espeak-ng:ssml-fuzzer: Global-buffer-overflow in AnnouncePunctuation

Detailed Report: https://oss-fuzz.com/testcase?key=4897820148039680 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Global-buffer-overflow WRITE Crash Address: 0x000001149a08 Crash State: AnnouncePunctuation...

OSV-2024-1194 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372093894 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...

OSV-2024-1191 Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371931330 Crash type: Security exception Crash state: org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII...

wasm3:fuzzer: Heap-buffer-overflow in PreserveRegisterIfOccupied

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=4802459962245120 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x526000020354 Crash...

php:php-fuzz-execute: Heap-use-after-free in attr_free

Detailed Report: https://oss-fuzz.com/testcase?key=5198251902435328 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf442c9e4 Crash State: attrfree zendhashdestroy...

OSV-2024-1182 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371233025 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec com.ctc.wstx.dtd.FullDTDReader.skipDtdWs com.ctc.wstx.dtd.FullDTDReader.readContentSpec...

OSV-2024-1181 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371233781 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.lang.Exception. java.base/java.lang.RuntimeException...

OSV-2024-1179 UNKNOWN READ in __dynamic_cast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371239171 Crash type: UNKNOWN READ Crash state: dynamiccast HandleDynamicTypeCacheMiss CallbackToLogRedirector...

libarchive:libarchive_fuzzer: Object-size in process_head_file

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=4695560571912192 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerubsanlibarchive Platform Id: linux Crash Type: Object-size Crash Address: Crash...

Buffer underflow in base64decode

With the following new fuzz target generated by https://github.com/google/oss-fuzz-gen: include include include include "utils.hpp" include // File under test include // Auxiliary headers include include include include include include if hasinclude include namespace fs = std::filesystem; else...

go-git:fuzz_decode: Crash in fuzz_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5513675857788928 Project: go-git Fuzzing Engine: libFuzzer Fuzz Target: fuzzdecode Job Type: libfuzzerasango-git Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: fuzzdecode Sanitizer: address ASAN...

fluent-bit:flb-it-fuzz-input_fuzzer_OSSFUZZ: Heap-use-after-free in flb_output_return_do

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4874928027926528 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-inputfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-free READ...

OSV-2024-1161 Security exception in java.base/java.util.Arrays.copyOfRange

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=370272563 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange java.base/java.lang.StringUTF16.newString java.base/java.lang.String.substring...

gpac:fuzz_m2ts_probe: Heap-buffer-overflow in gf_m2ts_process_sdt

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4844943997206528 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzm2tsprobe Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address: 0x50b0000e384d Crash State:...

OSV-2024-1159 Use-of-uninitialized-value in decompress_yuv.cc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=369974248 Crash type: Use-of-uninitialized-value Crash state: decompressyuv.cc...

OSV-2024-1158 Use-of-uninitialized-value in format_message

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=370032374 Crash type: Use-of-uninitialized-value Crash state: formatmessage ultrahdr::JpegDecoderHelper::decode ultrahdr::JpegDecoderHelper::decompressImage...

PT-2024-40588 · Git +1 · Libjpeg-Turbo

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value" as reported by OSS-Fuzz. The crash occurs in the decompress yuv.cc file. No...

log4j2:log4j-layout-template-json-fuzz-test-JsonTemplateLayoutCodecFuzzer: Security exception in org.apache.logging.log4j.layout.template.json.util.JsonReader.readObjectKey

Detailed Report: https://oss-fuzz.com/testcase?key=4666448637657088 Project: log4j2 Fuzzing Engine: libFuzzer Fuzz Target: log4j-layout-template-json-fuzz-test-JsonTemplateLayoutCodecFuzzer Job Type: libfuzzerasanlog4j2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

yamlbeans:YamlReaderFuzzer: Security exception in com.esotericsoftware.yamlbeans.YamlReader.readValueInternal

Detailed Report: https://oss-fuzz.com/testcase?key=6508676066639872 Project: yamlbeans Fuzzing Engine: libFuzzer Fuzz Target: YamlReaderFuzzer Job Type: libfuzzerasanyamlbeans Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2024-1150 Heap-buffer-overflow in extract_mr_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=369236552 Crash type: Heap-buffer-overflow READ Crash state: extractmrdata parsemrstring readstatparsesav...