CVE-2018-25010

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter...

harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5631444412530688 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

harfbuzz/hb-subset-fuzzer: Use-of-uninitialized-value in hb_vector_t<unsigned char, 1u>::resize

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5711849555755008 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type:...

envoy/h1_capture_fuzz_test: Crash in Envoy::TestUtility::findCounter

Detailed report: https://oss-fuzz.com/testcase?key=5760304764420096 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f23827ad980 Crash State:...

harfbuzz/hb-subset-fuzzer: Heap-double-free in hb_vector_t<CFF::op_str_t, 8u>::fini

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5695865298092032 Project: harfbuzz Fuzzer: libFuzzerhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-double-free Crash...

grpc/api_fuzzer: Heap-use-after-free in grpc_core::channelz::CallCountingHelper::RecordCallFailed

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5717773926268928 Project: grpc Fuzzer: libFuzzerapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60e0000012d0...

graphicsmagick/coder_PTIF_fuzzer: Use-of-uninitialized-value in ExportGrayQuantumType

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5702333384622080 Project: graphicsmagick Fuzzer: libFuzzercoderPTIFfuzzer Fuzz target binary: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

clamav/clamav_scanmap_PDF_fuzzer: Heap-buffer-overflow in pdf_nextlinestart

Detailed report: https://oss-fuzz.com/testcase?key=5168958492114944 Project: clamav Fuzzer: aflclamavscanmapPDFfuzzer Fuzz target binary: clamavscanmapPDFfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x611000188a6a Crash State:...

curl/curl_fuzzer_ftp: Crash in ftp_disconnect

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5176327364149248 Project: curl Fuzzer: libFuzzercurlfuzzerftp Fuzz target binary: curlfuzzerftp Job Type: libfuzzerasancurl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000015b0 Crash...

tinyxml2/xmltest: Use-of-uninitialized-value in tinyxml2::XMLUtil::StringEqual

Project: https://github.com/leethomason/tinyxml2.git Detailed report: https://oss-fuzz.com/testcase?key=5763247731376128 Project: tinyxml2 Fuzzer: libFuzzerxmltest Fuzz target binary: xmltest Job Type: libfuzzermsantinyxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

clamav/clamav_scanmap_OLE2_fuzzer: Heap-buffer-overflow in uniq_add

Detailed report: https://oss-fuzz.com/testcase?key=5744082379341824 Project: clamav Fuzzer: aflclamavscanmapOLE2fuzzer Fuzz target binary: clamavscanmapOLE2fuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x60c000000e48 Crash State: uniqadd...

clamav/clamav_scanfile_PDF_fuzzer: Crash in pdf_nextobject

Detailed report: https://oss-fuzz.com/testcase?key=5660459970068480 Project: clamav Fuzzer: aflclamavscanfilePDFfuzzer Fuzz target binary: clamavscanfilePDFfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60910001fd8d Crash State: pdfnextobject pdfparseo...

tidy-html5/tidy_fuzzer: Heap-buffer-overflow in prvTidyEncodeCharToUTF8Bytes

Project: https://github.com/htacg/tidy-html5.git Detailed report: https://oss-fuzz.com/testcase?key=5639351547985920 Project: tidy-html5 Fuzzer: afltidyfuzzer Fuzz target binary: tidyfuzzer Job Type: aflasantidy-html5 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

h2o/h2o-fuzzer-http2: Heap-buffer-overflow in emit_writereq_of_openref

Project: https://github.com/h2o/h2o.git Detailed report: https://oss-fuzz.com/testcase?key=5130696692072448 Project: h2o Fuzzer: aflh2o-fuzzer-http2 Fuzz target binary: h2o-fuzzer-http2 Job Type: aflasanh2o Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60b0000001c8...

llvm/llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::object::ELFObjectFile<llvm::object::ELFType<

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5650578005295104 Project: llvm Fuzzer: libFuzzerllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ...

graphicsmagick/coder_PICT_fuzzer: Heap-buffer-overflow in ExpandBuffer

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5748073695805440 Project: graphicsmagick Fuzzer: aflcoderPICTfuzzer Fuzz target binary: coderPICTfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ ...

graphicsmagick/coder_MIFF_fuzzer: Use-of-uninitialized-value in deflate_slow

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5115066047791104 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMIFFfuzzer Fuzz target binary: coderMIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

imagemagick/ping_mvg_fuzzer: Use-of-uninitialized-value in StringInfoToHexString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5717227240685568 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

harfbuzz/hb-shape-fuzzer: Stack-buffer-overflow in hb_array_t<char const>::cmp

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5642666339991552 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Stack-buffer-overflow...

graphicsmagick/coder_PTIF_fuzzer: Use-of-uninitialized-value in VerticalFilter

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5664094602919936 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPTIFfuzzer Fuzz target binary: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...