libreoffice:svmfuzzer: Stack-buffer-overflow in BigInt::DivLong

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4560846004813824 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: svmfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash...

ffmpeg:ffmpeg_BSF_VVC_METADATA_fuzzer: Heap-buffer-overflow in cbs_h266_read_nal_unit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4665241535119360 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegBSFVVCMETADATAfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

libucl:ucl_add_string_fuzzer: Heap-use-after-free in ucl_hash_func

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=4598791571111936 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

OSV-2023-1329 Stack-buffer-overflow in decNaNs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65130 Crash type: Stack-buffer-overflow WRITE 2 Crash state: decNaNs decCompareOp decNumberCompare...

OSV-2023-1328 Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65128 Crash type: Stack-buffer-overflow WRITE 1 Crash state: icu75::TZDBTimeZoneNames::getMetaZoneNames icu75::TZDBTimeZoneNames::getMetaZoneDisplayName TestNames...

OSV-2023-1327 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65140 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

OSV-2023-1325 UNKNOWN WRITE in zero

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65135 Crash type: UNKNOWN WRITE Crash state: zero zendexecute fuzzerdorequestfrombuffer...

OSV-2023-1322 UNKNOWN READ in ih264d_filter_boundary_left_nonmbaff

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65132 Crash type: UNKNOWN READ Crash state: ih264dfilterboundaryleftnonmbaff ih264ddeblockmbnonmbaff ih264ddecoderecontfrnmb...

OSV-2023-1320 Heap-use-after-free in memory_bstat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65108 Crash type: Heap-use-after-free READ 8 Crash state: memorybstat bfdgetsize bfdgetfilesize...

OSV-2023-1315 Heap-use-after-free in htmlParseDocument

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65112 Crash type: Heap-use-after-free READ 1 Crash state: htmlParseDocument htmlDoRead htmlCtxtReadMemory...

javaparser:parseFuzzer: Security exception in com.github.javaparser.CommentsInserter.insertComments

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5890620610445312 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

php:php-fuzz-tracing-jit: Crash in zero

Detailed Report: https://oss-fuzz.com/testcase?key=5211317442838528 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7f1eda000250 Crash State: zero zendexecute fuzzerdorequestfrombuffe...

icu:time_zone_names_fuzzer: Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames

Detailed Report: https://oss-fuzz.com/testcase?key=6453645256032256 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: timezonenamesfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffd0bb59201 Crash State:...

libxml2:html: Use-of-uninitialized-value in htmlCurrentChar

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4555539253952512 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: html Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

OSV-2023-1312 Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65059 Crash type: Heap-buffer-overflow WRITE Crash state: ih264dformatconvert isvcdvideodecode isvcdapifunction...

OSV-2023-1311 Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65057 Crash type: Heap-buffer-overflow WRITE Crash state: ih264dformatconvert ih264ddecodepicturethread...

binutils:fuzz_nm: Heap-use-after-free in memory_bstat

Detailed Report: https://oss-fuzz.com/testcase?key=6453267198246912 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzznm Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6020000000b0 Crash State: memorybstat bfdgetsize...

binutils:fuzz_dwarf: Heap-use-after-free in memory_bclose

Detailed Report: https://oss-fuzz.com/testcase?key=5098031372173312 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdwarf Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6020000000b8 Crash State: memorybclose bfdclosealldone...

OSV-2023-1307 UNKNOWN READ in init_struct_ops_maps

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65047 Crash type: UNKNOWN READ Crash state: initstructopsmaps bpfobjectinitmaps bpfobjectopen...

OSV-2023-1306 Heap-use-after-free in pcpp::TLVRecordReader<pcpp::DhcpOption>::getTLVRecord

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65051 Crash type: Heap-use-after-free READ 1 Crash state: pcpp::TLVRecordReader::getTLVRecord pcpp::DhcpLayer::toString pcpp::Packet::toStringList...