OSV-2021-729 Global-buffer-overflow in libfsext_inode_read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33940 Crash type: Global-buffer-overflow READ Crash state: libfsextinodereaddata libfsextinodereadelementdata libfdatavectorgetelementvaluebyindex...

OSV-2021-727 UNKNOWN READ in MEM_read32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33956 Crash type: UNKNOWN READ Crash state: MEMread32 ZSTDcompressBlockgreedyextDictrow ZSTDldmblockCompress...

OSV-2021-725 UNKNOWN READ in libfsext_directory_entry_read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33935 Crash type: UNKNOWN READ Crash state: libfsextdirectoryentryreaddata libfsextdirectoryreadinlinedata libfsextdirectoryreadfileiohandle...

ffmpeg:ffmpeg_AV_CODEC_ID_THP_fuzzer: Heap-buffer-overflow in ls_decode_line

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5052852809629696 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTHPfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

php:php-fuzz-execute: Heap-use-after-free in cleanup_live_vars

Detailed Report: https://oss-fuzz.com/testcase?key=5925911145873408 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x602000001c54 Crash State: cleanuplivevars...

wasm3:fuzzer: Crash in _fini

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=5593494098935808 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000573dfb Crash State: fini...

libyal:libfsext_file_entry_fuzzer: Global-buffer-overflow in libfsext_inode_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=5629549409861632 Project: libyal Fuzzing Engine: afl Fuzz Target: libfsextfileentryfuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address: 0x0000012a931c Crash State: libfsextinodereaddata...

php:php-fuzz-execute: Stack-use-after-return in zend_call_function

Detailed Report: https://oss-fuzz.com/testcase?key=5004650291003392 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address: 0x7f1ee22a0a20 Crash State: zendcallfunction...

gonids:fuzz_parserule: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4819587699965952 Project: gonids Fuzzing Engine: libFuzzer Fuzz Target: fuzzparserule Job Type: libfuzzerasangonids Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

OSV-2021-719 Heap-buffer-overflow in tt_face_get_paint_layers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33855 Crash type: Heap-buffer-overflow READ 1 Crash state: ttfacegetpaintlayers FTGetPaintLayers colrv1traversepaint...

OSV-2021-717 Heap-use-after-free in real_param

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33862 Crash type: Heap-use-after-free READ 1 Crash state: realparam zpdfinkpath interp...

OSV-2021-713 Heap-use-after-free in AK::StringView::StringView

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33852 Crash type: Heap-use-after-free READ 8 Crash state: AK::StringView::StringView void AK::formatvalue AK::vformatimpl...

ghostscript:gstoraster_fuzzer: Heap-use-after-free in real_param

Detailed Report: https://oss-fuzz.com/testcase?key=5691978470785024 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x62700001a129 Crash State: realparam...

OSV-2021-710 Heap-use-after-free in iov_from_buf_full

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33785 Crash type: Heap-use-after-free WRITE 2 Crash state: iovfrombuffull iovfrombuf virtionetreceivercu...

cascadia:fuzz: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4904227949379584 Project: cascadia Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasancascadia Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

OSV-2021-703 Container-overflow in unsigned long jsoncons::detail::escape_string<char, jsoncons::string_sink<std::_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33781 Crash type: Container-overflow READ 1 Crash state: unsigned long jsoncons::detail::escapestring::key...

OSV-2021-702 Heap-double-free in flb_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33750 Crash type: Heap-double-free Crash state: flbfree flbparserjsondo flbparserdo...

OSV-2021-701 Heap-use-after-free in m3_FreeRuntime

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33765 Crash type: Heap-use-after-free READ 8 Crash state: m3FreeRuntime fuzzer.c RuntimeRelease...

OSV-2021-700 UNKNOWN READ in ReadLEB_u32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33749 Crash type: UNKNOWN READ Crash state: ReadLEBu32 InitElements CompileExtendedOpcode...

apache-commons:CompressSevenZFuzzer: Uncaught exception in java.base/java.nio.HeapByteBuffer.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5755860681883648 Project: apache-commons Fuzzing Engine: libFuzzer Fuzz Target: CompressSevenZFuzzer Job Type: libfuzzerasanapache-commons Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...