OSV-2021-543 Heap-use-after-free in dxf_objects_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32275 Crash type: Heap-use-after-free READ 2 Crash state: dxfobjectsread dwgreaddxf llvmfuzz.c...

OSV-2021-542 Heap-buffer-overflow in luaG_getfuncline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32279 Crash type: Heap-buffer-overflow READ 1 Crash state: luaGgetfuncline luaGrunerror luaDgrowstack...

OSV-2021-540 Heap-buffer-overflow in g_array_append_vals

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32249 Crash type: Heap-buffer-overflow READ Crash state: garrayappendvals gbytearrayappend fuefifirmwarevolumewrite...

hostap:eap-sim-peer: Use-of-uninitialized-value in eap_sim_anonymous_username

Detailed Report: https://oss-fuzz.com/testcase?key=4575885245153280 Project: hostap Fuzzing Engine: libFuzzer Fuzz Target: eap-sim-peer Job Type: libfuzzermsanhostap Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: eapsimanonymoususername eapsimresponsestart...

libredwg:llvmfuzz: Heap-use-after-free in dxf_objects_read

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6523553928314880 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in move_explicit_Hcation

Detailed Report: https://oss-fuzz.com/testcase?key=5699348764688384 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: inchiinputfuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62e00000d200 Crash State: moveexplicitHcation...

fwupd:efi-volume_fuzzer: Heap-buffer-overflow in g_array_append_vals

Project: https://github.com/fwupd/fwupd.git Detailed Report: https://oss-fuzz.com/testcase?key=5030792377008128 Project: fwupd Fuzzing Engine: libFuzzer Fuzz Target: efi-volumefuzzer Job Type: libfuzzerasanfwupd Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x63100003883...

pcl:ply_reader_fuzzer: Heap-buffer-overflow in pcl::PLYReader::read

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=6089660863479808 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerasanpcl Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address:...

OSV-2021-536 Heap-use-after-free in cil_reset_classpermission

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177 Crash type: Heap-use-after-free READ 8 Crash state: cilresetclasspermission cilresetclasspermsset cilresetclasspermslist...

OSV-2021-535 Heap-buffer-overflow in encode_3dsolid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32165 Crash type: Heap-buffer-overflow READ 4 Crash state: encode3dsolid dwgencodeBODYprivate dwgencodeBODY...

OSV-2021-534 Container-overflow in tesseract::ExtractResults16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32142 Crash type: Container-overflow WRITE Crash state: tesseract::ExtractResults16 tesseract::PartialMatrixDotVector16 tesseract::matrixDotVector...

OSV-2021-530 UNKNOWN WRITE in g_array_append_vals

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32131 Crash type: UNKNOWN WRITE Crash state: garrayappendvals gbytearrayappend fuefifirmwarefilesystemwrite...

OSV-2021-526 Heap-use-after-free in ZSTD_freeDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32076 Crash type: Heap-use-after-free READ Crash state: ZSTDfreeDDict blosc2freectx blosc2schunkfree...

c-blosc2:decompress_frame_fuzzer: Use-of-uninitialized-value in get_coffset

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5644771784785920 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

gonids:fuzz_parserule: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5201803940593664 Project: gonids Fuzzing Engine: libFuzzer Fuzz Target: fuzzparserule Job Type: libfuzzerasangonids Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000190247c0 Crash State: NULL Sanitizer: address ASAN Recommended...

libyang:lyd_parse_mem_xml: Invalid-free in ly_set_erase

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=5126633741746176 Project: libyang Fuzzing Engine: afl Fuzz Target: lydparsememxml Job Type: aflasanlibyang Platform Id: linux Crash Type: Invalid-free Crash Address: 0x615000000034 Crash State:...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in bshuf_shuffle_bit_eightelem_sse2

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=4959500214861824 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash...

OSV-2021-520 Heap-buffer-overflow in flatbuffers::EscapeString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32008 Crash type: Heap-buffer-overflow READ 1 Crash state: flatbuffers::EscapeString flexbuffers::Reference::ToString void flexbuffers::AppendToString...

libraw:libraw_fuzzer: Use-of-uninitialized-value in saneSonyCameraInfo

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5453409617575936 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

prometheus:fuzzParseOpenMetric: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6439772563308544 Project: prometheus Fuzzing Engine: libFuzzer Fuzz Target: fuzzParseOpenMetric Job Type: libfuzzerasanprometheus Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Cras...