xpdf:fuzz_pdfload: Segv on unknown address in GList::getLength

Detailed Report: https://oss-fuzz.com/testcase?key=5670951261044736 Project: xpdf Fuzzing Engine: honggfuzz Fuzz Target: fuzzpdfload Job Type: honggfuzzasanxpdf Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: GList::getLength Catalog::Catalog PDFDoc::setup2...

Updated gnutls packages fix security vulnerability

Updated gnutls packages fix security vulnerability: It was found that GnuTLS 3.6.4 introduced a regression in the TLS protocol implementation. This caused the TLS server to not securely construct a session ticket encryption key considering the application supplied secret, allowing a MitM attacker...

imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Detailed Report: https://oss-fuzz.com/testcase?key=5389744954671104 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

njs:njs_process_script_fuzzer: Segv on unknown address in njs_function_frame_free

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5107768305647616 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::SSLCertificateRequestMessage::SSLCertificateRequestMessage

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4791311122300928 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_fuzzer: Heap-buffer-overflow in dng_decode_jpeg

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5110559589793792 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDTIFFfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_APNG_fuzzer: Heap-buffer-overflow in png_put_interlaced_row

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5692794323861504 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDAPNGfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x6100000003b...

pcapplusplus:FuzzTarget: Bad-cast to pcpp::IDnsResource from invalid vptr in pcpp::DnsLayer::parseResources

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=6136282161086464 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerubsanpcapplusplus Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000001dbed0...

unicorn:fuzz_emu_arm_thumb: Segv on unknown address in helper_uc_tracecode

Detailed Report: https://oss-fuzz.com/testcase?key=5080325477892096 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarmthumb Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: helpeructracecode Sanitizer: memory MSAN...

php:php-fuzz-parser: Memcpy-param-overlap in zend_lex_tstring

Detailed Report: https://oss-fuzz.com/testcase?key=5680375123935232 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-parser Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x62b000015218,0x62b00001b4e8 and 0x62b000015350, 0x62b00001b620...

CVE-2020-14147

An integer overflow in the getnum function in luastruct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox restrictions via a large...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in asepcos_parse_sec_attr

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4787170371174400 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ndpi:fuzz_process_packet: Use-of-uninitialized-value in ndpi_check_dga_name

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4846815202770944 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

dovecot:fuzz-smtp-server: Heap-buffer-overflow in smtp_command_parse_line

Project: https://github.com/dovecot/core.git Detailed Report: https://oss-fuzz.com/testcase?key=6020231943421952 Project: dovecot Fuzzing Engine: afl Fuzz Target: fuzz-smtp-server Job Type: aflasandovecot Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000007100 Cra...

imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6275808921649152 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

minizip:unzip_fuzzer: Stack-buffer-overflow in crc32_z

Project: https://github.com/nmoinvaz/minizip.git Detailed Report: https://oss-fuzz.com/testcase?key=5766806240493568 Project: minizip Fuzzing Engine: libFuzzer Fuzz Target: unzipfuzzer Job Type: libfuzzerasani386minizip Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

cryptofuzz:cryptofuzz-openssl: Heap-buffer-overflow in CryptoPP::xorbuf

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5647824103669760 Project: cryptofuzz Fuzzing Engine: afl Fuzz Target: cryptofuzz-openssl Job Type: aflasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

CVE-2020-14147

An integer overflow in the getnum function in luastruct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service memory corruption and application crash or possibly bypass intended sandbox restrictions via a large...

CVE-2020-14147

The CVE-2020-14147 issue is a vulnerability in Redis: an integer overflow in the getnum function of lua_struct.c on Redis builds before 6.0.3 can be triggered by processing large numbers in Lua code, leading to memory corruption, a denial of service (application crash), and potentially bypassing ...

ffmpeg:ffmpeg_AV_CODEC_ID_HCA_fuzzer: Index-out-of-bounds in reconstruct_hfr

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5089866596745216 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHCAfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...