leptonica:dewarp_fuzzer: Heap-buffer-overflow in rasteropGeneralLow

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5696549393530880 Project: leptonica Fuzzing Engine: afl Fuzz Target: dewarpfuzzer Job Type: aflasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

arrow:arrow-ipc-stream-fuzz: Negative-size-param in arrow::ConcatenateBuffers

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4964779626856448 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

arrow:arrow-ipc-file-fuzz: Heap-buffer-overflow in arrow::ConcatenateBuffers

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5760568177983488 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-file-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60a000000080 Crash...

glib:fuzz_uri_parse: Heap-buffer-overflow in g_string_insert_len

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=4902921962782720 Project: glib Fuzzing Engine: afl Fuzz Target: fuzzuriparse Job Type: aflasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address: 0x602000000134 Crash...

rdkit:mol_deserialization_fuzzer: Crash in RDKit::RingInfo::addRing

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4573206878093312 Project: rdkit Fuzzing Engine: afl Fuzz Target: moldeserializationfuzzer Job Type: aflasanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fbdce7bfd70 Crash State:...

quickjs:fuzz_compile: Heap-buffer-overflow in js_free_function_def

Detailed Report: https://oss-fuzz.com/testcase?key=4906679195140096 Project: quickjs Fuzzing Engine: afl Fuzz Target: fuzzcompile Job Type: aflasanquickjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7ff14d48563b Crash State: jsfreefunctiondef jscreatefunction...

OSS-Fuzz - Continuous Fuzzing Of Open Source Software

Fuzz testing is a well-known technique for uncovering programming errors in software. Many of these detectable errors, like buffer overflow, can have serious security implications. Google has found thousands of security vulnerabilities and stability bugs by deploying guided in-process fuzzing of...

minizip:unzip_fuzzer: Stack-buffer-overflow in crc32_z

Project: https://github.com/nmoinvaz/minizip.git Detailed Report: https://oss-fuzz.com/testcase?key=5737646432452608 Project: minizip Fuzzing Engine: afl Fuzz Target: unzipfuzzer Job Type: aflasanminizip Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7ffe99ff1360 Cra...

quickjs:fuzz_compile: Heap-use-after-free in JS_DefineProperty

Detailed Report: https://oss-fuzz.com/testcase?key=5658108885204992 Project: quickjs Fuzzing Engine: afl Fuzz Target: fuzzcompile Job Type: aflasanquickjs Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60900025f8e8 Crash State: JSDefineProperty buildbacktrace...

leptonica:pageseg_fuzzer: Heap-buffer-overflow in rasteropGeneralLow

Detailed Report: https://oss-fuzz.com/testcase?key=5183514231439360 Project: leptonica Fuzzing Engine: afl Fuzz Target: pagesegfuzzer Job Type: aflasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x606000000418 Crash State: rasteropGeneralLow rasteropLow...

matio:matio_fuzzer: Crash in H5O_dtype_decode_helper

Detailed Report: https://oss-fuzz.com/testcase?key=5198181276319744 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x618000010fb0 Crash State: H5Odtypedecodehelper H5Odtypeshareddecode H5Oattrshareddeco...

stb:stbi_read_fuzzer: Heap-buffer-overflow in load_jpeg_image

Detailed Report: https://oss-fuzz.com/testcase?key=5726154781884416 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62b000006e0f Crash State: loadjpegimage stbijpegload stbiloadmain...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_kerberos

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4791365602115584 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60e00000029d Crash State...

curl: Poll loop/hang on incomplete HTTP header

Summary: When an incomplete server header is missing its value, the curl client will receive the packet but hang while parsing it. Examples of vulnerable server headers: Location, Content-Range and Connection. Adding the --max-timeoption will terminate the request as intended. Steps To Reproduce:...

gnutls:gnutls_client_fuzzer: Null-dereference READ with empty stacktrace

Project: https://gitlab.com/gnutls/gnutls.git Detailed Report: https://oss-fuzz.com/testcase?key=5102053377703936 Project: gnutls Fuzzing Engine: afl Fuzz Target: gnutlsclientfuzzer Job Type: aflasangnutls Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_workflow_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5934333046292480 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireader Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60400000013e Crash State:...

quickjs:fuzz_eval: Stack-buffer-overflow in get_class_atom

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5071407886368768 Project: quickjs Fuzzing Engine: afl Fuzz Target: fuzzeval Job Type: aflasanquickjs Platform Id: linux Crash Type: Stack-buffer-overflow WRITE ...

rdkit:smiles_string_to_mol_fuzzer: Stack-buffer-overflow in FindRings::findSSSRforDupCands

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5480444207562752 Project: rdkit Fuzzing Engine: afl Fuzz Target: smilesstringtomolfuzzer Job Type: aflasanrdkit Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7ffe78642860...

stb:stbi_read_fuzzer: Heap-buffer-overflow in stbi__tga_load

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5114711032201216 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x602000000091 Crash State:...

gdal:gdal_translate_fuzzer: Heap-buffer-overflow in GDALResampleChunk32R_Mode

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5677488700391424 Project: gdal Fuzzing Engine: afl Fuzz Target: gdaltranslatefuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x603000017490 Crash...