OSV-2024-1044 UNKNOWN READ in H5FL_reg_malloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538113 Crash type: UNKNOWN READ Crash state: H5FLregmalloc H5FLregcalloc H5Ocachechkdeserialize...

PT-2024-41504 · Git · Hdf5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538113 Crash type: UNKNOWN READ Crash state: H5FL reg malloc H5FL reg calloc H5O cache chk deserialize...

metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.imaging.quicktime.QuickTimeReader.processAtoms

Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=6001142729867264 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...

OSV-2024-1043 Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_latin1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71307 Crash type: Heap-buffer-overflow WRITE Crash state: simdutf::haswell::implementation::convertutf8tolatin1 Conversion Conversion...

OSV-2024-1041 UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71296 Crash type: UNKNOWN READ Crash state: chunkfreeobject sfclose pdficlosefile...

simdutf:conversion: Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_latin1

Project: https://github.com/simdutf/simdutf.git Detailed Report: https://oss-fuzz.com/testcase?key=6249684870430720 Project: simdutf Fuzzing Engine: libFuzzer Fuzz Target: conversion Job Type: libfuzzerasansimdutf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

libjpeg-turbo:libjpeg_turbo_fuzzer_dev: Use-of-uninitialized-value in decompress.cc

Detailed Report: https://oss-fuzz.com/testcase?key=5968469470806016 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: libjpegturbofuzzerdev Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: decompress.cc...

imagemagick:encoder_jxl_fuzzer: Container-overflow in std::__1::enable_if<

Detailed Report: https://oss-fuzz.com/testcase?key=5830813051060224 Project: imagemagick Fuzzing Engine: centipede Fuzz Target: encoderjxlfuzzer Job Type: centipedeasanimagemagick Platform Id: linux Crash Type: Container-overflow WRITE Crash Address: 0x607000032e50 Crash State: std::1::enableif...

OSV-2024-1034 Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_utf16be

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71218 Crash type: Heap-buffer-overflow WRITE Crash state: simdutf::haswell::implementation::convertutf8toutf16be Conversion Conversion...

karchive:karchive_fuzzer: Heap-buffer-overflow in crc64_clmul

Detailed Report: https://oss-fuzz.com/testcase?key=6102147979083776 Project: karchive Fuzzing Engine: centipede Fuzz Target: karchivefuzzer Job Type: centipedeasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x6290010f8210 Crash State: crc64clmul...

OSV-2024-1029 Stack-buffer-overflow in gf_hevc_parse_nalu_bs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71146 Crash type: Stack-buffer-overflow WRITE 4 Crash state: gfhevcparsenalubs gfinspectdumpnaluinternal inspectprocess...

ffmpeg:ffmpeg_AV_CODEC_ID_VC1IMAGE_fuzzer: Use-of-uninitialized-value in vc1_put_blocks_clamped

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6188476880453632 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVC1IMAGEfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

perfetto:trace_processor_fuzzer: Container-overflow in std::__1::enable_if<

Detailed Report: https://oss-fuzz.com/testcase?key=4823824917397504 Project: perfetto Fuzzing Engine: centipede Fuzz Target: traceprocessorfuzzer Job Type: centipedeasanperfetto Platform Id: linux Crash Type: Container-overflow WRITE Crash Address: 0x6080005081c0 Crash State: std::1::enableif...

libjpeg-turbo:compress12_fuzzer: Use-of-uninitialized-value in encode_mcu_AC_first

Detailed Report: https://oss-fuzz.com/testcase?key=5071676943958016 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: compress12fuzzer Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: encodemcuACfirst...

binutils:fuzz_disas_ext-bfd_arch_i386: Crash in print_insn

Detailed Report: https://oss-fuzz.com/testcase?key=5198295868178432 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzzdisasext-bfdarchi386 Job Type: centipedeasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000014a8 Crash State: printinsn...

readstat:fuzz_format_sas7bcat: Heap-buffer-overflow in sas_read2

Detailed Report: https://oss-fuzz.com/testcase?key=5166334130847744 Project: readstat Fuzzing Engine: centipede Fuzz Target: fuzzformatsas7bcat Job Type: centipedeasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x61d00000127f Crash State: sasread2...

md4c:fuzz-mdhtml: Heap-buffer-overflow in md_analyze_inlines

Detailed Report: https://oss-fuzz.com/testcase?key=5156518251528192 Project: md4c Fuzzing Engine: centipede Fuzz Target: fuzz-mdhtml Job Type: centipedeasanmd4c Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6210000b7cfc Crash State: mdanalyzeinlines...

wt:fuzz-eval: Heap-use-after-free in fuzz-eval.C

Project: https://github.com/emweb/wt.git Detailed Report: https://oss-fuzz.com/testcase?key=4904942656094208 Project: wt Fuzzing Engine: afl Fuzz Target: fuzz-eval Job Type: aflasanwt Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x50f000001aa2 Crash State: fuzz-eval.C...

OSV-2024-1023 Use-of-uninitialized-value in pcpp::SomeIpLayer::parseSomeIpLayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69526 Crash type: Use-of-uninitialized-value Crash state: pcpp::SomeIpLayer::parseSomeIpLayer pcpp::SomeIpLayer::parseNextLayer pcpp::Packet::setRawPacket...

OSV-2024-1018 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67071 Crash type: Security exception Crash state: org.springframework.expression.spel.ast.OpPlus.getValueInternal org.springframework.util.ConcurrentReferenceHashMap$Segment.restructureIfNecessa...