OSV-2021-363 Heap-buffer-overflow in H5HG_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30743 Crash type: Heap-buffer-overflow READ 8 Crash state: H5HGread H5VLnativeblobget H5VLblobget...

fio:fuzz_parseini: Stack-buffer-overflow in add_file

Detailed Report: https://oss-fuzz.com/testcase?key=5172468690059264 Project: fio Fuzzing Engine: afl Fuzz Target: fuzzparseini Job Type: aflasanfio Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7fc5d1ac7820 Crash State: addfile strfilenamecb handleoption Sanitizer:...

OSV-2021-349 Heap-buffer-overflow in flatbuffers::vector_downward::fill

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30684 Crash type: Heap-buffer-overflow WRITE 1 Crash state: flatbuffers::vectordownward::fill flatbuffers::FlatBufferBuilder::PreAlign flatbuffers::FlatBufferBuilder::ForceVectorAlignment...

OSV-2021-347 Heap-buffer-overflow in flatbuffers::Table* flatbuffers::GetMutableRoot<flatbuffers::Table>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30682 Crash type: Heap-buffer-overflow READ 4 Crash state: flatbuffers::Table flatbuffers::GetMutableRoot flatbuffers::Table const flatbuffers::GetRoot flatbuffers::JsonPrinter::GenFieldOffset...

OSV-2021-333 Heap-buffer-overflow in int flatbuffers::ReadScalar<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30699 Crash type: Heap-buffer-overflow READ 4 Crash state: int flatbuffers::ReadScalar flatbuffers::Table::GetVTable flatbuffers::Table::GetOptionalFieldOffset...

matio:matio_fuzzer: Heap-buffer-overflow in H5HG_read

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5713265713872896 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow REA...

selinux:secilc-fuzzer: Crash in is_avrule_redundant

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5763653288722432 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: secilc-fuzzer Job Type: libfuzzerasanselinux Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7faad447a7f8...

icu:collator_rulebased_fuzzer: Crash in icu_68::CEFinalizer::modifyCE

Detailed Report: https://oss-fuzz.com/testcase?key=5738172053061632 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: collatorrulebasedfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7040003f8120 Crash State: icu68::CEFinalizer::modifyCE...

flatbuffers:parser_fuzzer: Heap-buffer-overflow in flatbuffers::vector_downward::fill

Project: https://github.com/google/flatbuffers.git Detailed Report: https://oss-fuzz.com/testcase?key=5700135017381888 Project: flatbuffers Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasanflatbuffers Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

libarchive:libarchive_fuzzer: Heap-buffer-overflow in read_children

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=5637075267354624 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

openh264:decoder_fuzzer: Heap-use-after-free in McCopyWidthEq4_c

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=6507921024352256 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

poppler:pdf_draw_fuzzer: Heap-buffer-overflow in get_unaligned_be32

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5698990039498752 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

unicorn:fuzz_emu_arm_arm: Crash in cpu_arm_exec_arm

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5554327286579200 Project: unicorn Fuzzing Engine: honggfuzz Fuzz Target: fuzzemuarmarm Job Type: honggfuzzasanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fd3fa45...

flac:fuzzer_decoder: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=6649912316002304 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdecoder Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

wolfmqtt:wolfmqtt-fuzzer: Heap-use-after-free in MqttDecode_Props

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=6465736392441856 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasanwolfmqtt Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

tidb:fuzzMarshalJSON: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6153259200937984 Project: tidb Fuzzing Engine: libFuzzer Fuzz Target: fuzzMarshalJSON Job Type: libfuzzerasantidb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00002212190b Crash State: NULL Sanitizer: address ASAN Recommended...

libusb:libusb_fuzzer: Heap-buffer-overflow in libusb_fill_control_setup

Project: https://github.com/libusb/libusb.git Detailed Report: https://oss-fuzz.com/testcase?key=6049849147523072 Project: libusb Fuzzing Engine: libFuzzer Fuzz Target: libusbfuzzer Job Type: libfuzzerasanlibusb Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

OSV-2021-315 Global-buffer-overflow in Gfx::decode_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30507 Crash type: Global-buffer-overflow READ 4 Crash state: Gfx::decodeframe Gfx::GIFImageDecoderPlugin::frame Gfx::GIFImageDecoderPlugin::bitmap...

OSV-2021-312 Heap-use-after-free in sampled_data_continue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30487 Crash type: Heap-use-after-free WRITE 4 Crash state: sampleddatacontinue gsinterpret gsmainrunstringwithlength...

OSV-2021-308 Heap-buffer-overflow in flatbuffers::JsonPrinter::GenFieldOffset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30468 Crash type: Heap-buffer-overflow READ 4 Crash state: flatbuffers::JsonPrinter::GenFieldOffset flatbuffers::JsonPrinter::GenStruct flatbuffers::GenerateText...