ffmpeg: Heap-use-after-free in put_h264_qpel16_mc00_9_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6107186067406848 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDH264fuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDH264fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux...

libplist: Memcpy-param-overlap in parse_data_node

Project: https://github.com/libimobiledevice/libplist.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4930725262393344 Project: libplist Fuzzer: libFuzzerlibplistbplistfuzzer Fuzz target binary: bplistfuzzer Job Type: libfuzzerasanlibplist Platform Id: linux Crash Type:...

ffmpeg: Heap-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6424225917173760 Project: ffmpeg Fuzzer: ffmpegVIDEOAVCODECIDPICTORfuzzer Job Type: libfuzzerasanffmpeg Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7f77cbd4ca6f Crash Stat...

ffmpeg: Stack-buffer-overflow in synth_tones

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5737865715646464 Project: ffmpeg Fuzzer: ffmpegAUDIOAVCODECIDDTSfuzzer Job Type: libfuzzerasanffmpeg Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7f440e0a0a20 Crash State...

freetype2: Heap-buffer-overflow in tt_size_reset

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6627871858622464 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type:...

Google Chrome HTMLKeygenElement::shadowSelect() Type Confusion

Google Chrome: Type confusion in HTMLKeygenElement::shadowSelect Chrome bug: https://bugs.chromium.org/p/chromium/issues/detail?id=666246 PoC: var range = document.caretRangeFromPoint50, 50; var shadowtreecontainer = range.commonAncestorContainer; shadowtreecontainer.prepend"foo";...

libarchive: Heap-buffer-overflow in archive_read_format_cpio_read_header

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5205694638718976 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...

libreoffice: Heap-buffer-overflow in MakePreview

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5385827211280384 Project: libreoffice Fuzzer: libFuzzerlibreofficeepsfuzzer Fuzz target binary: epsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type...

json: Use-of-uninitialized-value in __gxx_personality_v0

Project: https://github.com/nlohmann/json.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5830738947604480 Project: json Fuzzer: libFuzzerjsonparseaflfuzzer Fuzz target binary: parseaflfuzzer Job Type: libfuzzermsanjson Platform Id: linux Crash Type:...

lcms: Heap-buffer-overflow in TetrahedralInterpFloat

Project: https://github.com/mm2/Little-CMS.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5333448038285312 Project: lcms Fuzzer: libFuzzerlcmscmstransformfuzzer Fuzz target binary: cmstransformfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type:...

ffmpeg: Heap-buffer-overflow in ipvideo_decode_block_opcode_0xA

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4850119698546688 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDINTERPLAYVIDEOfuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDINTERPLAYVIDEOfuzzer Job Type: libfuzzerasanffmpeg...

ffmpeg: Stack-buffer-overflow in decode_zbuf

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4529672557690880 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDPNGfuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDPNGfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Cras...

libarchive: Heap-buffer-overflow in detect_form

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4619748121772032 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...

libreoffice: Crash in WinMtfOutput::DrawText

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6116030539628544 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type...

libass: Attempting free in ass_drawing_free

Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6332129302544384 Project: libass Fuzzer: libFuzzerlibassfuzzer Fuzz target binary: libassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Attempting free Crash...

file: Attempting free in apprentice_map

Project: https://github.com/file/file.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5095269284708352 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Attempting free Crash Address...

libass: Attempting free in reset_render_context

Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6213284067803136 Project: libass Fuzzer: libFuzzerlibassfuzzer Fuzz target binary: libassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Attempting free Crash...

libass: Attempting free in ass_free_track

Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6177355424858112 Project: libass Fuzzer: libFuzzerlibassfuzzer Fuzz target binary: libassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Attempting free Crash...

libass: Attempting free in ass_render_event

Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5582267204239360 Project: libass Fuzzer: libFuzzerlibassfuzzer Fuzz target binary: libassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Attempting free Crash...

irssi: Attempting free in g_string_append_vprintf

Project: https://github.com/irssi/irssi.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4984573649747968 Project: irssi Fuzzer: libFuzzerirssiirssi-fuzz Fuzz target binary: irssi-fuzz Job Type: libfuzzerasanirssi Platform Id: linux Crash Type: Attempting free Crash...