gdal:zarr_fuzzer: Heap-buffer-overflow in ZarrArray::BlockTranspose

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5161103430123520 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: zarrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x604000006208 Cras...

OSV-2022-348 Heap-buffer-overflow in doemit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46692 Crash type: Heap-buffer-overflow WRITE 8 Crash state: doemit doinsert pere...

OSV-2022-347 Heap-buffer-overflow in cli_bcomp_freemeta

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46687 Crash type: Heap-buffer-overflow READ 8 Crash state: clibcompfreemeta clibcompaddpatt readdbparseldbsubsignature...

OSV-2022-346 Heap-buffer-overflow in cli_sigopts_handler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46680 Crash type: Heap-buffer-overflow READ 1 Crash state: clisigoptshandler readdbparseldbsubsignature loadoneldb...

OSV-2022-345 Stack-buffer-overflow in sc_hsm_list_files

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46679 Crash type: Stack-buffer-overflow READ Crash state: schsmlistfiles sclistfiles fuzzcard.c...

OSV-2022-344 Heap-use-after-free in init_tdb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46685 Crash type: Heap-use-after-free READ 4 Crash state: inittdb loadoneldb cliloadldb...

OSV-2022-343 Uncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46696 Crash type: Uncaught exception Crash state: com.alibaba.fastjson.JSONPath.getPropertyValue java.base/jdk.internal.math.FDBigInteger.multByPow52 java.base/jdk.internal.math.FloatingDecimal$ASCIIToBinaryBuffer.floatValue...

clamav:clamav_dbload_LDB_fuzzer: Heap-buffer-overflow in cli_bcomp_freemeta

Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=6653358552776704 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadLDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Addres...

OSV-2022-341 Heap-buffer-overflow in krb_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46670 Crash type: Heap-buffer-overflow READ 2 Crash state: krbparse ndpisearchkerberos checkndpidetectionfunc...

OSV-2022-340 Heap-buffer-overflow in cli_ac_addsig

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46646 Crash type: Heap-buffer-overflow READ 2 Crash state: cliacaddsig cliaddcontentmatchpattern readdbparseldbsubsignature...

OSV-2022-339 Heap-use-after-free in gc_trace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46672 Crash type: Heap-use-after-free READ 2 Crash state: gctrace gsgcreclaim ireclaim...

clamav:clamav_dbload_LDB_fuzzer: Heap-use-after-free in init_tdb

Detailed Report: https://oss-fuzz.com/testcase?key=6129967345303552 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadLDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6020000003b0 Crash State: inittdb loadoneldb...

opensc:fuzz_card: Stack-buffer-overflow in sc_hsm_list_files

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6579131418017792 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzcard Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ff9bd1c04a6...

libbpf:bpf-object-fuzzer: Heap-buffer-overflow in bpf_object__close

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6197297506025472 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasani386libbpf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

libxml2:xml: Use-of-uninitialized-value in xmlDictLookup

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=6679454857953280 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

OSV-2022-337 Heap-double-free in cli_extract_xlm_macros_and_images

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46586 Crash type: Heap-double-free Crash state: cliextractxlmmacrosandimages cliole2scantempdir climagicscan...

OSV-2022-331 Stack-buffer-overflow in void unwindstack::Symbols::BuildRemapTable<Elf64_Sym>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46546 Crash type: Stack-buffer-overflow READ Crash state: void unwindstack::Symbols::BuildRemapTable bool unwindstack::Symbols::GetName unwindstack::ElfInterfaceImpl::GetFunctionName...

OSV-2022-330 Stack-use-after-return in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46575 Crash type: Stack-use-after-return READ 1 Crash state: std::1::function::funcbool grk::WaveletReverse::decompresspartialtilei tf::Executor::invoke tf::Executor::consumetask...

jettison:JsonFuzzer: Timeout in JsonFuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=5287956102905856 Project: jettison Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjettison Platform Id: linux Crash Type: Timeout exceeds 60 secs Crash Address: Crash State: JsonFuzzer Sanitizer: address ASAN Recommended...

OSV-2022-327 Stack-use-after-return in QSemaphore::release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46525 The issue already existed before oss-fuzz could reproduce it. oss-fuzz found it after qdrawhelper routines were made multithreaded. There might be ways to trigger the issue before that. Crash type: Stack-use-after-return...