matio:matio_fuzzer: Heap-buffer-overflow in H5MM_strdup

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=4716413224615936 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow REA...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in put_weighted_bipred_8_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=6143058888228864 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: putweightedbipred8fallback...

libredwg:llvmfuzz: Heap-buffer-overflow in dwg_json_VPORT_private

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4876616779825152 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Stack-buffer-overflow in read_distribution_bundle

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5967000670961664 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in put_weighted_pred_16_fallback

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4875925659189248 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick:encoder_bmp_fuzzer: Heap-buffer-overflow in ReadBMPImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4672093356425216 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderbmpfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 2...

OSV-2023-1033 Heap-buffer-overflow in Gfx::InputStreamer::read_u32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63357 Crash type: Heap-buffer-overflow READ 1 Crash state: Gfx::InputStreamer::readu32 Gfx::setdibbitmasks Gfx::decodebmpdib...

rdf4j:ParserFuzzer: Security exception in org.eclipse.rdf4j.query.algebra.Join.visit

Project: https://github.com/eclipse/rdf4j.git Detailed Report: https://oss-fuzz.com/testcase?key=5046526902403072 Project: rdf4j Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanrdf4j Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

CLSA-2023-1697740947 glib2: Fix of 5 CVEs

Enable internal tests - Skip several failed tests from the check - CVE-2023-29499: Fix GVariant offset table entry size which is not checked in isnormal - CVE-2023-32611: Fix an issue where gvariantbyteswap can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::HMPImporter::CreateOutputFaceList

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5028159340544000 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

OSV-2023-1025 Heap-buffer-overflow in ucl_hash_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63299 Crash type: Heap-buffer-overflow READ 8 Crash state: uclhashdestroy uclobjectdtorunrefsingle uclobjectdtorunref...

OSV-2023-1016 Use-of-uninitialized-value in Render_Single_Pass

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63241 Crash type: Use-of-uninitialized-value Crash state: RenderSinglePass RenderGlyph ftblackrender...

OSV-2023-1014 Security exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63242 Crash type: Security exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$14.handleMissingTr org.jsoup.parser.HtmlTreeBuilderState$14.process...

git:fuzz-commit-graph: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5911481507774464 Project: git Fuzzing Engine: libFuzzer Fuzz Target: fuzz-commit-graph Job Type: libfuzzerasangit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61d000002000 Crash State: NULL Sanitizer: address ASAN Recommended...

llvm:clangd-fuzzer: Heap-buffer-overflow in llvm::raw_ostream::copy_to_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=6365487988342784 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clangd-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x625000004900 Crash State: llvm::rawostream::copytobuffer...

OSV-2023-1009 Security exception in net.jsign.bouncycastle.asn1.ASN1StreamParser.readVector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63217 Crash type: Security exception Crash state: net.jsign.bouncycastle.asn1.ASN1StreamParser.readVector net.jsign.bouncycastle.asn1.ASN1StreamParser.loadTaggedIL net.jsign.bouncycastle.asn1.BERTaggedObjectParser.getLoadedObj...

serenity:FuzzRegexECMA262: Stack-buffer-overflow in ak_verification_failed

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5703549306404864 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzRegexECMA262 Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Addres...

CLSA-2023-1697135256 glib2: Fix of 5 CVEs

CVE-2023-29499: Fix GVariant offset table entry size which is not checked in isnormal - CVE-2023-32611: Fix an issue where gvariantbyteswap can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant deserialisation which does not match spec for non-normal data -...

OSV-2023-1008 Heap-use-after-free in gx_image_enum_begin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63185 Crash type: Heap-use-after-free WRITE 8 Crash state: gximageenumbegin gxbeginimage1 gxdefaultbegintypedimage...

OSV-2023-1004 Heap-buffer-overflow in ndpi_snprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63179 Crash type: Heap-buffer-overflow WRITE 11 Crash state: ndpisnprintf ndpiserializestringint32 fuzzserialization.cpp...