OSV-2023-106 UNKNOWN WRITE in sudo_lbuf_append_quoted_v1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56278 Crash type: UNKNOWN WRITE Crash state: sudolbufappendquotedv1 sudoersformatmemberint sudoersformatmemberint...

OSV-2023-104 Heap-buffer-overflow in H5FS__sect_link

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56234 Crash type: Heap-buffer-overflow READ 8 Crash state: H5FSsectlink H5FSsectadd H5MFaddsect...

OSV-2023-102 Segv on unknown address in ndpi_free_flow_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56272 Crash type: Segv on unknown address Crash state: ndpifreeflowdata ndpifreeflow fuzzprocesspacket.c...

OSV-2023-101 Heap-use-after-free in pci_enum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56243 Crash type: Heap-use-after-free READ 4 Crash state: pcienum gptrarrayforeach genericfuzz...

PT-2023-35532 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash involves the functions ndpi free flow data and ndpi fr...

OSV-2023-98 Heap-buffer-overflow in sc_hsm_write_ef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56213 Crash type: Heap-buffer-overflow READ Crash state: schsmwriteef schsmupdatebinary scupdatebinary...

OSV-2023-96 Heap-buffer-overflow in load_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56208 Crash type: Heap-buffer-overflow READ 8 Crash state: loadbuffer rbinobjectnew rbinfilenewfrombuffer...

net-snmp:snmp_parse_oid_fuzzer: Global-buffer-overflow in __wrap_strlcpy

Detailed Report: https://oss-fuzz.com/testcase?key=4794118825181184 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpparseoidfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type: Global-buffer-overflow WRITE Crash Address: 0x00000a12ea60 Crash State: wrapstrlcpy...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::parse_tiff_ifd

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5842767634104320 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

PT-2023-36056 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of specif...

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5FS__sect_link

Detailed Report: https://oss-fuzz.com/testcase?key=6316269860421632 Project: hdf5 Fuzzing Engine: afl Fuzz Target: h5extendedfuzzer Job Type: aflasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x61d000003080 Crash State: H5FSsectlink H5FSsectadd H5MFaddsect...

hdf5:h5_extended_fuzzer: Use-of-uninitialized-value in H5FD__sec2_write

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=4925638772654080 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzermsanhdf5 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

OSV-2023-95 Use-of-uninitialized-value in isvcd_interpolate_residual_sse42

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56176 Crash type: Use-of-uninitialized-value Crash state: isvcdinterpolateresidualsse42 isvcdresidualsampmb isvcdprocessresidualresamplemb...

libavc:svc_dec_fuzzer: Heap-buffer-overflow in isvcd_reflayer_construction_dyadic

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=5103935095701504 Project: libavc Fuzzing Engine: afl Fuzz Target: svcdecfuzzer Job Type: aflasanlibavc Platform Id: linux Crash Type:...

radare2:ia_fuzz: Heap-buffer-overflow in load_buffer

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=4926031309176832 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

binutils:fuzz_as: Segv on unknown address in expandargv

Detailed Report: https://oss-fuzz.com/testcase?key=5954656347226112 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: expandargv gasearlyinit fuzzas.c Sanitizer: memory...

OSV-2023-92 UNKNOWN READ in var_Create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56141 Crash type: UNKNOWN READ Crash state: varCreate Open genericstart...

OSV-2023-90 Heap-buffer-overflow in LibRaw_buffer_datastream::scanf_one

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56160 Crash type: Heap-buffer-overflow READ 1 Crash state: LibRawbufferdatastream::scanfone LibRaw::parsemos LibRaw::parsetiffifd...

OSV-2023-89 Heap-buffer-overflow in H5O__mtime_new_encode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56143 Crash type: Heap-buffer-overflow WRITE 1 Crash state: H5Omtimenewencode H5Omsgflush H5Ochunkserialize...

OSV-2023-88 Stack-buffer-overflow in pdfi_read_cff_dict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56156 Crash type: Stack-buffer-overflow WRITE 1 Crash state: pdfireadcffdict pdfireadcffdict pdfireadcfffont...