libfido2:fuzz_hid: Crash in cbor_load

Detailed Report: https://oss-fuzz.com/testcase?key=6700031670616064 Project: libfido2 Fuzzing Engine: centipede Fuzz Target: fuzzhid Job Type: centipedeasanlibfido2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fba0ec60d66 Crash State: cborload unpack libfuzzer.c Sanitizer: addres...

wget:wget_options_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4709717397340160 Project: wget Fuzzing Engine: libFuzzer Fuzz Target: wgetoptionsfuzzer Job Type: libfuzzerasanwget Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

OSV-2023-298 UNKNOWN READ in active_edges

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57884 Crash type: UNKNOWN READ Crash state: activeedges intersect cairoboxesintersect...

OSV-2023-297 UNKNOWN READ in pdfi_read_cff_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57880 Crash type: UNKNOWN READ Crash state: pdfireadcfffont pdfiloadfontbuffer pdfiloadfont...

systemd:fuzz-efi-string: Crash in memdup_suffix0

Detailed Report: https://oss-fuzz.com/testcase?key=6581579391827968 Project: systemd Fuzzing Engine: centipede Fuzz Target: fuzz-efi-string Job Type: centipedeasansystemd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fd4767a2a1d Crash State: memdupsuffix0 fuzz-efi-string.c...

systemd:fuzz-hostname-setup: Crash in fmemopen_unlocked

Detailed Report: https://oss-fuzz.com/testcase?key=6557557652324352 Project: systemd Fuzzing Engine: centipede Fuzz Target: fuzz-hostname-setup Job Type: centipedeasansystemd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x1c5f01dd8d6f Crash State: fmemopenunlocked fuzz.h...

systemd:fuzz-bcd: Crash in memdup

Detailed Report: https://oss-fuzz.com/testcase?key=6326472775434240 Project: systemd Fuzzing Engine: centipede Fuzz Target: fuzz-bcd Job Type: centipedeasansystemd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x1fbb3a62daeb Crash State: memdup fuzz-bcd.c centipede::RunOneInput...

ruby:fuzz_ruby_gems: Crash in ruby_init

Detailed Report: https://oss-fuzz.com/testcase?key=5956665756483584 Project: ruby Fuzzing Engine: centipede Fuzz Target: fuzzrubygems Job Type: centipedeasanruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fb045907a5b Crash State: rubyinit fuzzrubygems.c centipede::RunOneInput...

systemd:fuzz-journal-remote: Crash in log_set_max_level

Detailed Report: https://oss-fuzz.com/testcase?key=4601988397793280 Project: systemd Fuzzing Engine: centipede Fuzz Target: fuzz-journal-remote Job Type: centipedeasansystemd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x1dbd8d0ab0f1 Crash State: logsetmaxlevel fuzz-journal-remote....

libredwg:llvmfuzz: Heap-buffer-overflow in bit_read_BB

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6275476246364160 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

notary:FuzzVerify: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6362296380424192 Project: notary Fuzzing Engine: libFuzzer Fuzz Target: FuzzVerify Job Type: libfuzzerasannotary Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

OSV-2023-292 Use-after-poison in rb_gc_writebarrier

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57782 Crash type: Use-after-poison READ 8 Crash state: rbgcwritebarrier rbsetclasspathstring rbdefineclassidunder...

OSV-2023-284 Global-buffer-overflow in dwg_codepage_dxfstr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57723 Crash type: Global-buffer-overflow READ 8 Crash state: dwgcodepagedxfstr dxfheaderwrite dwgwritedxf...

OSV-2023-282 Heap-use-after-free in mrb_gc_mark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57703 Crash type: Heap-use-after-free READ 4 Crash state: mrbgcmark mrbgcmarkiv gcmarkchildren...

libraw:libraw_fuzzer: Use-of-uninitialized-value in LibRaw::getwords

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4788296361574400 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

WIMAX SWC-5100W Firmware V(1.11.0.1 :1.9.9.4) - Authenticated Remote Code Execution Exploit

Exploit Title: WIMAX SWC-5100W Firmware V1.11.0.1 :1.9.9.4 - Authenticated RCE Vulnerability Name: Ballin' Mada Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: http://www.seowonintech.co.kr/eng/main Version: Bootloader1.18.19.0 , HW 0.0.7.0, FW1.11.0.1 : 1.9.9.4 Tested on: Unix CVE :...

OSV-2023-281 Heap-buffer-overflow in unsigned long simdutf::haswell::convert_masked_utf8_to_utf16<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57673 Crash type: Heap-buffer-overflow WRITE 16 Crash state: unsigned long simdutf::haswell::convertmaskedutf8toutf16 simdutf::haswell::implementation::convertutf8toutf16le roundtrip.cc...

OSV-2023-280 Heap-use-after-free in mrb_str_hash_m

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57672 Crash type: Heap-use-after-free READ 1 Crash state: mrbstrhashm mrbvmexec mrbvmrun...

OSV-2023-279 Heap-use-after-free in filename_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57678 Crash type: Heap-use-after-free READ 3 Crash state: filenamecmp debugstartsource parsestab...

OSV-2023-278 Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_utf32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57670 Crash type: Heap-buffer-overflow WRITE Crash state: simdutf::haswell::implementation::convertutf8toutf32 roundtrip.cc...