OSV-2020-2253 Global-buffer-overflow in g_date_time_get_ymd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28477 Crash type: Global-buffer-overflow READ 2 Crash state: gdatetimegetymd gdatetimegetyear gdatetimeformatutf8...

selinux:secilc-fuzzer: Heap-buffer-overflow in cil_print_recursive_blockinherit

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5694102897295360 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: secilc-fuzzer Job Type: libfuzzerasanselinux Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

fluent-bit:flb-it-fuzz-flb_json_fuzzer_OSSFUZZ: Crash in msgpack_sbuffer_write

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5667190028238848 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-flbjsonfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Crash...

selinux:secilc-fuzzer: Heap-use-after-free in __cil_ordered_item_insert

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5172867855679488 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: secilc-fuzzer Job Type: libfuzzerasanselinux Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_FFV1_fuzzer: Heap-buffer-overflow in get_rac

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5369575948550144 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDFFV1fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2020-2251 Heap-buffer-overflow in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28392 Crash type: Heap-buffer-overflow READ 1 Crash state: bloscrundecompressionwithcontext blosc2decompressctx framedecompresschunk...

OSV-2020-2250 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28415 Crash type: Heap-buffer-overflow READ 12 Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...

qemu:qemu-fuzz-i386-target-generic-fuzz-virtio-gpu: Heap-use-after-free in virtio_gpu_ctrl_response

Detailed Report: https://oss-fuzz.com/testcase?key=6280690782044160 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-virtio-gpu Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x611000043278 Crash State:...

llvm:llvm-isel-fuzzer--x86_64-O2: Use-after-poison in llvm::SelectionDAG::getNode

Detailed Report: https://oss-fuzz.com/testcase?key=4861603086467072 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-isel-fuzzer--x8664-O2 Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Use-after-poison READ 2 Crash Address: 0x62100004b1aa Crash State:...

libyal:libvslvm_handle_fuzzer: Stack-buffer-overflow in libvslvm_physical_volume_read_label

Detailed Report: https://oss-fuzz.com/testcase?key=6244117457797120 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libvslvmhandlefuzzer Job Type: libfuzzerasanlibyal Platform Id: linux Crash Type: Stack-buffer-overflow READ 16 Crash Address: 0x7fff20b97ec0 Crash State:...

ipfs:ipfs_ds_badger2: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5916917235843072 Project: ipfs Fuzzing Engine: libFuzzer Fuzz Target: ipfsdsbadger2 Job Type: libfuzzerasanipfs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000201328 Crash State: NULL Sanitizer: address ASAN Recommended Securi...

OSV-2020-2249 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28328 Crash type: Heap-buffer-overflow READ Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...

OSV-2020-2246 Heap-use-after-free in check_connection

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28254 Crash type: Heap-use-after-free READ 6 Crash state: checkconnection fuzzcheckconnection httpfuzzer.c...

OSV-2020-2244 UNKNOWN READ in cras_system_state_stream_added

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28261 Crash type: UNKNOWN READ Crash state: crassystemstatestreamadded crasrstreamcreate streamlistadd...

OSV-2020-2243 Heap-buffer-overflow in grk::BitIO::bytein

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28313 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::BitIO::bytein grk::BitIO::read grk::BitIO::getnumpasses...

dropbear:fuzzer-postauth_nomaths: Heap-use-after-free in recv_msg_channel_open

Project: https://secure.ucc.asn.au/hg/dropbear Detailed Report: https://oss-fuzz.com/testcase?key=6589714903728128 Project: dropbear Fuzzing Engine: honggfuzz Fuzz Target: fuzzer-postauthnomaths Job Type: honggfuzzasandropbear Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash...

readstat:fuzz_format_sas7bdat: Heap-buffer-overflow in sas7bdat_parse_page_pass2

Project: https://github.com/WizardMac/ReadStat.git Detailed Report: https://oss-fuzz.com/testcase?key=4647869424074752 Project: readstat Fuzzing Engine: afl Fuzz Target: fuzzformatsas7bdat Job Type: aflasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

OSV-2020-2242 Heap-buffer-overflow in tinfl_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28285 Crash type: Heap-buffer-overflow READ 1 Crash state: tinfldecompress mzinflate flbgzipuncompress...

OSV-2020-2241 Heap-buffer-overflow in mk_string_copy_substr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28277 Crash type: Heap-buffer-overflow READ Crash state: mkstringcopysubstr mkrconfmetaadd mkrconfread...

OSV-2020-2240 Heap-buffer-overflow in process_chunked_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28265 Crash type: Heap-buffer-overflow READ 1 Crash state: processchunkeddata processdata fuzzprocessdata...