open62541:fuzz_mdns_message: Stack-buffer-overflow in _label

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6309580862128128 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzmdnsmessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

binutils:fuzz_disassemble: Global-buffer-overflow in exg_sex_discrim

Detailed Report: https://oss-fuzz.com/testcase?key=5752218594050048 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000001977e78 Crash State: exgsexdiscrim decodeoperation...

htslib:hts_open_fuzzer: Heap-buffer-overflow in hts_log

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5760144234774528 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x606000006c00 Crash...

libvips:sharpen_fuzzer: Heap-buffer-overflow in exif_entry_get_value

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5114227332743168 Project: libvips Fuzzing Engine: afl Fuzz Target: sharpenfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6020000122f1 Cra...

skia:api_draw_functions: Heap-buffer-overflow in sse2::load_rgf16

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5654222867005440 Project: skia Fuzzing Engine: afl Fuzz Target: apidrawfunctions Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x61d000000983 Crash...

matio:matio_fuzzer: Crash in H5G_node_cmp3

Detailed Report: https://oss-fuzz.com/testcase?key=5111156548567040 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6100f7ff0188 Crash State: H5Gnodecmp3 H5Bfind H5Gstablookup Sanitizer: address ASAN...

matio:matio_fuzzer: Crash in H5MM_xstrdup

Detailed Report: https://oss-fuzz.com/testcase?key=5711189249622016 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x610000060148 Crash State: H5MMxstrdup H5Genttolink H5Gnodeiterate Sanitizer: address...

wireshark:fuzzshark_ip_proto-udp: Heap-use-after-free in wmem_strbuf_get_str

Project: https://code.wireshark.org/review/wireshark Detailed Report: https://oss-fuzz.com/testcase?key=5193372674818048 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

libhtp:fuzz_htp: Heap-buffer-overflow in LzmaDec_DecodeToDic

Project: https://github.com/OISF/libhtp.git Detailed Report: https://oss-fuzz.com/testcase?key=5659352148475904 Project: libhtp Fuzzing Engine: afl Fuzz Target: fuzzhtp Job Type: aflasanlibhtp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x621000003a6d Crash State:...

libxslt:xpath: Heap-buffer-overflow in xsltFormatNumberConversion

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5656808252768256 Project: libxslt Fuzzing Engine: afl Fuzz Target: xpath Job Type: aflasanlibxslt Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60300000131f Crash...

php:php-fuzz-exif: Heap-buffer-overflow in php_ifd_get32u

Detailed Report: https://oss-fuzz.com/testcase?key=5720780498796544 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60400002f9f9 Crash State: phpifdget32u exifconvertanytoint...

matio:matio_fuzzer: Stack-buffer-overflow in Mat_uint32Swap

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5647739899084800 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7f9237c61880 Crash State...

ghostscript:gstoraster_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5741557990293504 Project: ghostscript Fuzzing Engine: afl Fuzz Target: gstorasterfuzzer Job Type: aflasanghostscript Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in decode_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5762455661182976 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegDEMUXERfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x60a000000046 Cras...

libmpeg2:mpeg2_dec_fuzzer: Heap-buffer-overflow in impeg2_fmt_conv_yuv420p_to_yuv420sp_uv

Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5672508879011840 Project: libmpeg2 Fuzzing Engine: afl Fuzz Target: mpeg2decfuzzer Job Type: aflasanlibmpeg2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

wireshark/fuzzshark_ip_proto-udp: Heap-use-after-free in wmem_array_get_count

Detailed report: https://oss-fuzz.com/testcase?key=5757525804187648 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60b00046ab78 Crash State:...

drAFL - AFL + DynamoRIO = Fuzzing Binaries With No Source Code On Linux

Original AFL supports black-box coverage-guided fuzzing using QEMU mode. I highly recommend to try it first and if it doesn't work you can try this tool. Usage You need to specify DRRUNPATH to point to drrun launcher and LIBCOVPATH to point to libbinafl.so coverage library. You also need to switc...

Oracle Java Runtime Environment - Heap Corruption During TTF font Rendering in sc_FindExtrema4

Oracle Java Runtime Environment - Heap Corruption During TTF font Rendering in scFindExtrema4 A heap corruption was observed in Oracle Java Runtime Environment version 8u202 latest at the time of this writing while fuzz-testing the processing of TrueType, implemented in a proprietary t2k library...

SVG nanosvg Library Memory Corruption / Denial Of Service

The SVG library nanosvg 0 suffers from a memory corruption bug that can lead to at least DoS. The bug exists in the nsvgparseColorRGB function, which can be reached by parsing a malicious SVG file through nsvgParseFromFile or nsvgParse. This should also affect libraries/packages that provide...

Lua 5.3.5 Use-After-Free

Exploit Title: Lua 5.3.5 Exploit Author: Fady Mohamed Osman https://twitter.com/fadyothman Exploit-db : http://www.exploit-db.com/author/?a=2986 Blog : https://blog.fadyothman.com/ Date: Jan. 10th 2019 Vendor Homepage: https://www.lua.org/ Software Link: https://www.lua.org/ftp/lua-5.3.5.tar.gz...