OSV-2020-1598 Use-of-uninitialized-value in longest_match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24804 Crash type: Use-of-uninitialized-value Crash state: longestmatch deflatefast deflate...

OSV-2020-1597 UNKNOWN WRITE in avifDecoderDataFillImageGrid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24811 Crash type: UNKNOWN WRITE Crash state: avifDecoderDataFillImageGrid avifDecoderNextImage avifdecodefuzzer.cc...

ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_fuzzer: Heap-buffer-overflow in dng_decode_jpeg

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6326925027704832 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTIFFfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

uwebsockets:PerMessageDeflate: Use-of-uninitialized-value in slide_hash

Detailed Report: https://oss-fuzz.com/testcase?key=5629572998234112 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: PerMessageDeflate Job Type: libfuzzermsanuwebsockets Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: slidehash fillwindow deflatefa...

libavif:avif_decode_fuzzer: Crash in avifDecoderDataFillImageGrid

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=5201315165372416 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: avifdecodefuzzer Job Type: libfuzzerasanlibavif Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fb81ac821...

OSV-2020-1595 Use-of-uninitialized-value in cryptofuzz::module::Nettle::OpSymmetricDecrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24785 Crash type: Use-of-uninitialized-value Crash state: cryptofuzz::module::Nettle::OpSymmetricDecrypt cryptofuzz::ExecutorBasecryptofuzz::Buffer, cryptofuzz::operation::SymmetricDec cryptofuzz::ExecutorBasecryptofuzz::Buffe...

uwebsockets:MockedEchoServer: Use-of-uninitialized-value in longest_match

Detailed Report: https://oss-fuzz.com/testcase?key=5370327463624704 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: MockedEchoServer Job Type: libfuzzermsanuwebsockets Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: longestmatch deflatefast deflat...

llvm:clang-objc-fuzzer: Heap-buffer-overflow in clang::Lexer::getTokenPrefixLength

Detailed Report: https://oss-fuzz.com/testcase?key=6326215485685760 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7fd2d09dff07 Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_CFHD_fuzzer: Heap-buffer-overflow in filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5683161103859712 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDCFHDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer: Stack-use-after-return in output_configure

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4825489219518464 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACLATMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-use-after-return READ 1 Crash...

OSV-2020-1591 UNKNOWN READ in ft_smooth_overlap_spans

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24729 Crash type: UNKNOWN READ Crash state: ftsmoothoverlapspans graysweep grayconvertglyph...

freetype2:glyphs-outlines: Crash in ft_smooth_overlap_spans

Detailed Report: https://oss-fuzz.com/testcase?key=5636417934589952 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: glyphs-outlines Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f1a30564c98 Crash State: ftsmoothoverlapspans graysweep...

imagemagick:ping_ttf_fuzzer: Heap-buffer-overflow in ft_smooth_overlap_spans

Detailed Report: https://oss-fuzz.com/testcase?key=5471030328688640 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingttffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7fa32c632194 Crash State: ftsmoothoverlapspa...

OSV-2020-1589 UNKNOWN READ in RegisterSetjmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24695 Crash type: UNKNOWN READ Crash state: RegisterSetjmp wasmtimeruntime::traphandlers::CallThreadState::with::hada2d3d104ef56de wasmtime::func::invokewasmandcatchtraps::h25a8cbd9f03c9a30...

OSV-2020-1587 UNKNOWN WRITE in count_blocks

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24704 Crash type: UNKNOWN WRITE Crash state: countblocks optinit bpfoptimize...

wasmtime:differential: Crash in RegisterSetjmp

Detailed Report: https://oss-fuzz.com/testcase?key=6205251766714368 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: differential Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f4688188004 Crash State: RegisterSetjmp...

OSV-2020-1583 Segv on unknown address in clang::Preprocessor::LexHeaderName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24668 Crash type: Segv on unknown address Crash state: clang::Preprocessor::LexHeaderName clang::Preprocessor::HandleIncludeDirective clang::Preprocessor::HandleDirective...

graphicsmagick:coder_CRW_fuzzer: Use-of-uninitialized-value in MagickCondSignal

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5676670342922240 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderCRWfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

skia:sksl2spirv: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5806581326020608 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2spirv Job Type: libfuzzerubsanskia Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: undefined UBSAN Crash...

usrsctp:fuzzer_connect: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6219321542705152 Project: usrsctp Fuzzing Engine: libFuzzer Fuzz Target: fuzzerconnect Job Type: libfuzzerubsanusrsctp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f06700b6bf0 Crash State: NULL Sanitizer: undefined UBSAN...