flac:fuzzer_tool_flac: Use-of-uninitialized-value in FLAC__replaygain_synthesis__apply_gain

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5539899256668160 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzertoolflac Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

OSV-2024-655 Stack-buffer-overflow in UnrollChunkyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70395 Crash type: Stack-buffer-overflow READ 1 Crash state: UnrollChunkyBytes CachedXFORM cmsDoTransform...

CVE-2024-39510

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefilesondemanddaemonread We got the following issue in a fuzz test of randomly issuing the restore command: ================================================================== BUG: KASAN:...

cockroachdb:fuzzSessionIDEncoding: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6268777981870080 Project: cockroachdb Fuzzing Engine: libFuzzer Fuzz Target: fuzzSessionIDEncoding Job Type: libfuzzerasancockroachdb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: addre...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer: Heap-use-after-free in aac_decode_frame_int

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6007809271988224 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDAACFIXEDfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address:...

OSV-2024-641 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70141 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.HeapCharBuffer. java.base/java.nio.CharBuffer.wrap...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in residual_coding

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5187484170911744 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

OSV-2024-640 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69261 Crash type: Null-dereference READ Crash state: NULL...

OSV-2024-638 Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68807 Crash type: Heap-buffer-overflow WRITE Crash state: ih264dformatconvert ih264ddecodepicturethread...

OSV-2024-637 Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69682 Crash type: Heap-buffer-overflow WRITE Crash state: ih264dformatconvert isvcdvideodecode isvcdapifunction...

OSV-2024-634 Heap-buffer-overflow in htmlCurrentChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70297 Crash type: Heap-buffer-overflow READ 1 Crash state: htmlCurrentChar htmlParseCharData htmlParseContentInternal...

OSV-2024-635 Null-dereference READ in do_evp_kdf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69243 Crash type: Null-dereference READ Crash state: doevpkdf FuzzerTestOneInput...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in gf_dash_group_get_template

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6311009833254912 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x5020000013f1...

UBUNTU-CVE-2024-39510

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefilesondemanddaemonread We got the following issue in a fuzz test of randomly issuing the restore command: ================================================================== BUG: KASAN:...

CVE-2024-39510

In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefilesondemanddaemonread We got the following issue in a fuzz test of randomly issuing the restore command: ================================================================== BUG: KASAN:...

threetenbp:ThreetenbpFuzzer: Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse

Detailed Report: https://oss-fuzz.com/testcase?key=5911563781865472 Project: threetenbp Fuzzing Engine: libFuzzer Fuzz Target: ThreetenbpFuzzer Job Type: libfuzzerasanthreetenbp Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

php:php-fuzz-execute: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4924433093951488 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerubsanphp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5af618000000 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in HeifPixelImage::fill_RGB_16bit

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5978623404736512 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE...

sqlite3:ossfuzz: Heap-use-after-free in sqlite3CodeRhsOfIN

Detailed Report: https://oss-fuzz.com/testcase?key=5338303407128576 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzerasansqlite3 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x503000031b70 Crash State: sqlite3CodeRhsOfIN...

libwebp:imageio_fuzzer: Use-of-uninitialized-value in my_error_exit

Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=6206133828648960 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: imageiofuzzer Job Type: libfuzzermsanlibwebp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...