjdumpsafe Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62d000027120 Crash State: bfdgetl32...

dav1d:dav1d_fuzzer_mt: Heap-buffer-overflow in dav1d_cdef_brow_8bpc

Project: https://code.videolan.org/videolan/dav1d.git Detailed Report: https://oss-fuzz.com/testcase?key=5387199655313408 Project: dav1d Fuzzing Engine: libFuzzer Fuzz Target: dav1dfuzzermt Job Type: libfuzzerasandav1d Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

OSV-2021-1526 Global-buffer-overflow in fr_unix_time_from_tm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40600 Crash type: Global-buffer-overflow READ 2 Crash state: frunixtimefromtm frunixtimefromstr frvalueboxfromsubstr...

OSV-2021-1521 Heap-buffer-overflow in exif_data_load_data_content

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40617 Crash type: Heap-buffer-overflow READ 4 Crash state: exifdataloaddatacontent exifdataloaddata exifloadergetdata...

php:php-fuzz-tracing-jit: Crash in add_function_slow

Detailed Report: https://oss-fuzz.com/testcase?key=5824689268719616 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x18188000591a Crash State: addfunctionslow addfunction...

binutils:fuzz_disas_ext-bfd_arch_i386: Dynamic-stack-buffer-overflow in fetch_data

Detailed Report: https://oss-fuzz.com/testcase?key=5730636799803392 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisasext-bfdarchi386 Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE Crash Address: 0x7ffe8264c1c0 Crash State: fetchdata printin...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::ObjFileParser::getFace

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6253045663531008 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address:...