suricata:fuzz_sigpcap: Dynamic-stack-buffer-overflow in RetrieveFPForSig

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5682380569575424 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcap Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 4 Crash Address...

ffmpeg:ffmpeg_AV_CODEC_ID_HCA_fuzzer: Heap-buffer-overflow in reconstruct_hfr

Detailed Report: https://oss-fuzz.com/testcase?key=5752477891952640 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDHCAfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62d0000003fc Crash State: reconstructhfr...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_handle_ipv6_extension_headers

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5638551770497024 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzzndpireader Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60400000013d...

wireshark:fuzzshark_ip: Stack-buffer-overflow in tvb_get_ipv4_addr_with_prefix_len

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=5751611818508288 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

wireshark:fuzzshark_tcp_port-bgp: Stack-buffer-overflow in tvb_get_ipv4_addr_with_prefix_len

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=5633955517956096 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharktcpport-bgp Job Type: libfuzzerasanwireshark Platform Id: linux...

suricata:fuzz_applayerparserparse: Heap-use-after-free in htp_connp_is_line_terminator

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5099629239861248 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzapplayerparserparse Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Addres...

arrow:arrow-ipc-file-fuzz: Crash in arrow::ipc::MessageDecoder::MessageDecoderImpl::ConsumeDataBufferInt32

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5750282928783360 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-file-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffff83ea89ab...

leptonica:pix_rotate_shear_fuzzer: Use-of-uninitialized-value in putgreytile

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5644392036827136 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: pixrotateshearfuzzer Job Type: libfuzzermsanleptonica Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in c_pdf14trans_clist_read_update

Detailed Report: https://oss-fuzz.com/testcase?key=5733777335910400 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cpdf14transclistreadupdate...

solidity:strictasm_diff_ossfuzz: Heap-buffer-overflow in solidity::yul::AsmAnalyzer::operator

Project: https://github.com/ethereum/solidity.git Detailed Report: https://oss-fuzz.com/testcase?key=5676096461996032 Project: solidity Fuzzing Engine: libFuzzer Fuzz Target: strictasmdiffossfuzz Job Type: libfuzzerasansolidity Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

radare2:ia_fuzz: Heap-use-after-free in Pe64_r_bin_pe_free

Project: https://github.com/radare/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5754875154792448 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x602000039370...

PT-2020-2561

Name of the Vulnerable Software and Affected Versions FreeRDP versions less than or equal to 2.0.0 Description The issue arises from an outside controlled array index being used unchecked for data used as configuration for the sound backend, such as alsa, oss, or pulse. This could lead to a crash...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in gp_pwrite_impl

Detailed Report: https://oss-fuzz.com/testcase?key=5730542504116224 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gppwriteimpl clistfwritechars...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in gx_dc_ht_colored_read

Detailed Report: https://oss-fuzz.com/testcase?key=5749745906876416 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gxdchtcoloredread...

poppler:pdf_fuzzer: Heap-use-after-free in int std::__1::__cxx_atomic_fetch_sub<int>

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5672947982532608 Project: poppler Fuzzing Engine: honggfuzz Fuzz Target:...

radare2:ia_fuzz: Heap-use-after-free in r_bin_object_rebuild_classes_ht

Project: https://github.com/radare/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5687820263096320 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6060000136a0...

jbig2dec:jbig2_fuzzer: Heap-use-after-free in jbig2_release_huffman_table

Project: git://git.ghostscript.com/jbig2dec.git Detailed Report: https://oss-fuzz.com/testcase?key=5721375701729280 Project: jbig2dec Fuzzing Engine: libFuzzer Fuzz Target: jbig2fuzzer Job Type: libfuzzerasanjbig2dec Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_maybe_parse_number

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=5741910661791744 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address:...

harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator=

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5704307501694976 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_parse_value

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=5673037858078720 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...