OSV-2024-1332 Negative-size-param in extract_mr_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379768247 Crash type: Negative-size-param Crash state: extractmrdata parsemrstring readstatparsesav...

PT-2024-35737

Name of the Vulnerable Software and Affected Versions Open62541 version 1.4.6 Description The issue is related to an assertion failure in the fuzz binary decode function, which can cause a crash. Recommendations For Open62541 version 1.4.6, consider disabling the fuzz binary decode function as a...

Open62541 安全漏洞

Open62541 is an open source implementation of OPC UA OPC Unified Architecture by Open62541 Open Source. A security vulnerability exists in Open62541 version 1.4.6, which stems from an assertion failure in fuzzbinarydecode that causes a crash...

CVE-2024-53429

Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in zoom_search_again

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6411333660114944 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x5040001835f4...

OSV-2024-1326 Heap-buffer-overflow in ndpi_search_mikrotik

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180960 Crash type: Heap-buffer-overflow READ 16 Crash state: ndpisearchmikrotik checkndpidetectionfunc ndpidetectionprocesspacket...

OSV-2024-1322 Security exception in com.alibaba.fastjson2.JSONReader.readObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180973 Crash type: Security exception Crash state: com.alibaba.fastjson2.JSONReader.readObject java.base/java.nio.charset.CharsetEncoder.replaceWith java.base/java.nio.charset.CharsetEncoder...

tinyusb:net: Crash in net

Detailed Report: https://oss-fuzz.com/testcase?key=4767718827425792 Project: tinyusb Fuzzing Engine: libFuzzer Fuzz Target: net Job Type: libfuzzerasantinyusb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000ae432120 Crash State: net Sanitizer: address ASAN Recommended Security...

OSV-2024-1320 Heap-buffer-overflow in process_page_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379254072 Crash type: Heap-buffer-overflow READ 4 Crash state: processpage FLACoggdecoderaspectskiplink FLACstreamdecoderseekabsolute...

OSV-2024-1313 Security exception in org.apache.commons.codec.language.bm.Rule$Phoneme.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379008019 Crash type: Security exception Crash state: org.apache.commons.codec.language.bm.Rule$Phoneme. org.apache.commons.codec.language.bm.Rule$Phoneme. org.apache.commons.codec.language.bm.PhoneticEngine$PhonemeBuilder.app...

PT-2024-40630 · Git +1 · Libjpeg-Turbo

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value" as reported by OSS-Fuzz. The crash occurs in the decompress yuv.cc file. No...

jsoncons:fuzz_json_encoder: Heap-buffer-overflow in jsoncons::basic_json_parser<char, std::__1::allocator<char>>::skip_space

Project: https://github.com/danielaparker/jsoncons.git Detailed Report: https://oss-fuzz.com/testcase?key=6366501096980480 Project: jsoncons Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsonencoder Job Type: libfuzzerasanjsoncons Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libjpeg-turbo:decompress_yuv_fuzzer_3_0_x: Use-of-uninitialized-value in decompress_yuv.cc

Detailed Report: https://oss-fuzz.com/testcase?key=4945172636434432 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: decompressyuvfuzzer30x Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: decompressyuv.cc...

tinyusb:msc: Crash in msc

Project: https://github.com/hathach/tinyusb.git Detailed Report: https://oss-fuzz.com/testcase?key=4587932222029824 Project: tinyusb Fuzzing Engine: libFuzzer Fuzz Target: msc Job Type: libfuzzerasantinyusb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State:...

imagemagick:encoder_mvg_fuzzer: Use-of-uninitialized-value in TracePath

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6033501545103360 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

file:magic_fuzzer_fd: Stack-buffer-overflow in dophn_exec

Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=6501920811843584 Project: file Fuzzing Engine: afl Fuzz Target: magicfuzzerfd Job Type: aflasanfile Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7a6e8ae4c300 Crash State:...

OSV-2024-1297 Heap-buffer-overflow in rijndaelSetupEncrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=377977949 Crash type: Heap-buffer-overflow READ 1 Crash state: rijndaelSetupEncrypt rijndaelSetupDecrypt AESPDFnative::AESPDFnative...

OSV-2024-1293 Use-of-uninitialized-value in k5_hashtab_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=377530685 Crash type: Use-of-uninitialized-value Crash state: k5hashtabadd insertentry fuzzkdc.c...

qpdf:future_qpdf_crypt_insecure_fuzzer: Heap-buffer-overflow in rijndaelSetupEncrypt

Project: https://github.com/qpdf/qpdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5970853830918144 Project: qpdf Fuzzing Engine: libFuzzer Fuzz Target: futureqpdfcryptinsecurefuzzer Job Type: libfuzzerasanqpdf Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_VC1_fuzzer: Segv on unknown address in ff_refstruct_unref

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4504434689769472 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVC1fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...