envoy/header_map_impl_fuzz_test: Heap-buffer-overflow in Envoy::StringUtil::itoa

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5689833624698880 Project: envoy Fuzzer: libFuzzerenvoyheadermapimplfuzztest Fuzz target binary: headermapimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-buffer-overflo...

zlib-ng/compress_fuzzer: Crash in quick_send_bits

Project: https://github.com/sebpop/zlib-ng.git https://github.com/zlib-ng/zlib-ng.git Detailed report: https://oss-fuzz.com/testcase?key=5694515942785024 Project: zlib-ng Fuzzer: libFuzzerzlib-ngcompressfuzzer Fuzz target binary: compressfuzzer Job Type: libfuzzermsanzlib-ng Platform Id: linux...

ecc-diff-fuzzer/fuzz_ec: Unknown signal in __gmpn_sqr_basecase

Detailed report: https://oss-fuzz.com/testcase?key=5661474291187712 Project: ecc-diff-fuzzer Fuzzer: libFuzzerecc-diff-fuzzerfuzzec Fuzz target binary: fuzzec Job Type: libfuzzerubsanecc-diff-fuzzer Platform Id: linux Crash Type: Unknown signal Crash Address: 0x000000b0bc50 Crash State:...

skia/animated_image_decode: Heap-buffer-overflow in swizzle_rgba16_to_bgra_premul

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5728303109898240 Project: skia Fuzzer: aflskiaanimatedimagedecode Fuzz target binary: animatedimagedecode Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

poppler/pdf_fuzzer: Use-of-uninitialized-value in SplashOutputDev::alphaImageSrc

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5769842689835008 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

zlib-ng/compress_fuzzer: Negative-size-param in compress_fuzzer.c

Project: https://github.com/sebpop/zlib-ng.git https://github.com/zlib-ng/zlib-ng.git Detailed report: https://oss-fuzz.com/testcase?key=4634639783165952 Project: zlib-ng Fuzzer: libFuzzerzlib-ngcompressfuzzer Fuzz target binary: compressfuzzer Job Type: libfuzzerasanzlib-ng Platform Id: linux...

Fedora 27 : libgit2 (2018-ca483ae3e0)

This is a security release fixing out-of-bounds reads when processing smart-protocol 'ng' packets. When parsing an 'ng' packet, we keep track of both the current position as well as the remaining length of the packet itself. But instead of taking care not to exceed the length, we pass the current...

openvswitch/ofp_print_fuzzer: Heap-use-after-free in ofpact_finish_CLONE

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5722747668791296 Project: openvswitch Fuzzer: libFuzzeropenvswitchofpprintfuzzer Fuzz target binary: ofpprintfuzzer Job Type: libfuzzerasanopenvswitch Platform Id: linux Crash Type:...

mupdf/pdf_fuzzer: Heap-use-after-free in pdf_copy_pattern_gstate

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5748743025459200 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address: 0x62d0000136c8 Cras...

mupdf/pdf_fuzzer: Stack-buffer-underflow in ps_index

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=6241403096006656 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Stack-buffer-underflow READ 8 Crash Address: 0x7fde52864418...

openvswitch/ofp_print_fuzzer: Heap-double-free in ofputil_pull_ofp15_group_mod

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5677588436484096 Project: openvswitch Fuzzer: aflopenvswitchofpprintfuzzer Fuzz target binary: ofpprintfuzzer Job Type: aflasanopenvswitch Platform Id: linux Crash Type: Heap-double-free Crash...

freetype2/cff: Heap-buffer-overflow in cff_parser_run

Detailed report: https://oss-fuzz.com/testcase?key=5731555572973568 Project: freetype2 Fuzzer: libFuzzerfreetype2cff Fuzz target binary: cff Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x6080000005f3 Crash State: cffparserrun...

graphicsmagick/coder_MAT_fuzzer: Use-of-uninitialized-value in WriteBlob

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4847485762666496 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMATfuzzer Fuzz target binary: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

file/magic_fuzzer: Heap-buffer-overflow in json_parse_string

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=4844153304252416 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

radare2/ia_fuzz: Heap-buffer-overflow in r_sleb128

Detailed report: https://oss-fuzz.com/testcase?key=6276422388678656 Project: radare2 Fuzzer: aflradare2iafuzz Fuzz target binary: iafuzz Job Type: aflasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62b00002968b Crash State: rsleb128 parsedexclassmethod...

libreoffice/ww8fuzzer: Heap-buffer-overflow in rtl_uStringbuffer_insert

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6235706568474624 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

radare2/ia_fuzz: Crash in sections

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5669401876496384 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6170fffe5484...

unrar/unrar_fuzzer: Negative-size-param in QuickOpen::ReadRaw

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=6239488958267392 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzerasanunrar Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

libreoffice/ww6fuzzer: Bad-cast to SwNode from invalid vptr in SwTable::GetTableNode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6192777900589056 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/docxfuzzer: Crash in IMPL_RTL_ACQUIRE

Detailed report: https://oss-fuzz.com/testcase?key=5742725021302784 Project: libreoffice Fuzzer: libFuzzerlibreofficedocxfuzzer Fuzz target binary: docxfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000a00000002 Crash State: IMPLRTLACQUIRE...