kimageformats:kimgio_jxr_fuzzer: Crash in DecodeSignificantRun

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4881244443181056 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiojxrfuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

htslib:hts_open_fuzzer: Heap-buffer-overflow in cram_encode_container

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6584661238677504 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

espeak-ng:ssml-fuzzer: Global-buffer-overflow in AnnouncePunctuation

Detailed Report: https://oss-fuzz.com/testcase?key=4897820148039680 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Global-buffer-overflow WRITE Crash Address: 0x000001149a08 Crash State: AnnouncePunctuation...

OSV-2024-1194 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372093894 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...

OSV-2024-1191 Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371931330 Crash type: Security exception Crash state: org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII...

wasm3:fuzzer: Heap-buffer-overflow in PreserveRegisterIfOccupied

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=4802459962245120 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x526000020354 Crash...

php:php-fuzz-execute: Heap-use-after-free in attr_free

Detailed Report: https://oss-fuzz.com/testcase?key=5198251902435328 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf442c9e4 Crash State: attrfree zendhashdestroy...

OSV-2024-1182 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371233025 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec com.ctc.wstx.dtd.FullDTDReader.skipDtdWs com.ctc.wstx.dtd.FullDTDReader.readContentSpec...

OSV-2024-1181 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371233781 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.lang.Exception. java.base/java.lang.RuntimeException...

OSV-2024-1179 UNKNOWN READ in __dynamic_cast

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371239171 Crash type: UNKNOWN READ Crash state: dynamiccast HandleDynamicTypeCacheMiss CallbackToLogRedirector...

wt:fuzz-eval: Heap-double-free in basic_string.tcc

Project: https://github.com/emweb/wt.git Detailed Report: https://oss-fuzz.com/testcase?key=4829565027942400 Project: wt Fuzzing Engine: libFuzzer Fuzz Target: fuzz-eval Job Type: libfuzzerasanwt Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x503000000b50 Crash State:...

libarchive:libarchive_fuzzer: Object-size in process_head_file

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=4695560571912192 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerubsanlibarchive Platform Id: linux Crash Type: Object-size Crash Address: Crash...

wt:fuzz-eval: Crash in LLVMFuzzerRunDriver

Detailed Report: https://oss-fuzz.com/testcase?key=4506830829584384 Project: wt Fuzzing Engine: afl Fuzz Target: fuzz-eval Job Type: aflasanwt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5240000c8010 Crash State: LLVMFuzzerRunDriver Sanitizer: address ASAN Recommended Security...

Buffer underflow in base64decode

With the following new fuzz target generated by https://github.com/google/oss-fuzz-gen: include include include include "utils.hpp" include // File under test include // Auxiliary headers include include include include include include if hasinclude include namespace fs = std::filesystem; else...

go-git:fuzz_decode: Crash in fuzz_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5513675857788928 Project: go-git Fuzzing Engine: libFuzzer Fuzz Target: fuzzdecode Job Type: libfuzzerasango-git Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: fuzzdecode Sanitizer: address ASAN...

fluent-bit:flb-it-fuzz-input_fuzzer_OSSFUZZ: Heap-use-after-free in flb_output_return_do

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4874928027926528 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-inputfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-free READ...

OSV-2024-1161 Security exception in java.base/java.util.Arrays.copyOfRange

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=370272563 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange java.base/java.lang.StringUTF16.newString java.base/java.lang.String.substring...

gpac:fuzz_m2ts_probe: Heap-buffer-overflow in gf_m2ts_process_sdt

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4844943997206528 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzm2tsprobe Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address: 0x50b0000e384d Crash State:...

OSV-2024-1159 Use-of-uninitialized-value in decompress_yuv.cc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=369974248 Crash type: Use-of-uninitialized-value Crash state: decompressyuv.cc...

OSV-2024-1158 Use-of-uninitialized-value in format_message

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=370032374 Crash type: Use-of-uninitialized-value Crash state: formatmessage ultrahdr::JpegDecoderHelper::decode ultrahdr::JpegDecoderHelper::decompressImage...