opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in sc_hex_dump

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5648402738315264 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

News Wrap: PoC Exploits, Cable Haunt and Joker Malware

This week’s news wrap podcast breaks down the biggest Threatpost security stories of the week, including: Various proof-of-concept exploits being released for serious vulnerabilities this week – including for the recently-patched crypto-spoofing vulnerability found by the National Security Agency...

arrow:arrow-ipc-stream-fuzz: Global-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5661776796712960 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000002b252b8...

wget2:wget_options_fuzzer: Heap-use-after-free in rpl_glob

Project: https://gitlab.com/gnuwget/wget2.git Detailed Report: https://oss-fuzz.com/testcase?key=5639439544221696 Project: wget2 Fuzzing Engine: honggfuzz Fuzz Target: wgetoptionsfuzzer Job Type: honggfuzzasanwget2 Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address:...

ndpi:fuzz_ndpi_reader: Heap-use-after-free in ndpi_workflow_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5074519341662208 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireader Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x612001eabd00 Crash State:...

cras:rclient_message: Heap-buffer-overflow in surround51_to_stereo_downmix_mtx

Detailed Report: https://oss-fuzz.com/testcase?key=4859293161750528 Project: cras Fuzzing Engine: honggfuzz Fuzz Target: rclientmessage Job Type: honggfuzzasancras Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x6030000018f0 Crash State: surround51tostereodownmixmtx...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in get_ndpi_flow_info

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5746418505744384 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6060001f46fb...

unicorn:fuzz_emu_arm_thumb: Crash in _fini

Detailed Report: https://oss-fuzz.com/testcase?key=5715446171172864 Project: unicorn Fuzzing Engine: honggfuzz Fuzz Target: fuzzemuarmthumb Job Type: honggfuzzasanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000025522f0 Crash State: fini Sanitizer: address ASAN Recommende...

arrow:arrow-ipc-stream-fuzz: Crash in arrow::ipc::internal::FieldFromFlatbuffer

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5712457209479168 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61e100356534 Crash State:...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4813040122068992 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

open62541:fuzz_json_decode: Use-of-uninitialized-value in jumpOverRec

Detailed Report: https://oss-fuzz.com/testcase?key=5769092627955712 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jumpOverRec jumpOverRec jumpOverRec...

kimageformats:kimgio_xcf_fuzzer: Use-of-uninitialized-value in comp_func_SourceOver_rgb64_avx2

Detailed Report: https://oss-fuzz.com/testcase?key=5725090734145536 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: compfuncSourceOverrgb64avx2...

imagemagick:encoder_mvg_fuzzer: Heap-buffer-overflow in TraceStrokePolygon

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5184219282407424 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8...

open62541:fuzz_json_decode: Heap-use-after-free in LocalizedText_clear

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5733705184444416 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address...

ffmpeg:ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer: Index-out-of-bounds in revert_acfilter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5691776237305856 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWMALOSSLESSfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

graphicsmagick:enhance_fuzzer: Heap-buffer-overflow in InsertRow

Detailed Report: https://oss-fuzz.com/testcase?key=5758629114544128 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x7f3759afae04 Crash State: InsertRow...

libreoffice:ww8fuzzer: Heap-use-after-free in SvxMSDffImportData::NotifyFreeObj

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5662761686401024 Project: libreoffice Fuzzing Engine: afl Fuzz Target: ww8fuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address:...

binutils:fuzz_disassemble: Stack-buffer-overflow in buffer_read_memory

Detailed Report: https://oss-fuzz.com/testcase?key=5720058865385472 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7fff2240d888 Crash State: bufferreadmemory fetchdata...

graphicsmagick:coder_PICT_fuzzer: Heap-buffer-overflow in DecodeImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5649205997862912 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPICTfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ...

unicorn:fuzz_emu_arm_armbe: Crash in helper_uc_tracecode

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5737813991751680 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarmarmbe Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000012...