ndpi:fuzz_process_packet: Heap-buffer-overflow in get16

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5130030848147456 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60400000010d...

arrow:parquet-arrow-fuzz: Crash in arrow::internal::unpack32

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5110081396146176 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fff1f4fc85c Crash...

htslib:hts_open_fuzzer: Heap-buffer-overflow in hts_md5_update

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5082614308536320 Project: htslib Fuzzing Engine: honggfuzz Fuzz Target: htsopenfuzzer Job Type: honggfuzzasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

arrow:parquet-arrow-fuzz: Heap-use-after-free in int arrow::BitUtil::BitReader::GetBatch<short>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5700669229236224 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-use-after-free WRITE 2 Crash Address: 0x62500027623a Crash...

arrow:parquet-arrow-fuzz: Negative-size-param in parquet::PlainByteArrayDecoder::DecodeArrowDense

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5685456455073792 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_DST_fuzzer: Heap-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5735812071424000 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDDSTfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000002000...

mysql-server:fuzz_real_query: Memcpy-param-overlap in read_ok_ex

Detailed Report: https://oss-fuzz.com/testcase?key=6322724899389440 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzrealquery Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x7ff545cea848,0x2037ff447d7aa51 and 0x625000059913...

libvips:pngsave_buffer_fuzzer: Crash in vips_foreign_load_gif_render

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5640307544948736 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: pngsavebufferfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x60d0002e9060...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in sc_pkcs15emu_gemsafeGPK_init

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5682366024777728 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address:...

binutils:fuzz_disassemble: Stack-buffer-overflow in objdump_sprintf

Detailed Report: https://oss-fuzz.com/testcase?key=5648977540415488 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fff90210240 Crash State: objdumpsprintf prt...

binutils:fuzz_disassemble: Stack-buffer-overflow in objdump_sprintf

Detailed Report: https://oss-fuzz.com/testcase?key=5073917066870784 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7ffd30c9ffa5 Crash State: objdumpsprintf...

binutils:fuzz_disassemble: Stack-buffer-overflow in objdump_sprintf

Detailed Report: https://oss-fuzz.com/testcase?key=5663200928595968 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7ffce0fe8ba2 Crash State: objdumpsprintf...

imagemagick:encoder_ttf_fuzzer: Heap-buffer-overflow in RenderFreetype

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5736942228733952 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderttffuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

skia:api_raster_n32_canvas: Use-of-uninitialized-value in float const& std::__1::min<float, std::__1::__less<float, float> >

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5136613510479872 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

qt:setMarkdown: Heap-buffer-overflow in md_process_table_row

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5685425572413440 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: setMarkdown Job Type: libfuzzerasanqt Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000006b0 Crash State:...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::internal::CountSetBits

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5651311318269952 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

systemd-machined Incorrect Reference Decrement

systemd: systemd-machined decrements reference count when references still held I've been looking at the version of systemd shipped in Fedora 31 approximately ef677436aa203c24816021dd698b57f219f0ff64 I noticed that systemd-machined caches image objects, and uses reference counting to keep track o...

ffmpeg:ffmpeg_AV_CODEC_ID_MVDV_fuzzer: Heap-use-after-free in decode_mvdv

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5681452423577600 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMVDVfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6190000d4e90...

jbig2dec:jbig2_fuzzer: Use-of-uninitialized-value in jbig2_arith_decode

Project: git://git.ghostscript.com/jbig2dec.git Detailed Report: https://oss-fuzz.com/testcase?key=5658335175245824 Project: jbig2dec Fuzzing Engine: libFuzzer Fuzz Target: jbig2fuzzer Job Type: libfuzzermsanjbig2dec Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

grpc:ssl_server_fuzzer: Heap-buffer-overflow in grpc_core::HandshakerArgs::HandshakerArgs

Detailed Report: https://oss-fuzz.com/testcase?key=6217576676065280 Project: grpc Fuzzing Engine: afl Fuzz Target: sslserverfuzzer Job Type: aflasangrpc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x615000000268 Crash State: grpccore::HandshakerArgs::HandshakerArgs...