libreoffice:fodtfuzzer: Bad-cast to SwDrawFrameFormat from SwFlyFrameFormat in SwContact::GetFormat

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4853648008478720 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: fodtfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address:...

libreoffice:fodtfuzzer: Heap-use-after-free in SwContentIndex::Remove

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5626902753116160 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: fodtfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

libreoffice:fodtfuzzer: Heap-use-after-free in SwContentIndex::Remove

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6551415296688128 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: fodtfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

libreoffice:fodtfuzzer: Bad-cast to SwXMLImport from SvXMLImport in XMLRedlineImportHelper::~XMLRedlineImportHelper

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5207260989358080 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: fodtfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address:...

libreoffice:fodtfuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6703039424102400 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: fodtfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000026618000 Crash State: NULL Sanitizer: undefined UBSAN...

libreoffice:fodtfuzzer: Negative-size-param in void rtl::str::newReplaceStrAt<_rtl_uString, char16_t>

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6219861508882432 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: fodtfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Negative-size-param Crash Address:...

libreoffice:fodtfuzzer: Heap-use-after-free in std::__1::unique_ptr<sw::DocumentDrawModelManager, std::__1::default_delete<sw::

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6627468395020288 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: fodtfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

libreoffice:fodtfuzzer: Heap-buffer-overflow in std::__1::unique_ptr<SwXMLTableRow_Impl, std::__1::default_delete<SwXMLTableRow_

Detailed Report: https://oss-fuzz.com/testcase?key=5196181338324992 Project: libreoffice Fuzzing Engine: afl Fuzz Target: fodtfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6020001c6da0 Crash State: std::1::uniqueptrSwXMLTableRowImp...

libreoffice:fodtfuzzer: Container-overflow in std::__1::unique_ptr<SwXMLTableRow_Impl, std::__1::default_delete<SwXMLTableRow_

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5766728887566336 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: fodtfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow READ 8 Crash...

libreoffice:fodtfuzzer: Segv on unknown address in com::sun::star::uno::BaseReference::iquery

Detailed Report: https://oss-fuzz.com/testcase?key=5128563175718912 Project: libreoffice Fuzzing Engine: afl Fuzz Target: fodtfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: com::sun::star::uno::BaseReference::iquery...