gpac:fuzz_probe_analyze: Heap-buffer-overflow in swf_def_bits_jpeg

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6201254983303168 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x5030000016d1 Crash State:...

OSV-2024-490 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68929 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

UBUNTU-CVE-2024-35944

In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix memcpy run-time warning in dgdispatchashost Syzkaller hit 'WARNING in dgdispatchashost' bug. memcpy: detected field-spanning write size 56 of single field "&dginfo-msg" at drivers/misc/vmwvmci/vmcidatagram.c:237 size 24...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in text_to_stream

Detailed Report: https://oss-fuzz.com/testcase?key=5814226340872192 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x529000063990 Crash State:...

matio:matio_fuzzer: Crash in Mat_VarPrint

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6257734071681024 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash...

OSV-2024-477 Heap-buffer-overflow in ultrahdr::gain_map_metadata::decodeGainmapMetadata

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68933 Crash type: Heap-buffer-overflow READ 1 Crash state: ultrahdr::gainmapmetadata::decodeGainmapMetadata ultrahdr::JpegR::decodeJPEGR UltraHdrDecFuzzer::process...

OSV-2024-476 Heap-buffer-overflow in ultrahdr::getYuv420Pixel

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68946 Crash type: Heap-buffer-overflow READ 1 Crash state: ultrahdr::getYuv420Pixel std::1::function::funcultrahdr::JpegR::applyGainMap ultrahdr::JpegR::applyGainMap...

OpenSSL 3.3.0 < 3.3.1 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.3.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.3.1 advisory. - Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the function...

pcapplusplus:FuzzTargetNg: Crash in pcpp::PcapNgFileReaderDevice::getNextPacket

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=6014644379516928 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

OSV-2024-473 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68940 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/sun.nio.cs.StreamEncoder.implWrite java.base/sun.nio.cs.StreamEncoder.write...

OSV-2024-471 Use-of-uninitialized-value in vpx_codec_peek_stream_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68912 Crash type: Use-of-uninitialized-value Crash state: vpxcodecpeekstreaminfo vpxdecfuzzer.cc vpxdecfuzzer.cc...

cras:rclient_message: Null-dereference READ in audio_io_thread

Detailed Report: https://oss-fuzz.com/testcase?key=6200460611485696 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: rclientmessage Job Type: libfuzzerasancras Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: audioiothread interceptorpthreadcreat...

wireshark:fuzzshark_ip_proto-udp: Heap-buffer-overflow in dissect_btle

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=4653303358095360 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux...

imagemagick:encoder_tiff_fuzzer: Use-of-uninitialized-value in CompositeOverImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6522766407827456 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertifffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

ffmpeg:ffmpeg_AV_CODEC_ID_SNOW_fuzzer: Heap-buffer-overflow in mc_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6239933667803136 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDSNOWfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2024-465 Security exception in com.drew.imaging.tiff.TiffReader.processIfd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68845 Crash type: Security exception Crash state: com.drew.imaging.tiff.TiffReader.processIfd java.base/java.lang.Throwable.printStackTrace com.codeintelligence.jazzer.api.Jazzer.guideTowardsEquality...

OSV-2024-456 Heap-buffer-overflow in ih264d_read_coeff4x4_cabac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66989 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dreadcoeff4x4cabac ih264dparseresidual4x4cabac ih264dparseimbcabac...

OSV-2024-453 Use-of-uninitialized-value in encode_base64_differential

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68663 Crash type: Use-of-uninitialized-value Crash state: encodebase64differential fuzz-crypto.c...

OSV-2024-450 Use-of-uninitialized-value in ink_filepath_merge

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68468 Crash type: Use-of-uninitialized-value Crash state: inkfilepathmerge layoutrelative Layout::Layout...

OSV-2024-449 Use-of-uninitialized-value in YAML::Stream::Stream

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68461 Crash type: Use-of-uninitialized-value Crash state: YAML::Stream::Stream YAML::Scanner::Scanner YAML::Parser::Load...