fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-buffer-overflow in add_compile_string

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5453878510616576 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type:...

OSV-2022-1129 UNKNOWN WRITE in Assimp::ObjFileMtlImporter::getFloatValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52935 Crash type: UNKNOWN WRITE Crash state: Assimp::ObjFileMtlImporter::getFloatValue Assimp::ObjFileMtlImporter::load Assimp::ObjFileMtlImporter::ObjFileMtlImporter...

skia-ftz:image_filter_deserialize_width: Heap-buffer-overflow in void SkMatrixConvolutionImageFilter::filterPixels<RepeatPixelFetcher>

Detailed Report: https://oss-fuzz.com/testcase?key=6273580669468672 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: imagefilterdeserializewidth Job Type: libfuzzerasanskia-ftz Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x61e000001770 Crash State: void...

OSV-2022-1126 Security exception in java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52922 Crash type: Security exception Crash state: java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString java.base/jdk.internal.math.FloatingDecimal.parseDouble java.base/java.lang.Double.parseDouble...

suricata:fuzz_mimedecparseline: Segv on unknown address in handleNonNullArg

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=6184332691898368 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzmimedecparseline Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: Segv on unknown address Crash Address: Cra...

graphicsmagick:coder_TXT_fuzzer: Stack-buffer-overflow in ReadBlobString

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6346635882135552 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderTXTfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1...

RUSTSEC-2022-0079 ELF header parsing library doesn't check for valid offset

The crate has several unsafe sections that don't perform proper pointer validation. An example can be found in the following function: fn sectionheaderraw&self - &ET::SectionHeader let shoff = self.elfheader.sectionheaderoffset as usize; let shnum = self.elfheader.sectionheaderentrynum as usize;...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Crash in renumber_by_map

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6677266440781824 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Cra...

OSV-2022-1122 Heap-buffer-overflow in LibRaw::phase_one_correct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52887 Crash type: Heap-buffer-overflow READ 4 Crash state: LibRaw::phaseonecorrect LibRaw::raw2imageex LibRaw::dcrawprocess...

OSV-2022-1121 Global-buffer-overflow in get_unpack_proc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52870 Crash type: Global-buffer-overflow READ 8 Crash state: getunpackproc xpsbegintypedimage epobegintypedimage...

OSV-2022-1120 Heap-use-after-free in xmlXIncludeDoProcess

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52869 Crash type: Heap-use-after-free READ 4 Crash state: xmlXIncludeDoProcess xmlXIncludeProcessNode xmlTextReaderRead...

OSV-2022-1119 Container-overflow in spvtools::opt::blockmergeutil::CanMergeWithSuccessor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52863 Crash type: Container-overflow READ 8 Crash state: spvtools::opt::blockmergeutil::CanMergeWithSuccessor std::1::function::funcspvtools::opt::BlockMergePass::Process spvtools::opt::IRContext::ProcessCallTreeFromRoots...

libraw:libraw_fuzzer: Heap-buffer-overflow in LibRaw::raw2image

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6170606026752000 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzerasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x62c0000074...

janino:ExpressionEvaluatorFuzzer: Security exception in org.codehaus.janino.Parser.parseInterfaceBody

Project: https://github.com/janino-compiler/janino.git Detailed Report: https://oss-fuzz.com/testcase?key=5364122653163520 Project: janino Fuzzing Engine: libFuzzer Fuzz Target: ExpressionEvaluatorFuzzer Job Type: libfuzzerasanjanino Platform Id: linux Crash Type: Security exception Crash Address...

OSV-2022-1118 Security exception in java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52840 Crash type: Security exception Crash state: java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString java.base/jdk.internal.math.FloatingDecimal.parseDouble java.base/java.lang.Double.parseDouble...

libxml2:xml: Heap-use-after-free in xmlXIncludeDoProcess

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5450069193392128 Project: libxml2 Fuzzing Engine: afl Fuzz Target: xml Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x615000181708 Crash Stat...

spirv-tools:spvtools_opt_performance_fuzzer: Container-overflow in spvtools::opt::blockmergeutil::CanMergeWithSuccessor

Project: https://github.com/KhronosGroup/SPIRV-Tools.git Detailed Report: https://oss-fuzz.com/testcase?key=4930214673383424 Project: spirv-tools Fuzzing Engine: honggfuzz Fuzz Target: spvtoolsoptperformancefuzzer Job Type: honggfuzzasanspirv-tools Platform Id: linux Crash Type: Container-overflo...

OSV-2022-1113 Heap-buffer-overflow in ForceZero

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52822 Crash type: Heap-buffer-overflow WRITE 8 Crash state: ForceZero BuildMessage SendFinished...

OSV-2022-1112 Heap-buffer-overflow in wmem_strbuf_append_vprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52797 Crash type: Heap-buffer-overflow READ Crash state: wmemstrbufappendvprintf wmemstrbufappendprintf dissectdibs...

OSV-2022-1111 Heap-buffer-overflow in expert_set_info_vformat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52814 Crash type: Heap-buffer-overflow READ Crash state: expertsetinfovformat expertaddinfoformat dissectrpcap...