tinygltf:fuzz_gltf: Command injection in std::__Fuzzer::condition_variable::wait

Detailed Report: https://oss-fuzz.com/testcase?key=4507566050246656 Project: tinygltf Fuzzing Engine: libFuzzer Fuzz Target: fuzzgltf Job Type: libfuzzerasantinygltf Platform Id: linux Crash Type: Command injection Crash Address: Crash State: std::Fuzzer::conditionvariable::wait Sanitizer: addres...

wasmtime:table_ops: Heap-use-after-free in wasmtime_runtime::externref::VMExternData::drop_and_dealloc::h16a22f20001bc5da

Project: https://github.com/bytecodealliance/wasmtime.git Detailed Report: https://oss-fuzz.com/testcase?key=4600104241201152 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: tableops Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address:...

github_scarecrow:scarecrow: Command injection with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5591770330693632 Project: githubscarecrow Fuzzing Engine: libFuzzer Fuzz Target: scarecrow Job Type: libfuzzerasangithubscarecrowtest Platform Id: linux Crash Type: Command injection Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

libssh:ssh_client_config_fuzzer: Command injection with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5371772710551552 Project: libssh Fuzzing Engine: libFuzzer Fuzz Target: sshclientconfigfuzzer Job Type: libfuzzerasanlibssh Platform Id: linux Crash Type: Command injection Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

wpantund:wpantund-fuzz: Command injection with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6701338624393216 Project: wpantund Fuzzing Engine: libFuzzer Fuzz Target: wpantund-fuzz Job Type: libfuzzerasanwpantund Platform Id: linux Crash Type: Command injection Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

imagemagick:encoder_ept2_fuzzer: Command injection with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6565282214182912 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderept2fuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Command injection Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

net-snmp:snmp_transport_fuzzer: Command injection with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6380153185370112 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmptransportfuzzer Job Type: libfuzzerubsannet-snmp Platform Id: linux Crash Type: Command injection Crash Address: Crash State: NULL Sanitizer: undefined UBSAN Crash...

OSV-2022-607 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49289 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2022-606 Heap-buffer-overflow in mrb_bint_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49282 Crash type: Heap-buffer-overflow READ 8 Crash state: mrbbintadd mrbintadd intadd...

OSV-2022-604 Stack-buffer-overflow in sc_asn1_read_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49248 Crash type: Stack-buffer-overflow READ 1 Crash state: scasn1readtag scasn1findtag cardoslistfiles...

OSV-2022-603 Heap-buffer-overflow in mrb_vm_exec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49259 Crash type: Heap-buffer-overflow WRITE 8 Crash state: mrbvmexec mrbvmrun mrbtoprun...

OSV-2022-601 Heap-buffer-overflow in mrb_bint_xor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49255 Crash type: Heap-buffer-overflow READ 8 Crash state: mrbbintxor intxor mrbvmexec...

OSV-2022-600 Segv on unknown address in mrb_bint_to_s

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49269 Crash type: Segv on unknown address Crash state: mrbbinttos mrbintegertostr inttos...

OSV-2022-599 Use-of-uninitialized-value in mrb_bint_as_int

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49268 Crash type: Use-of-uninitialized-value Crash state: mrbbintasint mrbensureinttype mrbgetargs...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Heap-buffer-overflow in sao_filter_CTB

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5424984922652672 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_bint_xor

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4796845888503808 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyfuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x609000012b38...

OSV-2022-598 Heap-buffer-overflow in get_symbols_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49209 Crash type: Heap-buffer-overflow READ 8 Crash state: getsymbols64 getmain64 binsym...

OSV-2022-597 Heap-use-after-free in .tmpgt0oOx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49167 Crash type: Heap-use-after-free READ 8 Crash state: .tmpgt0oOx .tmpgt0oOx wasmtimesetjmp...

OSV-2022-595 Stack-buffer-overflow in Lookup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49227 Crash type: Stack-buffer-overflow WRITE Crash state: Lookup LookupLetter TranslateLetter...

OSV-2022-590 Heap-use-after-free in .tmpoLlNv4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49166 Crash type: Heap-use-after-free READ 8 Crash state: .tmpoLlNv4 .tmpoLlNv4 wasmtimesetjmp...