libredwg:llvmfuzz: Index-out-of-bounds in dwg_decode_eed

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4596835821355008 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerubsanlibredwg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

jackson-dataformat-xml:XmlFuzzer: Security exception in com.sun.xml.stream.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next

Project: https://github.com/FasterXML/jackson-dataformat-xml.git Detailed Report: https://oss-fuzz.com/testcase?key=6019483944157184 Project: jackson-dataformat-xml Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanjackson-dataformat-xml Platform Id: linux Crash Type: Securi...

llvm:llvm-isel-fuzzer--aarch64-O2: Heap-buffer-overflow in llvm::AArch64_ELFTargetObjectFile::emitPersonalityValueImpl

Detailed Report: https://oss-fuzz.com/testcase?key=5649153771765760 Project: llvm Fuzzing Engine: honggfuzz Fuzz Target: llvm-isel-fuzzer--aarch64-O2 Job Type: honggfuzzasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x512000071b48 Crash State:...

ffmpeg:ffmpeg_dem_MLV_fuzzer: Use-of-uninitialized-value in scan_file

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4696002884337664 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemMLVfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libdwarf:fuzz_globals: Heap-buffer-overflow in dwarf_dnames_header

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=4515360770228224 Project: libdwarf Fuzzing Engine: honggfuzz Fuzz Target: fuzzglobals Job Type: honggfuzzasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2024-1356 Heap-buffer-overflow in ChunkAssignData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382816119 Crash type: Heap-buffer-overflow READ 1 Crash state: ChunkAssignData WebPMuxCreateInternal MuxDemuxApiTest...

OSV-2024-1355 UNKNOWN READ in glslang::TInfoSinkBase::location

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382922237 Crash type: UNKNOWN READ Crash state: glslang::TInfoSinkBase::location glslang::TParseContextBase::outputMessage glslang::TParseContextBase::error...

OSV-2024-1351 Use-of-uninitialized-value in Archive::UnexpEndArcMsg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382526743 Crash type: Use-of-uninitialized-value Crash state: Archive::UnexpEndArcMsg Archive::ReadHeader50 Archive::ReadHeader...

OSV-2024-1348 Heap-buffer-overflow in glslang::HlslGrammar::acceptDeclaration

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382721848 Crash type: Heap-buffer-overflow READ 1 Crash state: glslang::HlslGrammar::acceptDeclaration glslang::HlslGrammar::acceptCompilationUnit glslang::HlslParseContext::parseShaderStrings...

OSV-2024-1346 UNKNOWN READ in glslang::HlslTokenStream::advanceToken

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382547706 Crash type: UNKNOWN READ Crash state: glslang::HlslTokenStream::advanceToken glslang::HlslGrammar::acceptLiteral glslang::HlslGrammar::acceptPostfixExpression...

tinyusb:msc: Segv on unknown address in std::__Fuzzer::basic_filebuf<char, std::__Fuzzer::char_traits<char>>::open

Detailed Report: https://oss-fuzz.com/testcase?key=4833597481091072 Project: tinyusb Fuzzing Engine: libFuzzer Fuzz Target: msc Job Type: libfuzzerasantinyusb Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: std::Fuzzer::basicfilebuf::open Sanitizer: address ASAN...

itext7:PdfFuzzer: Security exception in com.itextpdf.kernel.pdf.PdfReader.readStreamBytesRaw

Detailed Report: https://oss-fuzz.com/testcase?key=5253687070490624 Project: itext7 Fuzzing Engine: libFuzzer Fuzz Target: PdfFuzzer Job Type: libfuzzerasanitext7 Platform Id: linux Crash Type: Security exception Crash Address: Crash State: com.itextpdf.kernel.pdf.PdfReader.readStreamBytesRaw...

bluez:fuzz_xml: Null-dereference READ in ubsan_GetStackTrace

Project: https://github.com/bluez/bluez.git Detailed Report: https://oss-fuzz.com/testcase?key=6588543901696000 Project: bluez Fuzzing Engine: libFuzzer Fuzz Target: fuzzxml Job Type: libfuzzerubsanbluez Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash Stat...

unrar:unrar_fuzzer: Use-of-uninitialized-value in Archive::UnexpEndArcMsg

Detailed Report: https://oss-fuzz.com/testcase?key=5182531311304704 Project: unrar Fuzzing Engine: libFuzzer Fuzz Target: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Archive::UnexpEndArcMsg Archive::ReadHeader50...

serenity:FuzzRegexECMA262: Stack-use-after-return in regex::Regex<regex::ECMA262Parser>::attempt_rewrite_loops_as_atomic_groups

Detailed Report: https://oss-fuzz.com/testcase?key=4988904706473984 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzRegexECMA262 Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address: 0x79af23f04758 Crash State:...

OSV-2024-1336 Security exception in org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategories

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=380409697 Crash type: Security exception Crash state: org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategories UtilCheckerFuzzer.fuzzChecker UtilCheckerFuzzer.fuzzerTestOneInput...

envoy:evaluator_fuzz_test: Use-after-poison in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5620971127504896 Project: envoy Fuzzing Engine: honggfuzz Fuzz Target: evaluatorfuzztest Job Type: honggfuzzasanenvoy Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address:...

DEBIAN-CVE-2024-53429

Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...

UBUNTU-CVE-2024-53429

Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...

Google's AI-Powered OSS-Fuzz Tool Finds 26 Vulnerabilities in Open-Source Projects

Google has revealed that its AI-powered fuzzing tool, OSS-Fuzz, has been used to help identify 26 vulnerabilities in various open-source code repositories, including a medium-severity flaw in the OpenSSL cryptographic library. "These particular vulnerabilities represent a milestone for automated...