OSV-2021-1122 Heap-double-free in sudoers_gc_run

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37056 Crash type: Heap-double-free Crash state: sudoersgcrun fuzzpolicy.c resolveeditor...

OSV-2021-1121 UNKNOWN WRITE in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37025 This is the same issue as OSV-2021-1143 which replaced this one after it was closed wrongly. Crash type: UNKNOWN WRITE Crash state: QtPrivate::QCommonArrayOps::growAppend QPainterPath::addPath QPathClipper::intersect...

OSV-2021-1120 Heap-use-after-free in on_body

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37023 Crash type: Heap-use-after-free READ 1 Crash state: onbody reqbodysendcomplete runsocket...

OSV-2021-1117 Heap-buffer-overflow in json_object_new_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37017 Crash type: Heap-buffer-overflow READ Crash state: jsonobjectnewstring clijsonstr clihwp5header...

OSV-2021-1116 Use-after-poison in JS::PrimitiveString::string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36985 Crash type: Use-after-poison READ 1 Crash state: JS::PrimitiveString::string JS::abstractrelation JS::lessthan...

imagemagick:ping_dcm_fuzzer: Heap-double-free in RelinquishMagickMemory

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6338378130915328 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: pingdcmfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-double-free Crash Address:...

OSV-2021-1113 Stack-buffer-overflow in getoid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36962 Crash type: Stack-buffer-overflow READ 8 Crash state: getoid parseobjectid parseasntype...

nats:fuzz_conf: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5066885157748736 Project: nats Fuzzing Engine: libFuzzer Fuzz Target: fuzzconf Job Type: libfuzzerasannats Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

OSV-2021-1110 Stack-buffer-overflow in TranslateWord2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36932 Crash type: Stack-buffer-overflow WRITE 1 Crash state: TranslateWord2 TranslateClause SpeakNextClause...

OSV-2021-1108 Use-of-uninitialized-value in init_main_qtable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36913 Crash type: Use-of-uninitialized-value Crash state: initmainqtable LibRaw::fujidecodestrip LibRaw::fujidecodeloop...

bloaty:fuzz_target: Heap-buffer-overflow in bloaty::pe::PeFile::Initialize

Project: https://github.com/google/bloaty.git Detailed Report: https://oss-fuzz.com/testcase?key=4987539889979392 Project: bloaty Fuzzing Engine: libFuzzer Fuzz Target: fuzztarget Job Type: libfuzzerasani386bloaty Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0xf5103a9f...

OSV-2021-1105 Heap-buffer-overflow in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36908 Crash type: Heap-buffer-overflow READ 1 Crash state: readconfig snmpconfigfuzzer.c...

net-snmp:snmp_config_fuzzer: Heap-buffer-overflow in read_config

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5986401836466176 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpconfigfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type:...

OSV-2021-1102 Heap-use-after-free in usbredirparser_serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36861 Crash type: Heap-use-after-free WRITE 4 Crash state: usbredirparserserialize tryserialize usbredirparserfuzz.cc...

OSV-2021-1099 Stack-buffer-overflow in ot::StringFind

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36830 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::StringFind ot::Coap::Message::AppendUriPathOptions otCoapMessageAppendUriPathOptions...

php:php-fuzz-execute: Heap-use-after-free in ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_VAR_HANDLER

Detailed Report: https://oss-fuzz.com/testcase?key=4673792654835712 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf48950e8 Crash State:...

dgraph:parser_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5769126017630208 Project: dgraph Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasandgraph Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x10bfffffffe0 Crash State: NULL Sanitizer: address ASAN Recommended...

pillow:fuzz_pillow: Heap-buffer-overflow in ImagingFliDecode

Project: https://github.com/python-pillow/Pillow.git Detailed Report: https://oss-fuzz.com/testcase?key=5762152299364352 Project: pillow Fuzzing Engine: libFuzzer Fuzz Target: fuzzpillow Job Type: libfuzzerasanpillow Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

OSV-2021-1084 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36738 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...

OSV-2021-1085 Stack-buffer-overflow in strcat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36743 Crash type: Stack-buffer-overflow WRITE Crash state: strcat prvTidystrrep tidyMessageCreateInitV...