JSC YarrJIT initParenContextFreeList Byte Overwrite

JSC: YarrJIT: A bug in initParenContextFreeList void initParenContextFreeList RegisterID parenContextPointer = regT0; RegisterID nextParenContextPointer = regT2; sizet parenContextSize = ParenContext::sizeFormparenContextSizes; parenContextSize = WTF::roundUpToMultipleOfparenContextSize; // Check...

libspng/spng_read_fuzzer: Heap-use-after-free in read_chunks_after_idat

Project: https://gitlab.com/randy408/libspng.git https://github.com/randy408/libspng.git Detailed report: https://oss-fuzz.com/testcase?key=5170676362641408 Project: libspng Fuzzer: afllibspngspngreadfuzzer Fuzz target binary: spngreadfuzzer Job Type: aflasanlibspng Platform Id: linux Crash Type:...

mpg123/decode_fuzzer: Heap-buffer-overflow in INT123_parse_new_id3

Detailed report: https://oss-fuzz.com/testcase?key=5206162119589888 Project: mpg123 Fuzzer: aflvorbisdecodefuzzer Fuzz target binary: decodefuzzer Job Type: aflasanmpg123 Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6030000000e1 Crash State: INT123parsenewid3...

mpg123/decode_fuzzer: Use-of-uninitialized-value in INT123_parse_new_id3

Detailed report: https://oss-fuzz.com/testcase?key=5124907546968064 Project: mpg123 Fuzzer: libFuzzermpg123decodefuzzer Fuzz target binary: decodefuzzer Job Type: libfuzzermsanmpg123 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: INT123parsenewid3 handleid3v...

qpdf/dct_fuzzer: Use-of-uninitialized-value in ycck_cmyk_convert

Project: https://github.com/qpdf/qpdf.git Detailed report: https://oss-fuzz.com/testcase?key=5632990870241280 Project: qpdf Fuzzer: libFuzzerqpdfdctfuzzer Fuzz target binary: dctfuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...

mpg123/decode_fuzzer: Heap-buffer-overflow in INT123_parse_new_id3

Detailed report: https://oss-fuzz.com/testcase?key=5081170552815616 Project: mpg123 Fuzzer: aflmpg123decodefuzzer Fuzz target binary: decodefuzzer Job Type: aflasanmpg123 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000000c0 Crash State: INT123parsenewid3...

openthread/ncp-uart-received-fuzzer: Stack-buffer-overflow in ot::NetworkData::Leader::IsStableUpdated

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5630599882080256 Project: openthread Fuzzer: libFuzzeropenthreadncp-uart-received-fuzzer Fuzz target binary: ncp-uart-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash...

jsonnet/convert_jsonnet_fuzzer: Heap-use-after-free in Interpreter::evaluate

Detailed report: https://oss-fuzz.com/testcase?key=5191777033650176 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzerasanjsonnet Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x62d00000bc20 Crash...

imagemagick/ping_ept2_fuzzer: Stack-buffer-overflow in GetNextUTFCode

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5695814195740672 Project: imagemagick Fuzzer: libFuzzerimagemagickpingept2fuzzer Fuzz target binary: pingept2fuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

clamav/clamav_scanfile_fuzzer: Stack-buffer-overflow in real_scansis

Detailed report: https://oss-fuzz.com/testcase?key=5632043662180352 Project: clamav Fuzzer: libFuzzerclamavscanfilefuzzer Fuzz target binary: clamavscanfilefuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7fd238ca9890 Crash State:...

lz4/compress_fuzzer: Heap-buffer-overflow in LZ4_write32

Project: https://github.com/lz4/lz4.git Detailed report: https://oss-fuzz.com/testcase?key=5726918013353984 Project: lz4 Fuzzer: afllz4compressfuzzer Fuzz target binary: compressfuzzer Job Type: aflasanlz4 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x61c00000075b...

ffmpeg/ffmpeg_AV_CODEC_ID_VQA_fuzzer: Heap-buffer-overflow in vqa_decode_chunk

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5657368257363968 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDVQAfuzzer Fuzz target binary: ffmpegAVCODECIDVQAfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

imagemagick/encoder_bmp_fuzzer: Use-of-uninitialized-value in cmsMLUgetASCII

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5742789528125440 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderbmpfuzzer Fuzz target binary: encoderbmpfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

libxslt/xslt: Use-of-uninitialized-value in xmlOutputBufferWriteEscape

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed report: https://oss-fuzz.com/testcase?key=5768945878958080 Project: libxslt Fuzzer: libFuzzerlibxsltxslt Fuzz target binary: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libsass/data_context_fuzzer: Crash in Sass::Parser::parseCompoundSelector

Project: https://github.com/sass/libsass.git Detailed report: https://oss-fuzz.com/testcase?key=5717181783867392 Project: libsass Fuzzer: libFuzzerlibsassdatacontextfuzzer Fuzz target binary: datacontextfuzzer Job Type: libfuzzermsanlibsass Platform Id: linux Crash Type: UNKNOWN READ Crash Addres...

libsass/data_context_fuzzer: Bad-cast to Sass::PreValue from Sass::Unary_Expression in Sass::SharedImpl<Sass::PreValue>::SharedImpl<Sass::Expression>

Detailed report: https://oss-fuzz.com/testcase?key=5636165890211840 Project: libsass Fuzzer: libFuzzerdatacontextfuzzer Fuzz target binary: datacontextfuzzer Job Type: libfuzzerubsanlibsass Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000031e1f40 Crash State: Bad-cast to Sass::PreVal...

jsonnet/convert_jsonnet_fuzzer: Heap-use-after-free in Interpreter::evaluate

Detailed report: https://oss-fuzz.com/testcase?key=5651117746159616 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzerasanjsonnet Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6210000128d0 Crash...

freeimage/load_from_memory_fuzzer: Global-buffer-overflow in LibRaw::parse_makernote

Detailed report: https://oss-fuzz.com/testcase?key=5116280533680128 Project: freeimage Fuzzer: libFuzzerfreeimageloadfrommemoryfuzzer Fuzz target binary: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000f331f...

freeimage/load_from_memory_fuzzer: Heap-buffer-overflow in LoadPixelDataRLE4

Detailed report: https://oss-fuzz.com/testcase?key=5116007367049216 Project: freeimage Fuzzer: aflloadfrommemoryfuzzer Fuzz target binary: loadfrommemoryfuzzer Job Type: aflasanfreeimage Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7f0ea94779b0 Crash State:...

jsonnet/convert_jsonnet_fuzzer: Crash in Interpreter::evaluate

Project: https://github.com/google/jsonnet.git Detailed report: https://oss-fuzz.com/testcase?key=5706027058593792 Project: jsonnet Fuzzer: libFuzzerjsonnetconvertjsonnetfuzzer Fuzz target binary: convertjsonnetfuzzer Job Type: libfuzzerubsanjsonnet Platform Id: linux Crash Type: UNKNOWN READ Cra...