hunspell:affdicfuzzer: Heap-use-after-free in HashMgr::add_word

Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=4826079711068160 Project: hunspell Fuzzing Engine: libFuzzer Fuzz Target: affdicfuzzer Job Type: libfuzzerasanhunspell Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...

binutils:fuzz_objdump_safe: Heap-buffer-overflow in bfd_coff_reloc16_get_relocated_section_contents

Detailed Report: https://oss-fuzz.com/testcase?key=5390549143388160 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzobjdumpsafe Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60c0000003c0 Crash State:...

wireshark:fuzzshark_ip_proto-udp: Crash in dissect_oran_c_section

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=4695723494211584 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux...

OSV-2023-151 UNKNOWN READ in mrb_vm_find_method

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56687 Crash type: UNKNOWN READ Crash state: mrbvmfindmethod mrbvmexec mrbvmrun...

OSV-2023-137 Heap-buffer-overflow in OT::Layout::Common::Coverage::get_population

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56510 Crash type: Heap-buffer-overflow READ 1 Crash state: OT::Layout::Common::Coverage::getpopulation OT::Layout::GPOSimpl::SinglePosFormat1::sanitize hbsanitizecontextt::returnt OT::Layout::GPOSimpl::PosLookupSubTable::dispa...

OSV-2023-135 Heap-buffer-overflow in json_cquote

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56473 Crash type: Heap-buffer-overflow READ 1 Crash state: jsoncquote dwgjsonLTYPE jsonobjectswrite...

libdwarf:fuzz_findfuncbypc: Heap-use-after-free in dwarf_attrlist

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=6272642689925120 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzfindfuncbypc Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

cri-o:fuzz_generate_passwd: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6216399287877632 Project: cri-o Fuzzing Engine: libFuzzer Fuzz Target: fuzzgeneratepasswd Job Type: libfuzzerasancri-o Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

Project: https://github.com/spring-projects/spring-data-mongodb.git Detailed Report: https://oss-fuzz.com/testcase?key=5909008059072512 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linu...

harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in OT::Layout::Common::Coverage::get_population

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5120727025319936 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libdwarf:fuzz_die_cu_offset: Heap-use-after-free in dwarf_attrlist

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5866690199289856 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzdiecuoffset Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in hb-subset-fuzzer.cc

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5222130632753152 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

OSV-2023-119 Use-of-uninitialized-value in rename_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56401 Crash type: Use-of-uninitialized-value Crash state: renameprocess safeforkfull parsetimestamp...

OSV-2023-118 Heap-use-after-free in mrb_gc_mark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56406 Crash type: Heap-use-after-free READ 4 Crash state: mrbgcmark mrbgcmarkiv gcmarkchildren...

OSV-2023-117 Heap-buffer-overflow in isvcd_nal_byte_swap_emulation

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56386 Crash type: Heap-buffer-overflow WRITE 4 Crash state: isvcdnalbyteswapemulation isvcdnalparsenonvclnal isvcdpreparserefineau...

OSV-2023-116 Security exception in org.codehaus.janino.Parser.parseUnaryExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56367 Crash type: Security exception Crash state: org.codehaus.janino.Parser.parseUnaryExpression java.base/java.nio.ByteBuffer.limit java.base/java.nio.Buffer...

mruby:mruby_proto_fuzzer: Heap-use-after-free in mrb_gc_mark

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5931151182397440 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x62f00001c5...

flac:fuzzer_tool_flac: Stack-buffer-overflow in dump_stats

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=4839661043580928 Project: flac Fuzzing Engine: afl Fuzz Target: fuzzertoolflac Job Type: aflasanflac Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7fffce05161c Crash State:...

caddy:fuzz-replacer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5581786832044032 Project: caddy Fuzzing Engine: libFuzzer Fuzz Target: fuzz-replacer Job Type: libfuzzerasancaddy Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

wolfssl:fuzzer-wolfssl-ocsp: Heap-buffer-overflow in DecodeBasicOcspResponse

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4536341141782528 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-ocsp Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...