envoy:h1_capture_persistent_fuzz_test: Crash in Envoy::IntegrationTestServerImpl::~IntegrationTestServerImpl

Detailed Report: https://oss-fuzz.com/testcase?key=6320245042708480 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: h1capturepersistentfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f1906a74de0 Crash State:...

libreoffice:lwpfuzzer: Segv on unknown address in LwpDrawTextArt::~LwpDrawTextArt

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5813135838150656 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: lwpfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Segv on unknown address Crash Address...

libjxl:djxl_fuzzer: Crash in std::__1::__vector_base<jxl::Image3<float>, std::__1::allocator<jxl::Image3<floa

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5382562858532864 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerubsanlibjxl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00474700534b Crash State:...

CVE-2021-40418

When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the...

CVE-2021-40418

When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the...

Design/Logic Flaw

When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the...

pcl:ply_reader_fuzzer: Bad-cast to std::__function::__base<void (int)>std::__1::__function::__value_func<void in pcl::io::ply::ply_parser::scalar_property<int>::~scalar_property

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=5110833374429184 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffe49cc6460 Crash...

libreoffice:htmlfuzzer: Heap-use-after-free in HTMLTable::~HTMLTable

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5734539566120960 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: htmlfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

pcl:ply_reader_fuzzer: Crash in __dynamic_cast

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=6005752884494336 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x001200000418 Crash...

gdal:gdal_filesystem_fuzzer: Heap-use-after-free in GDALRasterBand::~GDALRasterBand

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5194612591951872 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

CVE-2021-39559

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function GString::GString located in GString.cc. It allows an attacker to cause Denial of Service...

CVE-2021-39539

An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function node::BDCNode::BDCNode located in bdcnode.cpp. It allows an attacker to cause Denial of Service...

Pdftools 代码问题漏洞

PDFTools is a tool for converting PDF files to ePUB format. node::BDCNode::BDCNode function in bdcnode.cpp in PDFTools 20200714 and earlier versions is vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service...

muduo:muduo_http_fuzzer: Use-of-uninitialized-value in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::c

Project: https://github.com/chenshuo/muduo.git Detailed Report: https://oss-fuzz.com/testcase?key=5976075218321408 Project: muduo Fuzzing Engine: libFuzzer Fuzz Target: muduohttpfuzzer Job Type: libfuzzermsanmuduo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash Stat...

guetzli:guetzli_fuzzer: Use-of-uninitialized-value in guetzli::JPEGData::~JPEGData

Project: https://github.com/google/guetzli.git Detailed Report: https://oss-fuzz.com/testcase?key=5125356793757696 Project: guetzli Fuzzing Engine: libFuzzer Fuzz Target: guetzlifuzzer Job Type: libfuzzermsanguetzli Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ots:ots-fuzzer: Use-of-uninitialized-value in std::__1::__vector_base<ots::NameRecord, std::__1::allocator<ots::NameRecord> >:

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=4827757436076032 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzermsanots Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

flac:fuzzer_exo: Use-of-uninitialized-value in FLACParser::~FLACParser

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=4781915262025728 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerexo Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

PT-2021-27776

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurs due to a bad-cast to SplashPattern from an invalid vptr. This issue is related to the SplashState destructor and the restoreState function i...

ROS-2-1224

2.1224 Vulnerability in firefox browser CVE-2020-6819 and CVE-2020-6820 1. Vulnerability description: Two critical vulnerabilities have been discovered that could lead to the execution of attacker code when processing specially formatted content. It is warned that facts of using these...

Double free in crossbeam

Even if an element is popped from a queue, crossbeam would run its destructor inside the epoch-based garbage collector. This is a source of double frees. The flaw was corrected by wrapping elements inside queues in a ManuallyDrop...