freeimage/load_from_memory_fuzzer: Stack-buffer-overflow in LibRaw::parse_rollei

Detailed report: https://oss-fuzz.com/testcase?key=5156329342107648 Project: freeimage Fuzzer: libFuzzerloadfrommemoryfuzzer Fuzz target binary: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7fef5bbbdca0 Crash Stat...

imagemagick/ping_ps_fuzzer: Stack-buffer-overflow in GetNextUTFCode

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5633665431764992 Project: imagemagick Fuzzer: libFuzzerimagemagickpingpsfuzzer Fuzz target binary: pingpsfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

c-ares/ares_parse_reply_fuzzer: Crash in ares-test-fuzz.c

Project: https://github.com/c-ares/c-ares.git Detailed report: https://oss-fuzz.com/testcase?key=5651369832218624 Project: c-ares Fuzzer: libFuzzerc-aresaresparsereplyfuzzer Fuzz target binary: aresparsereplyfuzzer Job Type: libfuzzermsanc-ares Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

envoy/h1_capture_fuzz_test: Crash in Envoy::TestUtility::findCounter

Detailed report: https://oss-fuzz.com/testcase?key=5689202068422656 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fdd36e0b970 Crash State:...

ffmpeg/ffmpeg_AV_CODEC_ID_LIBVORBIS_fuzzer: Crash in oggvorbis_decode_init

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5764908467093504 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBVORBISfuzzer Fuzz target binary: ffmpegAVCODECIDLIBVORBISfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN...

njs/njs_process_script_fuzzer: Use-of-uninitialized-value in add_name

Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5644192103006208 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

leptonica/pix_rotate_shear_fuzzer: Heap-buffer-overflow in tiffReadCallback

Project: https://github.com/DanBloomberg/leptonica.git Detailed report: https://oss-fuzz.com/testcase?key=5674137189613568 Project: leptonica Fuzzer: libFuzzerleptonicapixrotateshearfuzzer Fuzz target binary: pixrotateshearfuzzer Job Type: libfuzzerasanleptonica Platform Id: linux Crash Type:...

keystone/fuzz_asm_sparc64be: Crash in llvm_ks::SmallVectorBase::grow_pod

Detailed report: https://oss-fuzz.com/testcase?key=5688354168897536 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmsparc64be Fuzz target binary: fuzzasmsparc64be Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7180004447e0 Crash State:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in TT_Process_Simple_Glyph

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5689090034368512 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

Unpatched Flaw in UC Browser Apps Could Let Hackers Launch Phishing Attacks

A bug hunter has discovered and publicly disclosed details of an unpatched browser address bar spoofing vulnerability that affects popular Chinese UC Browser and UC Browser Mini apps for Android. Developed by Alibaba-owned UCWeb, UC Browser is one of the most popular mobile browsers, specifically...

open62541/fuzz_json_decode_encode: Heap-buffer-overflow in UA_unbase64

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5207216900014080 Project: open62541 Fuzzer: libFuzzeropen62541fuzzjsondecodeencode Fuzz target binary: fuzzjsondecodeencode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

lwan/request_fuzzer: Negative-size-param in parse_proxy_protocol_v2

Project: git://github.com/lpereira/lwan Detailed report: https://oss-fuzz.com/testcase?key=5091179189764096 Project: lwan Fuzzer: libFuzzerlwanrequestfuzzer Fuzz target binary: requestfuzzer Job Type: libfuzzerasanlwan Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

wget2/libwget_metalink_parse_fuzzer: Heap-buffer-overflow in _iri_unescape_inline

Project: https://gitlab.com/gnuwget/wget2.git Detailed report: https://oss-fuzz.com/testcase?key=5138114927919104 Project: wget2 Fuzzer: libFuzzerwget2libwgetmetalinkparsefuzzer Fuzz target binary: libwgetmetalinkparsefuzzer Job Type: libfuzzerasanwget2 Platform Id: linux Crash Type:...

karchive/karchive_fuzzer: Heap-buffer-overflow in QBuffer::readData

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5691157767520256 Project: karchive Fuzzer: aflkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: aflasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

kimageformats/kimgio_xcf_fuzzer: Use-of-uninitialized-value in XCFImageFormat::mergeGrayAToGray

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5693510973390848 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgioxcffuzzer Fuzz target binary: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

lwan/request_fuzzer: Global-buffer-overflow in lwan_parse_rfc_time

Project: git://github.com/lpereira/lwan Detailed report: https://oss-fuzz.com/testcase?key=5675545829834752 Project: lwan Fuzzer: libFuzzerlwanrequestfuzzer Fuzz target binary: requestfuzzer Job Type: libfuzzerasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

imagemagick/ping_jpg_fuzzer: Use-of-uninitialized-value in ParseInternalDoctype

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5673441966948352 Project: imagemagick Fuzzer: libFuzzerimagemagickpingjpgfuzzer Fuzz target binary: pingjpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

perfetto/trace_processor_fuzzer: Crash in perfetto::trace_processor::ProtoTraceParser::ParsePowerRails

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed report: https://oss-fuzz.com/testcase?key=5706766165213184 Project: perfetto Fuzzer: libFuzzerperfettotraceprocessorfuzzer Fuzz target binary: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Cra...

lzma/7z_fuzzer: Use-of-uninitialized-value in CrcUpdateT8

Detailed report: https://oss-fuzz.com/testcase?key=5695345578737664 Project: lzma Fuzzer: libFuzzerlzma7zfuzzer Fuzz target binary: 7zfuzzer Job Type: libfuzzermsanlzma Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CrcUpdateT8 CrcCalc SzArExExtract Sanitize...

imagemagick/ping_dng_fuzzer: Heap-buffer-overflow in LibRaw::sget4

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5720967739867136 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...