keystone:fuzz_asm_sparcbe: Invalid-free in llvm_ks::MCFragment::destroy

Detailed Report: https://oss-fuzz.com/testcase?key=4886621485858816 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmsparcbe Job Type: libfuzzerasankeystone Platform Id: linux Crash Type: Invalid-free Crash Address: 0x51900000059d Crash State: llvmks::MCFragment::destroy...

simdjson:fuzz_dump: Use-of-uninitialized-value in std::__1::ostreambuf_iterator<char, std::__1::char_traits<char>> std::__1::__pad

Detailed Report: https://oss-fuzz.com/testcase?key=4833652096696320 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzdump Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::ostreambufiterator std::1::pad...

keystone:fuzz_asm_sparc64be: Heap-double-free in llvm_ks::MCFragment::destroy

Project: https://github.com/keystone-engine/keystone.git Detailed Report: https://oss-fuzz.com/testcase?key=4806181742575616 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmsparc64be Job Type: libfuzzerasankeystone Platform Id: linux Crash Type: Heap-double-free Crash Address:...

ghostscript:gs_device_eps2write_fuzzer: Segv on unknown address in s_DCTD_process

Detailed Report: https://oss-fuzz.com/testcase?key=4611648793935872 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceeps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: sDCTDprocess sreadbuf...

ots:ots-fuzzer: Use-of-uninitialized-value in ProcessGeneric

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=6402542306131968 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzermsanots Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

speex:speex_decode_fuzzer_fixed: Use-of-uninitialized-value in compute_rms16

Project: https://gitlab.xiph.org/xiph/speex.git Detailed Report: https://oss-fuzz.com/testcase?key=6142339463577600 Project: speex Fuzzing Engine: libFuzzer Fuzz Target: speexdecodefuzzerfixed Job Type: libfuzzermsanspeex Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

simdjson:fuzz_padded: Use-of-uninitialized-value in fuzz_padded.cpp

Detailed Report: https://oss-fuzz.com/testcase?key=5898062902919168 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzpadded Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: fuzzpadded.cpp Sanitizer: memory MSAN...

libxml2:api: Crash in xmlBufGetChildContent

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4897346556067840 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: api Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x5790fbcaf924 Crash State...

glib: Timeout in fuzz_variant_text

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect gli...

OSV-2024-393 Heap-buffer-overflow in pcpp::BgpLayer::getHeaderLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67346 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::BgpLayer::getHeaderLen pcpp::Packet::shortenLayer pcpp::BgpUpdateMessageLayer::setPathAttributes...

OSV-2024-391 Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68324 Crash type: Security exception Crash state: org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII...

OSV-2024-390 Heap-buffer-overflow in H5O__cache_chk_serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67889 Crash type: Heap-buffer-overflow READ Crash state: H5Ocachechkserialize H5Cgenerateimage H5Cflushsingleentry...

OSV-2024-389 Heap-buffer-overflow in JS_CallInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67611 Crash type: Heap-buffer-overflow READ 1 Crash state: JSCallInternal asyncfuncresume jsasyncfunctionresume...

OSV-2024-384 Heap-use-after-free in json_fixed_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67528 Crash type: Heap-use-after-free WRITE 11 Crash state: jsonfixedstring jsonRNUMBERHeader dwgreadjson...

OSV-2024-382 UNKNOWN READ in pcpp::Packet::destructPacketData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67193 Crash type: UNKNOWN READ Crash state: pcpp::Packet::destructPacketData Packet.h...

OSV-2024-380 Heap-use-after-free in H5FL__blk_gc_list

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67830 Crash type: Heap-use-after-free READ 8 Crash state: H5FLblkgclist H5FLblkfree H5Ofree...

OSV-2024-379 UNKNOWN READ in H5SL_first

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67923 Crash type: UNKNOWN READ Crash state: H5SLfirst H5FSsectfind H5MFfindsect...

OSV-2024-372 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67413 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal java.base/java.lang.AbstractStringBuilder.append...

OSV-2024-371 UNKNOWN READ in jv_array_set

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68056 Crash type: UNKNOWN READ Crash state: jvarrayset jvset jvsetpath...

OSV-2024-370 Heap-buffer-overflow in H5O__chunk_protect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67820 Crash type: Heap-buffer-overflow READ 8 Crash state: H5Ochunkprotect H5Ochunkdelete H5Ocontdelete...