flex:fuzz-main: Heap-buffer-overflow in sf_init

Detailed Report: https://oss-fuzz.com/testcase?key=5603512147640320 Project: flex Fuzzing Engine: afl Fuzz Target: fuzz-main Job Type: aflasanflex Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x60c000011d10 Crash State: sfinit flexinit flexmain Sanitizer: address ASA...

libdwarf:fuzz_die_cu_attrs_loclist: Heap-buffer-overflow in _dwarf_read_loc_expr_op

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=6737086749999104 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzdiecuattrsloclist Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

OSV-2023-453 UNKNOWN READ in ih264e_cabac_put_byte

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59543 Crash type: UNKNOWN READ Crash state: ih264ecabacputbyte ih264ecabacencodebin ih264ewritepslicembcabac...

imagemagick:encoder_wpg_fuzzer: Use-of-uninitialized-value in SyncImage

Detailed Report: https://oss-fuzz.com/testcase?key=4711447482204160 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderwpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: SyncImage...

CVE-2023-3044

An excessively large PDF page size found in fuzz testing, unlikely in normal PDF files can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate...

Design/Logic Flaw

An excessively large PDF page size found in fuzz testing, unlikely in normal PDF files can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate...

CVE-2023-3044

An excessively large PDF page size found in fuzz testing, unlikely in normal PDF files can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate...

CVE-2023-3044 Divide-by-zero in Xpdf 4.04 due to very large page size

An excessively large PDF page size found in fuzz testing, unlikely in normal PDF files can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate...

libavc:avc_enc_fuzzer: Crash in ih264e_cabac_put_byte

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=4657365556002816 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcencfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux...

OSV-2023-451 Heap-buffer-overflow in BundlePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59498 Crash type: Heap-buffer-overflow WRITE 9 Crash state: BundlePacket SendChannelExit wolfSSHshutdown...

OSV-2023-445 Heap-buffer-overflow in LossyDctDecoder_execute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59457 Crash type: Heap-buffer-overflow READ 2 Crash state: LossyDctDecoderexecute DwaCompressoruncompress internalexrundodwaa...

OSV-2023-443 Use-after-poison in file_is_simh

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59438 Crash type: Use-after-poison READ 4 Crash state: fileissimh filebuffer magicbuffer...

freerdp:TestFuzzCryptoCertificateDataSetPEM: Use-of-uninitialized-value in PEM_read_bio_ex

Detailed Report: https://oss-fuzz.com/testcase?key=6205547100372992 Project: freerdp Fuzzing Engine: libFuzzer Fuzz Target: TestFuzzCryptoCertificateDataSetPEM Job Type: libfuzzermsanfreerdp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: PEMreadbioex...

OSV-2023-440 Heap-double-free in dwg_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59428 Crash type: Heap-double-free Crash state: dwgfreeobject dwgfree llvmfuzz.c...

PT-2023-35851 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. The crash occurs in the dwg free object and dwg free functions, as indicated by the crash state. This...

njs:njs_process_script_fuzzer: Segv on unknown address in njs_vmcode_interpreter

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5293233769676800 Project: njs Fuzzing Engine: afl Fuzz Target: njsprocessscriptfuzzer Job Type: aflasannjs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: njsvmcodeinterpreter...

OSV-2023-437 Heap-buffer-overflow in internal_huf_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59382 Crash type: Heap-buffer-overflow READ 1 Crash state: internalhufdecompress DwaCompressoruncompress internalexrundodwaa...

OSV-2023-436 Heap-buffer-overflow in ndpi_check_punycode_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59393 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpicheckpunycodestring ndpimatchhostsubprotocol checkcontenttypeandchangeprotocol...

OSV-2022-1275 Security exception in java.desktop/java.awt.image.DataBufferInt.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59354 Crash type: Security exception Crash state: java.desktop/java.awt.image.DataBufferInt. java.desktop/java.awt.image.Raster.createPackedRaster java.desktop/java.awt.image.DirectColorModel.createCompatibleWritableRaster...

OpenEXR -- heap buffer overflow in internal_huf_decompress

oss-fuzz reports: heap buffer overflow in internalhufdecompress. Cary Phillips reports: v3.1.9 - Patch release that addresses ... also OSS-fuzz 59382 Heap-buffer-overflow in internalhufdecompress Kimball Thurston reports: Fix scenario where malformed dwa file could read past end of buffer - fixes...