binutils:fuzz_disassemble: Index-out-of-bounds in get_number_of_operands

Detailed Report: https://oss-fuzz.com/testcase?key=5713122702917632 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzerubsanbinutils Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: getnumberofoperands printinsncrx...

binutils:fuzz_bfd: Heap-buffer-overflow in bfd_getb32

Detailed Report: https://oss-fuzz.com/testcase?key=5766948239704064 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzbfd Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000000351 Crash State: bfdgetb32 sombfdcountarsymbols somslurparm...

binutils:fuzz_bfd: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5692369169285120 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzbfd Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60400002a532 Crash State: bfdgetl16 bfdvmsslurpetir vmsslurpdebug...

binutils:fuzz_bfd: Heap-buffer-overflow in xcoff64_slurp_armap

Detailed Report: https://oss-fuzz.com/testcase?key=5127251264012288 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzbfd Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x6210002f7ce0 Crash State: xcoff64slurparmap xcoff64archivep...

envoy:header_map_impl_fuzz_test: Stack-use-after-scope in Envoy::TrieLookupTable<Envoy::Http::HeaderMapImpl::StaticLookupResponse

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5746385563680768 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: headermapimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Stack-use-after-scope READ 1 Crash Address:...

ndpi:fuzz_process_packet: Stack-buffer-overflow in getTLScertificate

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5117057716977664 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 6 Crash Address: 0x7ffd947a7e...

libarchive:libarchive_fuzzer: Heap-use-after-free in copy_string

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=5655329908195328 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash...

samba:fuzz_ndr_nbt_TYPE_STRUCT: Heap-use-after-free in dump_data_cb

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5683675048181760 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrnbtTYPESTRUCT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

binutils:fuzz_disassemble: Segv on unknown address in tic4x_print_register

Detailed Report: https://oss-fuzz.com/testcase?key=5636310975119360 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: tic4xprintregister tic4xprintop printinsntic4x...

samba:fuzz_ndr_spoolss_TYPE_STRUCT: Heap-buffer-overflow in ndr_string_length

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=6250151639515136 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrspoolssTYPESTRUCT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_json_append_string

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5632802355937280 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x625000090900 Cras...

dlplibs:wdbfuzzer: Crash in QuattroParserInternal::State::getColor

Detailed Report: https://oss-fuzz.com/testcase?key=5735536765698048 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: wdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000004c748bc Crash State: QuattroParserInternal::State::getColor...

openthread:radio-receive-done-fuzzer: Stack-buffer-overflow in ot::Message::Write

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5110937602490368 Project: openthread Fuzzing Engine: afl Fuzz Target: radio-receive-done-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 11 Crash...

matio:matio_fuzzer: Segv on unknown address in H5O_chunk_deserialize

Detailed Report: https://oss-fuzz.com/testcase?key=5124816558620672 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: H5Ochunkdeserialize H5Ocachechkload H5Cprotect...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_get_attribute_bytes

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5655953538285568 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

CISA Releases Draft of Binding Operational Directive on Developing a Vulnerability Disclosure Policy

The Cybersecurity and Infrastructure Security Agency CISA has released a draft of Binding Operational Directive BOD 20-01, Develop and Publish a Vulnerability Disclosure Policy. BOD 20-01 will require each federal agency to publish a vulnerability disclosure policy VDP. CISA has posted the draft...

graphicsmagick:coder_MNG_fuzzer: Heap-buffer-overflow in ReadMNGImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6322015271387136 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderMNGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Addres...

libheif:file-fuzzer: Crash in slice_segment_header::operator=

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5742814906548224 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasani386libheif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xbebebebe Crash...

libreoffice:wmffuzzer: Global-buffer-overflow in ImplUnicodeToDBCS

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5651822836711424 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash...

opensc:fuzz_pkcs15_reader: Heap-double-free in coolkey_free_private_data

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5630085302583296 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x603000000340 Cra...