apache-commons-configuration:YAMLConfigurationReadFuzzer: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeKeyNode

Detailed Report: https://oss-fuzz.com/testcase?key=4727913183838208 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

OSV-2022-494 Heap-buffer-overflow in ucl_hash_search

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48156 Crash type: Heap-buffer-overflow READ 1 Crash state: uclhashsearch uclparserprocessobjectelement uclstatemachine...

Reachable Assertion in rulex

Impact When parsing untrusted rulex expressions, rulex may crash, possibly enabling a Denial of Service attack. This happens when the expression contains a multi-byte UTF-8 code point in a string literal or after a backslash, because rulex tries to slice into the code point and panics as a result...

imagemagick:encoder_tiff_fuzzer: Heap-buffer-overflow in ImportQuantumPixels

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4948253692526592 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encodertifffuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

Malicious code in mycompany-internal-fuzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b175d08bd24a3d400af6fc1ca424e6a7b1280d2b67759cc0bc3c5a8c02ca31e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4758 Malicious code in mycompany-internal-fuzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b175d08bd24a3d400af6fc1ca424e6a7b1280d2b67759cc0bc3c5a8c02ca31e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OSV-2022-492 Heap-buffer-overflow in jxl::BitsCoder::Read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48123 Crash type: Heap-buffer-overflow READ 8 Crash state: jxl::BitsCoder::Read jxl::ReadVisitor::Bits jxl::jpeg::JPEGData::VisitFields...

envoy:health_check_fuzz_test: Invalid-free in std::__1::__function::__func<testing::internal::InvokeWithoutArgsAction<Envoy::U

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=6561991256309760 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: healthcheckfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Invalid-free Crash Address: 0x625000002328 Cra...

OSV-2022-490 Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48060 Crash type: Stack-buffer-overflow READ 4 Crash state: spvtools::opt::CompositeInsertToCompositeConstruct std::1::function::funcbool spvtools::opt::InstructionFolder::FoldInstructionInternal...

OSV-2022-489 Heap-buffer-overflow in fr_size_from_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48069 Crash type: Heap-buffer-overflow READ 1 Crash state: frsizefromstr frvalueboxfromsubstr frvalueboxfromstr...

OSV-2022-487 Heap-use-after-free in duckdb::Planner::CreatePlan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48062 Crash type: Heap-use-after-free READ 1 Crash state: duckdb::Planner::CreatePlan duckdb::Planner::CreatePlan duckdb::ClientContext::CreatePreparedStatement...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in fixup_pcap_pkthdr

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4792786383142912 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

freeradius:fuzzer_util: Heap-buffer-overflow in fr_size_from_str

Detailed Report: https://oss-fuzz.com/testcase?key=5084245749530624 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerutil Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000b2 Crash State: frsizefromstr...

OSV-2022-484 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48043 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...

OSV-2022-483 Heap-buffer-overflow in ndpi_search_dns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48034 Crash type: Heap-buffer-overflow READ 4 Crash state: ndpisearchdns checkndpidetectionfunc ndpicheckflowfunc...

OSV-2022-481 UNKNOWN READ in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48020 Crash type: UNKNOWN READ Crash state: ndpistrdup processndpicollectedinfo ndpiworkflowprocesspacket...

OSV-2022-480 Heap-buffer-overflow in jxl::JxlBoxContentDecoder::Process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48029 Crash type: Heap-buffer-overflow READ Crash state: jxl::JxlBoxContentDecoder::Process HandleBoxes JxlDecoderProcessInput...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_dns

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6302506059169792 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6040000000bf Crash State...

OSV-2022-478 Segv on unknown address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48005 Crash type: Segv on unknown address Crash state: NULL...

ndpi:fuzz_ndpi_reader: Crash in ndpi_strdup

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5684540242264064 Project: ndpi Fuzzing Engine: honggfuzz Fuzz Target: fuzzndpireader Job Type: honggfuzzasanndpi Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000353820 Crash State:...