njs:njs_process_script_fuzzer: Segv on unknown address in njs_vmcode_interpreter

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5781280554614784 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

OSV-2023-525 Security exception in jaz.Zer.reportFinding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60167 Crash type: Security exception Crash state: jaz.Zer.reportFinding jaz.Zer.reportFindingIfEnabled jaz.Zer...

OSV-2023-522 Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60156 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf com.codeintelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrfSocket...

OSV-2023-521 Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60179 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf com.codeintelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrfSocket...

OSV-2023-518 Security exception in com.code_intelligence.jazzer.sanitizers.XPathInjection.checkXpathExecute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60148 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.XPathInjection.checkXpathExecute org.hamcrest.xml.HasXPath.compiledXPath org.hamcrest.xml.HasXPath...

ghostscript:gstoraster_pdf_fuzzer: Heap-buffer-overflow in default_get_outline

Detailed Report: https://oss-fuzz.com/testcase?key=4653827832545280 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterpdffuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6310000ec924 Crash State:...

graphicsmagick:coder_TIFF_fuzzer: Heap-buffer-overflow in crc64_clmul

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5778254599159808 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderTIFFfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash...

htmlunit:HtmlParserFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

Project: https://github.com/HtmlUnit/htmlunit.git Detailed Report: https://oss-fuzz.com/testcase?key=5187786085629952 Project: htmlunit Fuzzing Engine: libFuzzer Fuzz Target: HtmlParserFuzzer Job Type: libfuzzerasanhtmlunit Platform Id: linux Crash Type: Security exception Crash Address: Crash...

FreeBSD : OpenEXR -- heap buffer overflow in internal_huf_decompress (06428d91-152e-11ee-8b14-dbdd62da85fb)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 06428d91-152e-11ee-8b14-dbdd62da85fb advisory. - oss-fuzz reports: heap buffer overflow in internalhufdecompress. Cary Phillips reports: v3.1.9 - Patc...

jdom:SAXBuilderFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

Project: https://github.com/hunterhacker/jdom.git Detailed Report: https://oss-fuzz.com/testcase?key=5420846446149632 Project: jdom Fuzzing Engine: libFuzzer Fuzz Target: SAXBuilderFuzzer Job Type: libfuzzerasanjdom Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

hamcrest:HamcrestFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.XPathInjection.checkXpathExecute

Project: https://github.com/hamcrest/JavaHamcrest.git Detailed Report: https://oss-fuzz.com/testcase?key=4823603192135680 Project: hamcrest Fuzzing Engine: libFuzzer Fuzz Target: HamcrestFuzzer Job Type: libfuzzerasanhamcrest Platform Id: linux Crash Type: Security exception Crash Address: Crash...

OSV-2023-517 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60112 Crash type: Security exception Crash state: org.springframework.expression.spel.ast.OpPlus.getValueInternal java.base/sun.reflect.generics.reflectiveObjects.TypeVariableImpl.hashCode java.base/java.util.Arrays.hashCode...

imagemagick:enhance_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5566663807074304 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::FBXExporter::WriteObjects

Detailed Report: https://oss-fuzz.com/testcase?key=5697543976386560 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x61200000b710 Crash State: Assimp::FBXExporter::WriteObjects...

OSV-2023-512 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60091 Crash type: Memcpy-param-overlap Crash state: repeat pere cliregcompreal...

OSV-2022-1277 Heap-use-after-free in mk_event_timeout_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60089 Crash type: Heap-use-after-free WRITE 8 Crash state: mkeventtimeoutdestroy flbscheddestroy flbconfigexit...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::packet_analysis::VLAN::VLANAnalyzer::AnalyzePacket

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=6428589923631104 Project: zeek Fuzzing Engine: honggfuzz Fuzz Target: zeek-packet-fuzzer Job Type: honggfuzzasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60700228379...

spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

Detailed Report: https://oss-fuzz.com/testcase?key=5440741405753344 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2023-510 Heap-buffer-overflow in uofs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60056 Crash type: Heap-buffer-overflow READ 1 Crash state: uofs pdfifindcffindex pdfireadcfffont...

OSV-2023-509 Heap-buffer-overflow in ndpi_search_thrift_tcp_udp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60070 Crash type: Heap-buffer-overflow WRITE Crash state: ndpisearchthrifttcpudp checkndpidetectionfunc ndpicheckflowfunc...