gpac:fuzz_parse: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6389891240951808 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f9f9f84ddb0 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securi...

CVE-2021-3479

There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger excessive consumption of memory, resulting in an impact to system availability...

libyang:lyd_parse_mem_xml: Invalid-free in ly_err_free

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=6514604038553600 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememxml Job Type: libfuzzerasanlibyang Platform Id: linux Crash Type: Invalid-free Crash Address: 0x622000000b46 Crash...

OSV-2021-585 Heap-buffer-overflow in ebitmap_match_any

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32675 Crash type: Heap-buffer-overflow READ 8 Crash state: ebitmapmatchany avtabmap cilcheckneverallow...

suricata:fuzz_sigpcap_aware: Crash in fuzz_sigpcap_aware.c

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=4640111380791296 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcapaware Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000004bdea4c Cra...

suricata:fuzz_sigpcap_aware: Stack-buffer-overflow in FPC_next_tcp

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5190230303965184 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcapaware Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

kimageformats:kimgio_heif_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=6164913002250240 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void intrapredictionangular...

OSV-2021-581 UNKNOWN READ in unsigned short flatbuffers::ReadScalar<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32647 Crash type: UNKNOWN READ Crash state: unsigned short flatbuffers::ReadScalar flatbuffers::Table::GetOptionalFieldOffset flatbuffers::Table::CheckField...

ffmpeg:ffmpeg_AV_CODEC_ID_PGMYUV_fuzzer: Heap-buffer-overflow in ff_combine_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6001928875147264 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDPGMYUVfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libvips:webpsave_buffer_fuzzer: Heap-buffer-overflow in lzw_decode

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5726625548337152 Project: libvips Fuzzing Engine: afl Fuzz Target: webpsavebufferfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2021-577 Segv on unknown address in dwg_free_MTEXTATTRIBUTEOBJECTCONTEXTDATA_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32604 Crash type: Segv on unknown address Crash state: dwgfreeMTEXTATTRIBUTEOBJECTCONTEXTDATAprivate dwgfreeMTEXTATTRIBUTEOBJECTCONTEXTDATA dwgfreevariablenoclass...

ghostscript:gstoraster_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5559346722373632 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000003cc0f70 Crash State: NULL Sanitizer: address ASAN...

sqlite3:ossfuzz: Index-out-of-bounds in sqlite3VdbeExec

Detailed Report: https://oss-fuzz.com/testcase?key=5552782812774400 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzerubsansqlite3 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: sqlite3VdbeExec sqlite3Step sqlite3step Sanitizer:...

OSV-2021-573 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32555 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int OT::RangeRecord::intersects...

OSV-2021-570 Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32554 Crash type: Uncaught exception Crash state: com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject java.base/java.lang.invoke.MethodHandleNatives.refKindIsField...

lxc:fuzz-lxc-config-read: Use-of-uninitialized-value in strequal

Project: https://github.com/lxc/lxc.git Detailed Report: https://oss-fuzz.com/testcase?key=5084676248174592 Project: lxc Fuzzing Engine: libFuzzer Fuzz Target: fuzz-lxc-config-read Job Type: libfuzzermsanlxc Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

nats:fuzz_conf: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5088833726185472 Project: nats Fuzzing Engine: libFuzzer Fuzz Target: fuzzconf Job Type: libfuzzerasannats Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

jackson-core:JsonFuzzer: Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject

Detailed Report: https://oss-fuzz.com/testcase?key=5517685405384704 Project: jackson-core Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjackson-core Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

OSV-2021-564 Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32514 Crash type: Uncaught exception Crash state: com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray java.base/java.lang.Module.isStaticallyExportedOrOpen...

libyang:lys_parse_mem: Crash in lysp_check_identifierchar

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=5330744454021120 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lysparsemem Job Type: libfuzzerasanlibyang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fdb825b16e2 Crash...