file: Use-of-uninitialized-value in file_replace

Detailed report: https://oss-fuzz.com/testcase?key=5601604277370880 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzermsanfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: filereplace fileascmagicwithencoding...

grpc: Heap-buffer-overflow in grpc_base64_decode

Detailed report: https://oss-fuzz.com/testcase?key=5595941564317696 Project: grpc Fuzzer: libFuzzergrpcserverfuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x608000000172 Crash State: grpcbase64decode serverfilterincomingmetadata hsonrec...

libmspub: Stack-use-after-scope in libmspub::MSPUBCollector::paintShape

Detailed report: https://oss-fuzz.com/testcase?key=4867319689904128 Project: libmspub Fuzzer: afllibmspubpubfuzzer Fuzz target binary: pubfuzzer Job Type: aflasanlibmspub Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address: 0x7f23248bf9f0 Crash State:...

grpc: Heap-buffer-overflow in server_filter_incoming_metadata

Detailed report: https://oss-fuzz.com/testcase?key=5417405008314368 Project: grpc Fuzzer: libFuzzergrpcserverfuzzer Fuzz target binary: serverfuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x607000001799 Crash State:...

file: Heap-buffer-overflow in cdf_read_property_info

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=5121085282451456 Project: file Fuzzer: aflfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: aflasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x611000000280 Cra...

ots: Heap-use-after-free in ots::OTSStream::Write

Project: https://github.com/khaledhosny/ots.git Detailed report: https://oss-fuzz.com/testcase?key=5372103857537024 Project: ots Fuzzer: libFuzzerotsots-fuzzer Fuzz target binary: ots-fuzzer Job Type: libfuzzerasanots Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

sqlite3: Global-buffer-overflow in sqlite3VdbeMemPrettyPrint

Detailed report: https://oss-fuzz.com/testcase?key=6749820112863232 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzerasansqlite3 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000002b188a8 Crash State:...

libreoffice: Container-overflow in inflate

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5887012185833472 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow...

lcms: Heap-buffer-overflow in TetrahedralInterpFloat

Project: https://github.com/mm2/Little-CMS.git Detailed report: https://oss-fuzz.com/testcase?key=6565571653009408 Project: lcms Fuzzer: libFuzzerlcmscmstransformfuzzer Fuzz target binary: cmstransformfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

harfbuzz: Use-of-uninitialized-value in int OT::SortedArrayOf<OT::GlyphID, OT::IntType<unsigned short, 2u> >::bsearch<un

Detailed report: https://oss-fuzz.com/testcase?key=6023178755244032 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: int OT::SortedArrayOf...

ffmpeg: Crash in ff_emu_edge_vfix10_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6172687908995072 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDVP6Ffuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDVP6Ffuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN RE...

file: Heap-buffer-overflow in file_trycdf

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=5240919450189824 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

libreoffice: Global-buffer-overflow in ImplUnicodeToDBCS

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5976843305877504 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

ffmpeg: Crash in ff_put_pixels8_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6743603416137728 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDVP6Ffuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDVP6Ffuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN RE...

harfbuzz: Use-of-uninitialized-value in int OT::SortedArrayOf<OT::GlyphID, OT::IntType<unsigned short, 2u> >::bsearch<un

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5294584596791296 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libreoffice: Crash in CCIDecompressor::DecompressScanline

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5502470442713088 Project: libreoffice Fuzzer: libFuzzerlibreofficetiffuzzer Fuzz target binary: tiffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN Crash...

grpc: Heap-use-after-free in grpc_call_destroy

Detailed report: https://oss-fuzz.com/testcase?key=5414767311192064 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address: 0x621000040908 Crash State: grpccalldestroy...

grpc: Heap-buffer-overflow in parse_unix

Detailed report: https://oss-fuzz.com/testcase?key=5834320218423296 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x616000000900 Crash State: parseunix sockaddrcreate...

grpc: Crash in gpr_free

Detailed report: https://oss-fuzz.com/testcase?key=5637166455586816 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000002717 Crash State: gprfree grpclbaddressesdestroy...

GnuTLS: Multiple vulnerabilities

Background GnuTLS is an Open Source implementation of the TLS and SSL protocols. Description Multiple heap and stack overflows and double free vulnerabilities have been discovered in GnuTLS by the OSS-Fuzz project. Please review the CVE identifiers referenced below for details. Impact A remote...