protobuf-java has a potential Denial of Service issue

Summary A potential Denial of Service issue in protobuf-java core and lite was discovered in the parsing procedure for binary and text format data. Input streams containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted...

graphicsmagick:coder_ICB_fuzzer: Heap-buffer-overflow in ReadBlob

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6148981382316032 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderICBfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

junrar:JunrarFuzzer: Security exception in com.github.junrar.io.RawDataIo.read

Project: https://github.com/junrar/junrar.git Detailed Report: https://oss-fuzz.com/testcase?key=6063114919739392 Project: junrar Fuzzing Engine: libFuzzer Fuzz Target: JunrarFuzzer Job Type: libfuzzerasanjunrar Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

libucl:ucl_add_string_fuzzer: Segv on unknown address in kh_get_ucl_hash_caseless_node

Detailed Report: https://oss-fuzz.com/testcase?key=5487912297037824 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: khgetuclhashcaselessnode uclhashsearch...

OSV-2022-1008 Heap-buffer-overflow in cli_js_parse_done

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52038 Crash type: Heap-buffer-overflow READ 4 Crash state: clijsparsedone clihtmlnormalise htmlnormalisemap...

PT-2022-36659 · Git +1 · Haproxy

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the parse line function, which is called by readcfgfile in the fuzz cfg parser...

ruby:fuzz_ruby_gems: Use-after-poison in /mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_ruby_e5a0a396033f4deba21

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4999828282671104 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzrubygems Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x7fcf2a184bf0 Crash...

haproxy:fuzz_cfg_parser: Heap-buffer-overflow in parse_line

Project: https://github.com/haproxy/haproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=4952538231472128 Project: haproxy Fuzzing Engine: afl Fuzz Target: fuzzcfgparser Job Type: aflasanhaproxy Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x619000000b14 Cra...

clamav:clamav_scanmap_HTML_fuzzer: Heap-buffer-overflow in cli_js_parse_done

Detailed Report: https://oss-fuzz.com/testcase?key=4930132712488960 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavscanmapHTMLfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62d000008428 Crash State: clijsparsedone...

golang:gzip_fuzzer: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4859783678656512 Project: golang Fuzzing Engine: libFuzzer Fuzz Target: gzipfuzzer Job Type: libfuzzerasangolang Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

lldpd:FuzzDecode: Heap-buffer-overflow in cdp_decode

Project: https://github.com/lldpd/lldpd.git Detailed Report: https://oss-fuzz.com/testcase?key=5097776644227072 Project: lldpd Fuzzing Engine: libFuzzer Fuzz Target: FuzzDecode Job Type: libfuzzerasanlldpd Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60c00000077c...

OSV-2022-1003 Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51965 Crash type: Index-out-of-bounds Crash state: LibRaw::ahdinterpolaterandbinrgbandconverttocielab LibRaw::ahdinterpolate LibRaw::dcrawprocess...

OSV-2022-1002 Segv on unknown address in upb_MiniTable_SetSubEnum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51950 Crash type: Segv on unknown address Crash state: upbMiniTableSetSubEnum upbMessageDefLinkMiniTable upbFileDefCreate...

OSV-2022-1001 Heap-buffer-overflow in SkRect::setBoundsCheck

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51933 Crash type: Heap-buffer-overflow READ 8 Crash state: SkRect::setBoundsCheck SkEdgeClipper::clipCubic SkEdgeClipper::ClipPath...

fabric:fuzz_persistence: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5768617752395776 Project: fabric Fuzzing Engine: libFuzzer Fuzz Target: fuzzpersistence Job Type: libfuzzerasanfabric Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreat...

logback:JoranFuzzer: Security exception with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5307463926939648 Project: logback Fuzzing Engine: libFuzzer Fuzz Target: JoranFuzzer Job Type: libfuzzerasanlogback Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL Sanitizer: address ASAN Recommended Security...

OSV-2022-996 Use-of-uninitialized-value in GrTriangulator::sanitizeContours

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51921 Crash type: Use-of-uninitialized-value Crash state: GrTriangulator::sanitizeContours GrTriangulator::contoursToPolys GrTriangulator::pathToPolys...

OSV-2022-994 Heap-buffer-overflow in onig_node_str_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51920 Crash type: Heap-buffer-overflow READ 4 Crash state: onignodestrcat parseexp parsebranch...

OSV-2022-993 Stack-use-after-return in check_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51910 Crash type: Stack-use-after-return READ 1 Crash state: checkbuffer rbingetbinpluginbybuffer rbinfilenewfrombuffer...

OSV-2022-988 Heap-buffer-overflow in onig_vsnprintf_with_pattern

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51934 Crash type: Heap-buffer-overflow READ 1 Crash state: onigvsnprintfwithpattern onigsyntaxwarn fetchtoken...