binutils:fuzz_readelf: Stack-buffer-overflow in print_dynamic_symbol

Detailed Report: https://oss-fuzz.com/testcase?key=5953247323095040 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzreadelf Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f67ff9a3340 Crash State: printdynamicsymbol...

skia:svg_dom: Global-buffer-overflow in SkParse::FindNamedColor

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5124092452929536 Project: skia Fuzzing Engine: afl Fuzz Target: svgdom Job Type: aflasanskia Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000001da0690 Crash State:...

stb:stbi_read_fuzzer: Use-of-uninitialized-value in stbi__expand_png_palette

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=4908103769522176 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

unicorn:fuzz_emu_arm_armbe: Crash in cpu_arm_exec_armeb

Detailed Report: https://oss-fuzz.com/testcase?key=5637903001845760 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarmarmbe Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000096ee7119 Crash State: cpuarmexecarmeb tcgcpuexecarmeb...

libraw:libraw_fuzzer: Stack-buffer-overflow in LibRaw_buffer_datastream::gets

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5070269470474240 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzerasanlibraw Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

pcapplusplus:FuzzTarget: Stack-buffer-overflow in pcpp::IDnsResource::decodeName

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5188876846235648 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...

leptonica:enhance_fuzzer: Use-of-uninitialized-value in blockconvLow

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5685982795137024 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzermsanleptonica Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in ojph::local::mel_get_run

Detailed Report: https://oss-fuzz.com/testcase?key=6293861268979712 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ojph::local::melgetrun...

envoy:codec_impl_fuzz_test: Bad-cast to testing::internal::FunctionMocker<Envoy::Network::Connection::State ()> from testing::internal::UntypedFunctionMockerBase in Envoy::Network::MockConnection::state

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5653835151572992 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: codecimplfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffe11206980 Crash...

kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in XCFImageFormat::mergeRGBToRGB

Detailed Report: https://oss-fuzz.com/testcase?key=5752637241950208 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: XCFImageFormat::mergeRGBToRG...

ferrero.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1137745 Security Researcher kun-fly Helped patch 801 vulnerabilities Received 7 Coordinated Disclosure badges Received 44 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting ferrero.com website and its...

binutils:fuzz_bfd: Use-of-uninitialized-value in alpha_ecoff_get_elt_at_filepos

Detailed Report: https://oss-fuzz.com/testcase?key=5165349122342912 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzbfd Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: alphaecoffgeteltatfilepos...

leptonica:pix_rotate_shear_fuzzer: Use-of-uninitialized-value in put4bitbwtile

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5682052142989312 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: pixrotateshearfuzzer Job Type: libfuzzermsanleptonica Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

gnutls:gnutls_psk_client_fuzzer: Use-of-uninitialized-value in __gmpz_clear

Project: https://gitlab.com/gnutls/gnutls.git Detailed Report: https://oss-fuzz.com/testcase?key=6296663875649536 Project: gnutls Fuzzing Engine: libFuzzer Fuzz Target: gnutlspskclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_workflow_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5637463185031168 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6060001f4c36...

dlplibs:key6fuzzer: Segv on unknown address in std::__1::deque<std::__1::deque<boost::variant<libetonyek::MoveTo, libetonyek::L

Detailed Report: https://oss-fuzz.com/testcase?key=5752428626706432 Project: dlplibs Fuzzing Engine: honggfuzz Fuzz Target: key6fuzzer Job Type: honggfuzzasandlplibs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

saopauloguiaonline.com.br Cross Site Scripting vulnerability

Security Researcher haxmov Helped patch 543 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting saopauloguiaonline.com.br website and its users. Following...

vilaolariahotel.com.br Cross Site Scripting vulnerability

Security Researcher haxmov Helped patch 543 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting vilaolariahotel.com.br website and its users. Following...

arrow:parquet-arrow-fuzz: Crash in apache::thrift::protocol::TCompactProtocolT<apache::thrift::transport::TMemoryBu

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5726334745837568 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x619f000f05b0 Crash State:...

imagemagick:encoder_tiff64_fuzzer: Use-of-uninitialized-value in ScaleFloatPixel

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5080693652848640 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertiff64fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...