php:php-fuzz-function-jit: Segv on unknown address in cleanup_unfinished_calls

Detailed Report: https://oss-fuzz.com/testcase?key=5127454958092288 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: cleanupunfinishedcalls...

OSV-2024-153 Heap-buffer-overflow in od_ec_dec_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67184 Crash type: Heap-buffer-overflow READ 1 Crash state: odecdecinit aomreaderinit tileworkerhookinit...

gdal:gmlas_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5831365541036032 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gmlasfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x00000000 Crash State: NULL Sanitizer: address ASAN Crash...

OSV-2024-144 UNKNOWN READ in spvtools::val::ValidateAccessChain

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66956 Crash type: UNKNOWN READ Crash state: spvtools::val::ValidateAccessChain spvtools::val::MemoryPass spvtools::val::ValidateBinaryUsingContextAndValidationState...

OSV-2024-142 Heap-buffer-overflow in gf_gz_decompress_payload_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67043 Crash type: Heap-buffer-overflow WRITE 1 Crash state: gfgzdecompresspayloadex gfisomboxparseex gfisomboxarrayread...

ffmpeg:ffmpeg_dem_AIFF_fuzzer: Heap-buffer-overflow in av_channel_layout_copy

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4920720268263424 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemAIFFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6090000000e0 Crash...

libredwg:llvmfuzz: Heap-buffer-overflow in dynapi_set_helper

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4865751229988864 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

OSV-2024-140 Container-overflow in WasmEdge::LLVM::Compiler::compile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67006 Crash type: Container-overflow READ 8 Crash state: WasmEdge::LLVM::Compiler::compile WasmEdge::LLVM::Compiler::compile WasmEdge::Driver::FuzzTool...

OSV-2024-138 Security exception in com.github.javaparser.GeneratedJavaParser.Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67005 Crash type: Security exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression java.base/java.util.concurrent.ConcurrentHashMap.putVal java.base/java.util.concurrent.ConcurrentHashMap.putIfAbsent...

PT-2024-40647 · Wasmedge · Wasmedge

Name of the Vulnerable Software and Affected Versions: WasmEdge affected versions not specified Description: A crash issue was identified in WasmEdge, related to a container-overflow read. The issue occurs in the compile function of the WasmEdge::LLVM::Compiler module, which is called by...

ffmpeg:ffmpeg_IO_DEMUXER_fuzzer: Heap-buffer-overflow in mov_read_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5685384082161664 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegIODEMUXERfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x602000000170...

OSV-2024-137 Global-buffer-overflow in igraph_dl_yylex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66992 Crash type: Global-buffer-overflow READ 2 Crash state: igraphdlyylex igraphdlyyparse igraphreadgraphdl...

OSV-2024-135 Heap-buffer-overflow in BS_ReadByte

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66949 Crash type: Heap-buffer-overflow READ 1 Crash state: BSReadByte gfbsreadu8 dumpsei...

igraph:read_dl: Global-buffer-overflow in igraph_dl_yylex

Project: https://github.com/igraph/igraph.git Detailed Report: https://oss-fuzz.com/testcase?key=4645837244268544 Project: igraph Fuzzing Engine: libFuzzer Fuzz Target: readdl Job Type: libfuzzerasani386igraph Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash Address: 0x082d0e70...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in BS_ReadByte

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5321354565976064 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61c00001ff44 Crash State:...

pcre2:pcre2_fuzzer: Use-of-uninitialized-value in fast_forward_first_n_chars

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed Report: https://oss-fuzz.com/testcase?key=4593633133133824 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzermsanpcre2 Platform Id: linux Crash Type:...

jq:jq_fuzz_execute: Heap-buffer-overflow in jv_parse

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=4891865084133376 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzexecute Job Type: libfuzzerasanjq Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6030000113c1 Crash...

OSV-2024-120 Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66743 Crash type: Security exception Crash state: com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer java.base/java.lang.StringCoding.encode java.base/java.lang.String.getBytes...

libavif:[email protected]: Use-of-uninitialized-value in avifImageRGBToYUV

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=4927644015591424 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibavif Platform Id: linux Crash Type:...

OSV-2024-118 Heap-buffer-overflow in sav_process_row

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66805 Crash type: Heap-buffer-overflow WRITE 1 Crash state: savprocessrow savreaddata readstatparsesav...