ffmpeg:ffmpeg_BSF_TRACE_HEADERS_fuzzer: Heap-buffer-overflow in cbs_jpeg_split_fragment

Detailed Report: https://oss-fuzz.com/testcase?key=5129591506337792 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegBSFTRACEHEADERSfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60b000000158 Crash State:...

Design/Logic Flaw

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', reflective DLL, vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20, Modicon M580 all...

binutils:fuzz_disassemble: Use-of-uninitialized-value in bfd_h8_disassemble

Detailed Report: https://oss-fuzz.com/testcase?key=5715811911335936 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bfdh8disassemble fuzzdisassemble.c...

libavif:avif_decode_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5645512985542656 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: avifdecodefuzzer Job Type: libfuzzerasanlibavif Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN...

pcre2:pcre2_fuzzer: Heap-buffer-overflow in set_table_bit

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed Report: https://oss-fuzz.com/testcase?key=5082586231865344 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61100000043b...

GHSA-CMCX-XHR8-3W9P Denial of Service in uap-core when processing crafted User-Agent strings

Impact Some regexes are vulnerable to regular expression denial of service REDoS due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to maliciously crafted long strings. Patches Please update uap-core to gt;=...

ndpi:fuzz_ndpi_reader: Crash in get_ndpi_flow_info6

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5742320670736384 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzzndpireader Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x60400000fffb Crash State:...

php:php-fuzz-mbstring: Heap-use-after-free in quantifiers_memory_node_info

Detailed Report: https://oss-fuzz.com/testcase?key=5672130576646144 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf5239f80 Crash State: quantifiersmemorynodeinfo...

php:php-fuzz-mbstring: Heap-use-after-free in optimize_nodes

Detailed Report: https://oss-fuzz.com/testcase?key=5688240959127552 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf52376a0 Crash State: optimizenodes optimizenodes...

open62541:fuzz_json_decode: Use-of-uninitialized-value in jumpOverRec

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5769092627955712 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

llvm:clang-fuzzer: Segv on unknown address in clang::LookupResult::sanity

Detailed Report: https://oss-fuzz.com/testcase?key=4872329519955968 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::LookupResult::sanity...

llvm:clang-fuzzer: Segv on unknown address in clang::Parser::tryParseCXXIdExpression

Detailed Report: https://oss-fuzz.com/testcase?key=5730465248182272 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Parser::tryParseCXXIdExpression...

llvm:clang-fuzzer: Segv on unknown address in clang::Decl::AccessDeclContextSanity

Detailed Report: https://oss-fuzz.com/testcase?key=5644750535524352 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Decl::AccessDeclContextSanity LookupDirect...

libheif:file-fuzzer: Crash in slice_segment_header::operator=

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5742814906548224 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasani386libheif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xbebebebe Crash...

yara:rules_fuzzer: Heap-double-free in yara_yyparse

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5123250044796928 Project: yara Fuzzing Engine: afl Fuzz Target: rulesfuzzer Job Type: aflasanyara Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x6120012ffd00 Crash State: yarayypar...

libheif:file-fuzzer: Heap-use-after-free in void apply_sao_internal<unsigned short>

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5649801827319808 Project: libheif Fuzzing Engine: afl Fuzz Target: file-fuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x613000010a7d Cra...

matio:matio_fuzzer: Heap-buffer-overflow in H5O_fill_new_shared_decode

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5672244609286144 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61500004fac8 Crash State:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_v1_get_attribute_len

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6319339464818688 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

llvm:clang-objc-fuzzer: Heap-use-after-free in clang::TokenLexer::Lex

Detailed Report: https://oss-fuzz.com/testcase?key=5647561683107840 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address: 0x634000002840 Crash State: clang::TokenLexer::Lex...

openh264:decoder_fuzzer: Heap-use-after-free in WelsDec::SetUnRef

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5674612192444416 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free WRITE 1 Crash Address:...