OSV-2024-36 Heap-use-after-free in LLVMFuzzerRunDriver

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65647 Crash type: Heap-use-after-free READ 4 Crash state: LLVMFuzzerRunDriver absl::ltsNUMBER::randominternal::InitDiscreteDistribution absl::ltsNUMBER::discretedistribution::paramtype::init...

upx:list_packed_file_fuzzer: Heap-buffer-overflow in PackLinuxElf64::elf_lookup

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=5326425628409856 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: listpackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x622000004690...

simdutf:roundtrip: Heap-buffer-overflow in simdutf::westmere::implementation::convert_utf8_to_utf32

Project: https://github.com/simdutf/simdutf.git Detailed Report: https://oss-fuzz.com/testcase?key=5251049032056832 Project: simdutf Fuzzing Engine: libFuzzer Fuzz Target: roundtrip Job Type: libfuzzerasansimdutf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash Address:...

wasm3:fuzzer: Segv on unknown address in Function_Release

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=5171303065649152 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

libredwg:llvmfuzz: Heap-buffer-overflow in json_HEADER

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5032026805698560 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

OSV-2024-30 Heap-buffer-overflow in mrb_memsearch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66000 Crash type: Heap-buffer-overflow READ 3 Crash state: mrbmemsearch mrbstrbyteindexm mrbvmexec...

SUSE SLED15: libopenssl-3-devel / libopenssl-3-devel-32bit / libopenssl3 / etc (SUSE-SU-2024:0172-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0172-1 advisory. - CVE-2023-6129: Fixed vector register clobbering on PowerPC. bsc1218690 - CVE-2023-6237: Fixed...

OSV-2024-28 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65930 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.util.ArrayList.grow java.base/java.util.ArrayList.grow...

publicsuffix-list:FuzzTest: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6659913262628864 Project: publicsuffix-list Fuzzing Engine: libFuzzer Fuzz Target: FuzzTest Job Type: libfuzzerasanpublicsuffix-list Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x78bff7729b41 Crash State: NULL Sanitizer: address AS...

wget:wget_options_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6245018549420032 Project: wget Fuzzing Engine: libFuzzer Fuzz Target: wgetoptionsfuzzer Job Type: libfuzzerasanwget Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

nestegg:fuzz: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5163129306677248 Project: nestegg Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasannestegg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

OSV-2024-24 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65740 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf com.fasterxml.jackson.core.util.TextBuffer.expandCurrentSegment com.fasterxml.jackson.dataformat.cbor.CBORParser.finishShortText...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in mhas_dmx_probe_data

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6408513001684992 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x623000057429...

OSV-2024-22 Heap-use-after-free in ucl_hash_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65868 Crash type: Heap-use-after-free READ 8 Crash state: uclhashfunc khresizeuclhashnode khputuclhashnode...

OSV-2024-20 Heap-buffer-overflow in bam_aux_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65820 Crash type: Heap-buffer-overflow READ 1 Crash state: bamauxget processoneread cramencodecontainer...

OSV-2024-18 Heap-use-after-free in QPDF::read_xref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65777 Crash type: Heap-use-after-free READ 8 Crash state: QPDF::readxref QPDF::reconstructxref QPDF::parse...

tcmalloc:span_fuzz: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6375963914993664 Project: tcmalloc Fuzzing Engine: libFuzzer Fuzz Target: spanfuzz Job Type: libfuzzerasantcmalloc Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

icu:plurrule_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5105079052992512 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: plurrulefuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

expat:xml_parsebuffer_fuzzer_US-ASCII: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4764610116780032 Project: expat Fuzzing Engine: libFuzzer Fuzz Target: xmlparsebufferfuzzerUS-ASCII Job Type: libfuzzerasanexpat Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

OSV-2024-17 Heap-use-after-free in iasecc_delete_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65684 Crash type: Heap-use-after-free READ 4 Crash state: iaseccdeletefile scdeletefile iaseccpkcs15deletefile...