gdal:mitab_mif_fuzzer: Heap-buffer-overflow in DGNFreeElement

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5076592979607552 Project: gdal Fuzzing engine: libFuzzer Fuzz target: mitabmiffuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0xf4f03080...

gdal:cad_fuzzer: Crash in CADBuffer::Read2B

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5724503157506048 Project: gdal Fuzzing engine: libFuzzer Fuzz target: cadfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x1520c46d Crash State:...

gdal:cad_fuzzer: Crash in CADBuffer::Read2B

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5725897545482240 Project: gdal Fuzzing engine: libFuzzer Fuzz target: cadfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x154fdc99 Crash State:...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parse_makernote_ADDRESS

Detailed report: https://oss-fuzz.com/testcase?key=5632907177099264 Project: imagemagick Fuzzing engine: libFuzzer Fuzz target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::parsemakernoteADDRESS...

aspell:aspell_fuzzer: Crash in acommon::DecodeDirect<unsigned short>::decode

Project: https://github.com/gnuaspell/aspell.git Detailed report: https://oss-fuzz.com/testcase?key=5673813550825472 Project: aspell Fuzzing engine: libFuzzer Fuzz target: aspellfuzzer Job Type: libfuzzerubsanaspell Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000001cbb000 Crash...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in strncpy

Detailed report: https://oss-fuzz.com/testcase?key=5161928611069952 Project: freeimage Fuzzing engine: libFuzzer Fuzz target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f6e95821530 Crash State: strncpy...

ffmpeg:ffmpeg_AV_CODEC_ID_QDM2_fuzzer: Index-out-of-bounds in qdm2_synthesis_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5679142481166336 Project: ffmpeg Fuzzing engine: libFuzzer Fuzz target: ffmpegAVCODECIDQDM2fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_WMV3IMAGE_fuzzer: Index-out-of-bounds in vc1_decode_ac_coeff

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5672735195267072 Project: ffmpeg Fuzzing engine: libFuzzer Fuzz target: ffmpegAVCODECIDWMV3IMAGEfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cra...

ffmpeg/ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Global-buffer-overflow in dequantize

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5648247961419776 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDATRAC9fuzzer Fuzz target binary: ffmpegAVCODECIDATRAC9fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ ...

ffmpeg/ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer: Memcpy-param-overlap in cmap_read_palette

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5678750575886336 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDIFFILBMfuzzer Fuzz target binary: ffmpegAVCODECIDIFFILBMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Memcpy-param-overlap Crash...

njs/njs_process_script_fuzzer: Use-of-uninitialized-value in njs_utf8_decode

Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5647472382181376 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

aspell/aspell_fuzzer: Heap-buffer-overflow in acommon::DecodeDirect<unsigned short>::decode

Project: https://github.com/gnuaspell/aspell.git Detailed report: https://oss-fuzz.com/testcase?key=5704942551040000 Project: aspell Fuzzer: libFuzzeraspellfuzzer Fuzz target binary: aspellfuzzer Job Type: libfuzzerasanaspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Addres...

libfdk-aac/aacDecoder_DecodeFrame: Stack-buffer-overflow in calcAvgGain

Detailed report: https://oss-fuzz.com/testcase?key=5693677388693504 Project: libfdk-aac Fuzzer: libFuzzerlibfdk-aacaacDecoderDecodeFrame Fuzz target binary: aacDecoderDecodeFrame Job Type: libfuzzerasanlibfdk-aac Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

libtasn1/libtasn1_array2tree_fuzzer: Heap-use-after-free in _asn1_expand_object_id

Project: https://gitlab.com/gnutls/libtasn1.git Detailed report: https://oss-fuzz.com/testcase?key=5740385426472960 Project: libtasn1 Fuzzer: afllibtasn1array2treefuzzer Fuzz target binary: libtasn1array2treefuzzer Job Type: aflasanlibtasn1 Platform Id: linux Crash Type: Heap-use-after-free READ ...

aspell/aspell_fuzzer: Heap-buffer-overflow in acommon::String::assign_only_nonnull

Project: https://github.com/gnuaspell/aspell.git Detailed report: https://oss-fuzz.com/testcase?key=5703575778361344 Project: aspell Fuzzer: libFuzzeraspellfuzzer Fuzz target binary: aspellfuzzer Job Type: libfuzzerasanaspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Crash Addres...

ffmpeg/ffmpeg_AV_CODEC_ID_LIBVORBIS_fuzzer: Heap-buffer-overflow in oggpack_read

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5760920873074688 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBVORBISfuzzer Fuzz target binary: ffmpegAVCODECIDLIBVORBISfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

cryptofuzz/cryptofuzz-openssl: Heap-buffer-overflow in aria_set_encrypt_key

Project: https://github.com/guidovranken/cryptofuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5705515794956288 Project: cryptofuzz Fuzzer: libFuzzercryptofuzzcryptofuzz-openssl Fuzz target binary: cryptofuzz-openssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type:...

aspell/aspell_fuzzer: Heap-buffer-overflow in acommon::find_file

Project: https://github.com/gnuaspell/aspell.git Detailed report: https://oss-fuzz.com/testcase?key=5693958272843776 Project: aspell Fuzzer: aflaspellfuzzer Fuzz target binary: aspellfuzzer Job Type: aflasanaspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

aspell/aspell_fuzzer: Dynamic-stack-buffer-overflow in acommon::unescape

Project: https://github.com/gnuaspell/aspell.git Detailed report: https://oss-fuzz.com/testcase?key=5678055552450560 Project: aspell Fuzzer: aflaspellfuzzer Fuzz target binary: aspellfuzzer Job Type: aflasanaspell Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 1 Crash Address:...

JSC BytecodeGenerator::emitEqualityOpImpl Data Mishandling

JSC: A bug in BytecodeGenerator::emitEqualityOpImpl Related CVE Numbers: CVE-2019-8684. PoC: let a = 1 || typeof 1 === 'string'; Generated bytecode: BPmgTo:0x7ff1965a0000-0x7ff1965a8000, NoneGlobal, 37: 11 instructions 0 wide instructions, 2 instructions with metadata; 225 bytes 188 metadata byte...