binutils:fuzz_disassemble: Segv on unknown address in tic4x_print_register

Detailed Report: https://oss-fuzz.com/testcase?key=5636310975119360 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: tic4xprintregister tic4xprintop printinsntic4x...

samba:fuzz_ndr_spoolss_TYPE_STRUCT: Heap-buffer-overflow in ndr_string_length

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=6250151639515136 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrspoolssTYPESTRUCT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_json_append_string

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5632802355937280 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x625000090900 Cras...

dlplibs:wdbfuzzer: Crash in QuattroParserInternal::State::getColor

Detailed Report: https://oss-fuzz.com/testcase?key=5735536765698048 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: wdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000004c748bc Crash State: QuattroParserInternal::State::getColor...

openthread:radio-receive-done-fuzzer: Stack-buffer-overflow in ot::Message::Write

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5110937602490368 Project: openthread Fuzzing Engine: afl Fuzz Target: radio-receive-done-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 11 Crash...

matio:matio_fuzzer: Segv on unknown address in H5O_chunk_deserialize

Detailed Report: https://oss-fuzz.com/testcase?key=5124816558620672 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: H5Ochunkdeserialize H5Ocachechkload H5Cprotect...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_get_attribute_bytes

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5655953538285568 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

CISA Releases Draft of Binding Operational Directive on Developing a Vulnerability Disclosure Policy

The Cybersecurity and Infrastructure Security Agency CISA has released a draft of Binding Operational Directive BOD 20-01, Develop and Publish a Vulnerability Disclosure Policy. BOD 20-01 will require each federal agency to publish a vulnerability disclosure policy VDP. CISA has posted the draft...

graphicsmagick:coder_MNG_fuzzer: Heap-buffer-overflow in ReadMNGImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6322015271387136 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderMNGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Addres...

libheif:file-fuzzer: Crash in slice_segment_header::operator=

Detailed Report: https://oss-fuzz.com/testcase?key=5742814906548224 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasani386libheif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xbebebebe Crash State: slicesegmentheader::operator=...

libreoffice:wmffuzzer: Global-buffer-overflow in ImplUnicodeToDBCS

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5651822836711424 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash...

opensc:fuzz_pkcs15_reader: Heap-double-free in coolkey_free_private_data

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5630085302583296 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x603000000340 Cra...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_v1_get_attribute_len

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5650704400384000 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

wabt:wasm2wat_fuzzer: Heap-buffer-overflow in wabt::string_view::compare

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=5195494439780352 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wasm2watfuzzer Job Type: libfuzzerasani386wabt Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Crash Address:...

libavc:avc_dec_fuzzer: Heap-buffer-overflow in ih264d_decode_slice_thread

Project: https://android.googlesource.com/platform/external/libavc Detailed Report: https://oss-fuzz.com/testcase?key=5689831887994880 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

freeimage:load_from_memory_fuzzer: Heap-buffer-overflow in _MemoryReadProc

Detailed Report: https://oss-fuzz.com/testcase?key=5639796861173760 Project: freeimage Fuzzing Engine: afl Fuzz Target: loadfrommemoryfuzzer Job Type: aflasanfreeimage Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 11 Crash Address: 0x7f1e0c9be900 Crash State: MemoryReadProc...

opensc:fuzz_pkcs15_reader: Heap-double-free in coolkey_free_private_data

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4895593088679936 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x604000000150 Cra...

libsass:data_context_fuzzer: Bad-cast to Sass::PreValue from Sass::SelectorList in Sass::Eval::operator

Detailed Report: https://oss-fuzz.com/testcase?key=5635227418624000 Project: libsass Fuzzing Engine: libFuzzer Fuzz Target: datacontextfuzzer Job Type: libfuzzerubsanlibsass Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000191b2a0 Crash State: Bad-cast to Sass::PreValue from...

libgit2:patch_parse_fuzzer: Heap-buffer-overflow in git_buf_decode_base85

Project: https://github.com/libgit2/libgit2.git Detailed Report: https://oss-fuzz.com/testcase?key=4789150477975552 Project: libgit2 Fuzzing Engine: libFuzzer Fuzz Target: patchparsefuzzer Job Type: libfuzzerasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in derive_collocated_motion_vectors

Detailed Report: https://oss-fuzz.com/testcase?key=5765356846579712 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: derivecollocatedmotionvectors...