ROS-20260915-73-0029

The vulnerability of the GWP-ASan web browser component in Google Chrome relates to reading data from buffer areas beyond the acceptable limit. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a malicious file...

selinux:binpolicy-fuzzer: Crash in block_to_cil

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5092644498505728 Project: selinux Fuzzing Engine: afl Fuzz Target: binpolicy-fuzzer Job Type: aflasanselinux Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7977768e0c98 Crash...

mruby:mruby_fuzzer: Crash in mrb_vm_exec

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4737128513470464 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x77754d760078 Crash State: mrbvmexec...

freerdp:TestFuzzClientRdpFile: Heap-buffer-overflow in CommandLineParseCommaSeparatedValuesEx

Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=6177768388493312 Project: freerdp Fuzzing Engine: honggfuzz Fuzz Target: TestFuzzClientRdpFile Job Type: honggfuzzasanfreerdp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Crash in renumber_by_map

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4862598538133504 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

Detailed Report: https://oss-fuzz.com/testcase?key=6354484973076480 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: co.nstant.in.cbor.CborDecoder.decodeNext...

The vulnerability of the GWP-ASan component in the Google Chrome web browser allows a hacker to gain access to confidential data.

The vulnerability of the GWP-ASan web browser component in Google Chrome relates to reading data from buffer areas beyond the acceptable limit. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a malicious file...

xstream:XmlFuzzer: Security exception in java.base/java.lang.AbstractStringBuilder.<init>

Project: https://github.com/x-stream/xstream.git Detailed Report: https://oss-fuzz.com/testcase?key=5595632715497472 Project: xstream Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanxstream Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

json-flattener:FlattenFuzzer: Security exception in com.github.wnameless.json.flattener.JsonFlattener.jsonVal2Obj

Project: https://github.com/wnameless/json-flattener.git Detailed Report: https://oss-fuzz.com/testcase?key=5587817015869440 Project: json-flattener Fuzzing Engine: libFuzzer Fuzz Target: FlattenFuzzer Job Type: libfuzzerasanjson-flattener Platform Id: linux Crash Type: Security exception Crash...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

Detailed Report: https://oss-fuzz.com/testcase?key=6622164997177344 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: co.nstant.in.cbor.CborDecoder.decodeNext...

freetype2:ftfuzzer: Crash in tt_face_load_varc_glyph

Detailed Report: https://oss-fuzz.com/testcase?key=6365555599409152 Project: freetype2 Fuzzing Engine: afl Fuzz Target: ftfuzzer Job Type: aflasanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x79f408d433d7 Crash State: ttfaceloadvarcglyph ttglyphload FTLoadGlyph Sanitizer:...

wasm3:fuzzer: Global-buffer-overflow in Compile_SetLocal

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6216778871799808 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x5c78265ee408 Cras...

tarantool:uri_parse_test: Heap-use-after-free in cdata_setptr

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=5666324051984384 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: uriparsetest Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address:...

hobbes:fuzz-parse-expr: Heap-buffer-overflow in yylex

Project: https://github.com/morganstanley/hobbes.git Detailed Report: https://oss-fuzz.com/testcase?key=5314345710714880 Project: hobbes Fuzzing Engine: libFuzzer Fuzz Target: fuzz-parse-expr Job Type: libfuzzerasanhobbes Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

json-flattener:UnflattenFuzzer: Security exception in com.github.wnameless.json.unflattener.JsonUnflattener.unflattenArray

Project: https://github.com/wnameless/json-flattener.git Detailed Report: https://oss-fuzz.com/testcase?key=4518232036540416 Project: json-flattener Fuzzing Engine: libFuzzer Fuzz Target: UnflattenFuzzer Job Type: libfuzzerasanjson-flattener Platform Id: linux Crash Type: Security exception Crash...

grok:grk_decompress_mercury_fuzzer: Heap-buffer-overflow in bool grk::GrkImage::compositePlanar<int>

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=6270477761576960 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressmercuryfuzzer Job Type: libfuzzerasangrok...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

Detailed Report: https://oss-fuzz.com/testcase?key=5492992044236800 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: co.nstant.in.cbor.CborDecoder.decodeNext...

jflex:JflexFuzzer: Security exception in jflex.core.NFA.insertNFA

Project: https://github.com/jflex-de/jflex.git Detailed Report: https://oss-fuzz.com/testcase?key=5613996171132928 Project: jflex Fuzzing Engine: libFuzzer Fuzz Target: JflexFuzzer Job Type: libfuzzerasanjflex Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

wasm3:fuzzer: Global-buffer-overflow in Compile_Memory_CopyFill

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6572046036566016 Project: wasm3 Fuzzing Engine: afl Fuzz Target: fuzzer Job Type: aflasanwasm3 Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x55e896aa04a8 Crash State:...

hobbes:fuzz-type-decode: Heap-buffer-overflow in hobbes::MkRecord::operator==

Project: https://github.com/morganstanley/hobbes.git Detailed Report: https://oss-fuzz.com/testcase?key=4688631038803968 Project: hobbes Fuzzing Engine: libFuzzer Fuzz Target: fuzz-type-decode Job Type: libfuzzerasanhobbes Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...