karchive/karchive_fuzzer: Heap-buffer-overflow in KGzipFilter::uncompress_noop

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5658355747520512 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzerasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Addres...

hostap/ap-mgmt-fuzzer: Heap-buffer-overflow in ssid_match

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5206623624101888 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerasanhostap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

hostap/wnm-fuzzer: Heap-buffer-overflow in WPA_GET_LE64

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5179747476176896 Project: hostap Fuzzer: aflhostapwnm-fuzzer Fuzz target binary: wnm-fuzzer Job Type: aflasanhostap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60700000045b...

harfbuzz/hb-subset-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5761434614497280 Project: harfbuzz Fuzzer: aflharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Cra...

mbedtls/fuzz_client: Heap-use-after-free in mbedtls_x509_crt_free

Project: https://github.com/ARMmbed/mbedtls.git https://github.com/catenacyber/mbedtls.git Detailed report: https://oss-fuzz.com/testcase?key=5142637603979264 Project: mbedtls Fuzzer: aflmbedtlsfuzzclient Fuzz target binary: fuzzclient Job Type: aflasanmbedtls Platform Id: linux Crash Type:...

imagemagick/encoder_ptif_fuzzer: Heap-buffer-overflow in PushShortPixel

Detailed report: https://oss-fuzz.com/testcase?key=5722372625137664 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderptiffuzzer Fuzz target binary: encoderptiffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61d000004e84...

XNU Stale Pointer Use-After-Free

XNU: Use-after-free due to stale pointer left by in6pcbdetach Related CVE Numbers: CVE-2019-8605Fixed-2019-May-13. Reproduction Repros on 10.14.3 when run as root. It may need multiple tries to trigger. $ clang -o in6selectsrc in6selectsrc.cc $ while 1; do sudo ./in6selectsrc; done res0: 3 res1: ...

openthread/ncp-uart-received-fuzzer: Stack-buffer-overflow in ot::Ip6::OptionPadN::Init

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5768121945686016 Project: openthread Fuzzer: libFuzzeropenthreadncp-uart-received-fuzzer Fuzz target binary: ncp-uart-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash...

harfbuzz/hb-subset-fuzzer: Use-of-uninitialized-value in OT::AxisValue::sanitize

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5696825891225600 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type:...

sqlite3/ossfuzz: Use-of-uninitialized-value in accessPayload

Detailed report: https://oss-fuzz.com/testcase?key=5638835947438080 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: accessPayload vdbeMemFromBtreeResiz...

radare2/ia_fuzz: Negative-size-param in r_buf_read

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5700334476853248 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash Stat...

openthread/cli-uart-received-fuzzer: Stack-buffer-overflow in ot::Ip6::Address::FromString

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5661048276779008 Project: openthread Fuzzer: libFuzzeropenthreadcli-uart-received-fuzzer Fuzz target binary: cli-uart-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash...

harfbuzz/hb-subset-fuzzer: Stack-use-after-return in bool OT::Coverage::serialize<hb_map_iter_t<hb_map_iter_t<hb_filter_iter_t<OT::Co

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5634197349203968 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type:...

radare2/ia_fuzz: Heap-buffer-overflow in buf_bytes_read

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5679835805908992 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

cryptofuzz/cryptofuzz-libressl: Crash in aesni_encrypt

Detailed report: https://oss-fuzz.com/testcase?key=5638016413990912 Project: cryptofuzz Fuzzer: aflcryptofuzzcryptofuzz-libressl Fuzz target binary: cryptofuzz-libressl Job Type: aflasancryptofuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x613000010000 Crash State: aesniencrypt...

libical/libical_fuzzer: Heap-use-after-free in icalparameter_new_from_value_string

Project: https://github.com/libical/libical.git Detailed report: https://oss-fuzz.com/testcase?key=5753503722504192 Project: libical Fuzzer: libFuzzerlibicalfuzzer Fuzz target binary: libicalfuzzer Job Type: libfuzzerasanlibical Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash...

imagemagick/encoder_ttf_fuzzer: Use-of-uninitialized-value in TT_Process_Simple_Glyph

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5769270614556672 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderttffuzzer Fuzz target binary: encoderttffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

karchive/karchive_fuzzer: Heap-buffer-overflow in KAr::openArchive

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5721807937601536 Project: karchive Fuzzer: aflkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: aflasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

freetype2/ftfuzzer: Crash in TT_Process_Simple_Glyph

Detailed report: https://oss-fuzz.com/testcase?key=5666646934421504 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerubsanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fff00000009 Crash State: TTProcessSimpleGlyph...

radare2/ia_fuzz: Heap-buffer-overflow in r_core_lines_initcache

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5655993335152640 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...