OSV-2021-1194 Heap-use-after-free in zend_string_release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38014 Crash type: Heap-use-after-free READ 4 Crash state: zendstringrelease zendclosurefreestorage zendobjectsstoredel...

wolfmqtt:wolfmqtt-fuzzer: Heap-buffer-overflow in MqttDecode_Vbi

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=6537285315723264 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasani386wolfmqtt Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

wolfmqtt:wolfmqtt-fuzzer: Heap-buffer-overflow in MqttDecode_Num

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=6124843632820224 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasani386wolfmqtt Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

OSV-2021-1192 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37927 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::PoolBuffer::MakeUnique arrow::AllocateBuffer...

OSV-2021-1189 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37915 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::defaultmemorypool arrow::ipc::IpcReadOptions::Defaults...

ipfs:ipfs_ds_flatfs: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6240620362465280 Project: ipfs Fuzzing Engine: libFuzzer Fuzz Target: ipfsdsflatfs Job Type: libfuzzerasanipfs Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

json-patch:fuzz_create_merge: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6191915939266560 Project: json-patch Fuzzing Engine: libFuzzer Fuzz Target: fuzzcreatemerge Job Type: libfuzzerasanjson-patch Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000004c940c Crash State: NULL Sanitizer: address ASAN...

OSV-2021-1186 Segv on unknown address in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37856 Crash type: Segv on unknown address Crash state: helpeructracecode...

OSV-2021-1183 UNKNOWN WRITE in draco::DepthFirstTraverser<draco::CornerTable, draco::MeshAttributeIndicesEncodi

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37864 Crash type: UNKNOWN WRITE Crash state: draco::DepthFirstTraverserdraco::CornerTable, draco::MeshAttributeIndicesEncodi draco::MeshTraversalSequencerdraco::DepthFirstTraverserdraco::CornerTable, dra...

arrow:arrow-ipc-stream-fuzz: Segv on unknown address in arrow::DefaultBackend

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4757582821064704 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

libucl:ucl_add_string_fuzzer: Crash in ucl_array_append

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=5125667289694208 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x002973657a7a...

OSV-2021-1181 Heap-buffer-overflow in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37814 Crash type: Heap-buffer-overflow WRITE 4 Crash state: draco::MeshPredictionSchemeTexCoordsDecoderint, draco::PredictionSchemeWrapDeco draco::MeshPredictionSchemeTexCoordsDecoderint, draco::PredictionSchemeWrapDeco...

libvips:jpegsave_file_fuzzer: Null-dereference READ with empty stacktrace

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=6292199667531776 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavefilefuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

tdengine:sql-fuzzer: Heap-buffer-overflow in strRmquote

Project: https://github.com/taosdata/TDengine.git Detailed Report: https://oss-fuzz.com/testcase?key=5783816602517504 Project: tdengine Fuzzing Engine: libFuzzer Fuzz Target: sql-fuzzer Job Type: libfuzzerasantdengine Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

net-snmp:snmp_api_fuzzer: Crash with empty stacktrace

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5383470403158016 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpapifuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type: UNKNOWN...

OSV-2021-1174 Heap-use-after-free in zend_string_release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37695 Crash type: Heap-use-after-free READ 4 Crash state: zendstringrelease zendclosurefreestorage zendobjectsstoredel...

OSV-2021-1173 UNKNOWN READ in luaG_getfuncline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37678 Crash type: UNKNOWN READ Crash state: luaGgetfuncline luaGrunerror luaDgrowstack...

draco:draco_pc_decoder_fuzzer: Stack-buffer-overflow in bool draco::FloatPointsTreeDecoder::DecodePointCloud<draco::PointAttributeVector

Project: https://github.com/google/draco.git Detailed Report: https://oss-fuzz.com/testcase?key=5992473277628416 Project: draco Fuzzing Engine: honggfuzz Fuzz Target: dracopcdecoderfuzzer Job Type: honggfuzzasandraco Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

OSV-2021-1172 UNKNOWN WRITE in snmp_add_var

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37647 Crash type: UNKNOWN WRITE Crash state: snmpaddvar snmpapifuzzer.c...

OSV-2021-1170 Heap-buffer-overflow in exif_get_slong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37581 Crash type: Heap-buffer-overflow READ 1 Crash state: exifgetslong exifgetsrational mnoteappleentrygetvalue...