imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in void mc_chroma<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=5764648198733824 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x62b00001b63c Crash State: void mcchroma...

wabt:wasm2wat_fuzzer: Object-size in std::__1::vector<wabt::DataSegment*, std::__1::allocator<wabt::DataSegment*> >::

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=6001483432853504 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wasm2watfuzzer Job Type: libfuzzerubsanwabt Platform Id: linux Crash Type: Object-size Crash Address: Crash State: std::1::vect...

graphicsmagick:enhance_fuzzer: Unknown signal in UnpackWPG2Raster

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5642427790786560 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type: Unknown signal Crash Address:...

php:php-fuzz-mbstring: Heap-use-after-free in check_called_node_in_look_behind

Detailed Report: https://oss-fuzz.com/testcase?key=5734839508795392 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-mbstring Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6070081cdd40 Crash State: checkcallednodeinlookbehind...

mysql-server:fuzz_real_query: Crash in net_field_length_size

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=5639359625953280 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzrealquery Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

php:php-fuzz-mbstring: Heap-use-after-free in quantifiers_memory_node_info

Detailed Report: https://oss-fuzz.com/testcase?key=5672130576646144 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf5239f80 Crash State: quantifiersmemorynodeinfo...

php:php-fuzz-mbstring: Heap-use-after-free in optimize_nodes

Detailed Report: https://oss-fuzz.com/testcase?key=5688240959127552 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf52376a0 Crash State: optimizenodes optimizenodes...

fzu.cz Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1072765 Security Researcher MrRain1996 Helped patch 962 vulnerabilities Received 4 Coordinated Disclosure badges Received 9 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting fzu.cz website and its...

php:php-fuzz-mbstring: Heap-use-after-free in node_char_len1

Detailed Report: https://oss-fuzz.com/testcase?key=5652366808580096 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-mbstring Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x607001f4ea70 Crash State: nodecharlen1 nodecharlen1...

harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in hb_array_t<OT::IntType<unsigned char, 1u> const> hb_array_t<OT::IntType<unsigned

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5747028458209280 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

cras:rclient_message: Null-dereference READ in audio_thread_start

Detailed Report: https://oss-fuzz.com/testcase?key=5642115451453440 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: rclientmessage Job Type: libfuzzerasancras Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: audiothreadstart crasiodevlistinit...

harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in OT::HintingDevice* hb_serialize_context_t::embed<OT::HintingDevice>

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5206191479455744 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Addres...

poppler:pdf_fuzzer: Use-of-uninitialized-value in BaseCryptStream::BaseCryptStream

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5735911623229440 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

skia:skottie_json: Use-of-uninitialized-value in skottie::RRectAdapter::setRadius

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5645275582693376 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skottiejson Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in fuzz_reader_connect

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5708381956603904 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in sc_hex_dump

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5648402738315264 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

News Wrap: PoC Exploits, Cable Haunt and Joker Malware

This week’s news wrap podcast breaks down the biggest Threatpost security stories of the week, including: Various proof-of-concept exploits being released for serious vulnerabilities this week – including for the recently-patched crypto-spoofing vulnerability found by the National Security Agency...

arrow:arrow-ipc-stream-fuzz: Global-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5661776796712960 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000002b252b8...

wget2:wget_options_fuzzer: Heap-use-after-free in rpl_glob

Project: https://gitlab.com/gnuwget/wget2.git Detailed Report: https://oss-fuzz.com/testcase?key=5639439544221696 Project: wget2 Fuzzing Engine: honggfuzz Fuzz Target: wgetoptionsfuzzer Job Type: honggfuzzasanwget2 Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address:...

ndpi:fuzz_ndpi_reader: Heap-use-after-free in ndpi_workflow_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5074519341662208 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireader Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x612001eabd00 Crash State:...