open62541/fuzz_binary_message: NULL

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5738840736661504 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: UNKNOWN REA...

keystone/fuzz_asm_hex: Use-of-uninitialized-value in llvm_ks::HexagonMCCodeEmitter::getExprOpValue

Detailed report: https://oss-fuzz.com/testcase?key=5664745516957696 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmhex Fuzz target binary: fuzzasmhex Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

open62541/fuzz_binary_message: NULL

Detailed report: https://oss-fuzz.com/testcase?key=5693001825779712 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f535163ab78 Crash State: NULL...

AppArmor Filesystem Blacklisting Bypass Vulnerability

Exploit for linux platform in category local exploits AppArmor: filesystem blacklisting can be bypassed by moving parents Some AppArmor policies attempt to blacklist access to specific directories while broadly granting write access to everything else. For example, the Firefox profile uses the...

systemd/fuzz-dhcp6-client: Heap-buffer-overflow in dhcp6_option_parse_status

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5719574129934336 Project: systemd Fuzzer: aflsystemdfuzz-dhcp6-client Fuzz target binary: fuzz-dhcp6-client Job Type: aflasansystemd Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

openvswitch/expr_parse_target: Stack-buffer-underflow in lex_parse_hex_integer

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5699613135208448 Project: openvswitch Fuzzer: aflopenvswitchexprparsetarget Fuzz target binary: exprparsetarget Job Type: aflasanopenvswitch Platform Id: linux Crash Type: Stack-buffer-underflow REA...

imagemagick/encoder_png_fuzzer: Use-of-uninitialized-value in png_do_pack

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5739060115537920 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpngfuzzer Fuzz target binary: encoderpngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

jsc: Heap-buffer-overflow in JSC::WriteBarrierBase<JSC::Unknown, WTF::DumbValueTraits<JSC::Unknown> >::get

Detailed report: https://oss-fuzz.com/testcase?key=5648470396895232 Project: jsc Fuzzer: jsfuzzer Job Type: asanjsc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62d000060000 Crash State: JSC::WriteBarrierBase ::get JSC::arrayProtoFuncIndexOf jsc Sanitizer: address...

keystone/fuzz_asm_sparc64be: Bad-free in llvm_ks::MCEncodedFragmentWithFixups<32u, 4u>::~MCEncodedFragmentWithFixups

Project: https://github.com/keystone-engine/keystone.git Detailed report: https://oss-fuzz.com/testcase?key=5745963403051008 Project: keystone Fuzzer: aflkeystonefuzzasmsparc64be Fuzz target binary: fuzzasmsparc64be Job Type: aflasankeystone Platform Id: linux Crash Type: Bad-free Crash Address:...

unicorn/fuzz_emu_arm64_arm: NULL

Detailed report: https://oss-fuzz.com/testcase?key=5702725296193536 Project: unicorn Fuzzer: libFuzzerunicornfuzzemuarm64arm Fuzz target binary: fuzzemuarm64arm Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00003a800481 Crash State: NULL Sanitizer:...

skia/api_raster_n32_canvas: Crash in SkScan::DAAFillPath

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5713029673517056 Project: skia Fuzzer: aflskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: aflasanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x01018100810...

botan/mode_padding: Heap-buffer-overflow in ref_oneandzero_unpad

Project: https://github.com/randombit/botan.git Detailed report: https://oss-fuzz.com/testcase?key=5645045441495040 Project: botan Fuzzer: aflbotanmodepadding Fuzz target binary: modepadding Job Type: aflasanbotan Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

skia/api_raster_n32_canvas: Heap-buffer-overflow in void sse2::memsetT<unsigned int>

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5761078466707456 Project: skia Fuzzer: aflskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Addres...

open62541/fuzz_binary_message: Crash in [heap]

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5664857509068800 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: UNKNOWN REA...

unicorn/fuzz_emu_arm64_arm: Crash in reset_temp_aarch64

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5758411325571072 Project: unicorn Fuzzer: aflunicornfuzzemuarm64arm Fuzz target binary: fuzzemuarm64arm Job Type: aflasanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

unicorn/fuzz_emu_arm64_arm: Use-of-uninitialized-value in tcg_liveness_analysis_aarch64

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5642497104019456 Project: unicorn Fuzzer: libFuzzerunicornfuzzemuarm64arm Fuzz target binary: fuzzemuarm64arm Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type:...

openvswitch/flow_extract_target: Use-of-uninitialized-value in miniflow_map_init

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5706708475707392 Project: openvswitch Fuzzer: libFuzzeropenvswitchflowextracttarget Fuzz target binary: flowextracttarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type:...

keystone/fuzz_asm_arm_thumbbe: Bad-cast to const llvm_ks::MCSectionELF from llvm_ks::MCSectionMachO in llvm_ks::MCELFStreamer::ChangeSection

Detailed report: https://oss-fuzz.com/testcase?key=5757565082796032 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmarmthumbbe Fuzz target binary: fuzzasmarmthumbbe Job Type: libfuzzerubsankeystone Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000050dee30 Crash State: Bad-cast to...

unicorn/fuzz_emu_arm_thumb: Index-out-of-bounds in store_reg_arm

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5655596519391232 Project: unicorn Fuzzer: libFuzzerunicornfuzzemuarmthumb Fuzz target binary: fuzzemuarmthumb Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bound...

Microsoft Edge Chakra PathTypeHandlerBase::SetAttributesHelper Type Confusion

Microsoft Edge: Chakra: Type confusion with PathTypeHandlerBase::SetAttributesHelper CVE-2018-8384 Here's a snippet of PathTypeHandlerBase::SetAttributesHelper. PathTypeHandlerBase predTypeHandler = this; DynamicType currentType = instance-GetDynamicType; while predTypeHandler-GetPathLength...