OSV-2022-308 Null-dereference READ in ubsan_GetStackTrace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46341 Crash type: Null-dereference READ Crash state: ubsanGetStackTrace...

PT-2022-36914

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided input. Description The issue is related to a null-dereference read crash, as indicated by the OSS-Fuzz report. The crash state includes a call to ubsan GetStackTrace, suggesting an...

libvips:webpsave_buffer_fuzzer: Heap-use-after-free in save_marker

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=6427211915198464 Project: libvips Fuzzing Engine: afl Fuzz Target: webpsavebufferfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-use-after-free WRITE 1 Crash Address:...

dnsmasq:fuzz_dhcp: Heap-buffer-overflow in dhcp_reply

Detailed Report: https://oss-fuzz.com/testcase?key=5341114007158784 Project: dnsmasq Fuzzing Engine: honggfuzz Fuzz Target: fuzzdhcp Job Type: honggfuzzasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6160000005a4 Crash State: dhcpreply dhcppacket FuzzDhcp...

OSV-2022-303 Heap-use-after-free in start_pass_phuff_decoder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46338 Crash type: Heap-use-after-free WRITE 4 Crash state: startpassphuffdecoder startinputpass jinitmasterdecompress...

OSV-2022-302 Heap-use-after-free in read_markers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46334 Crash type: Heap-use-after-free READ 4 Crash state: readmarkers consumemarkers jpegconsumeinput...

libvips:gifsave_buffer_fuzzer: Heap-use-after-free in jpeg_fill_bit_buffer

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5252884758921216 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: gifsavebufferfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address:...

libvips:webpsave_buffer_fuzzer: Heap-use-after-free in decode_mcu

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=4927616265617408 Project: libvips Fuzzing Engine: honggfuzz Fuzz Target: webpsavebufferfuzzer Job Type: honggfuzzasanlibvips Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address:...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in Imf_3_1::memstream_read

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5394457752633344 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow RE...

OSV-2022-296 Negative-size-param in jxl::N_SSE4::BlendingStage::ProcessPaddingRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46243 Crash type: Negative-size-param Crash state: jxl::NSSE4::BlendingStage::ProcessPaddingRow jxl::LowMemoryRenderPipeline::RenderPadding jxl::LowMemoryRenderPipeline::ProcessBuffers...

libarchive:libarchive_fuzzer: Heap-use-after-free in read_data_compressed

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=4506723929423872 Project: libarchive Fuzzing Engine: afl Fuzz Target: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

OSV-2022-295 Use-of-uninitialized-value in unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46241 Crash type: Use-of-uninitialized-value Crash state: unsigned long grk::NSSE4::vscheduler std::1::function::funcunsigned long grk::NSSE4::vschedulergrk::NSSE4:: tf::Executor::invoke...

OSV-2022-289 Heap-buffer-overflow in add_compile_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46086 Crash type: Heap-buffer-overflow READ 4 Crash state: addcompilestring compiletree compiletree...

sqlite3:ossfuzz: Use-of-uninitialized-value in sqlite3VdbeChangeEncoding

Detailed Report: https://oss-fuzz.com/testcase?key=5747350217293824 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sqlite3VdbeChangeEncoding sqlite3VdbeExec...

sqlite3:ossfuzz: Use-of-uninitialized-value in setResultStrOrError

Detailed Report: https://oss-fuzz.com/testcase?key=5313340013936640 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: setResultStrOrError printfFunc sqlite3VdbeExec...

sqlite3:ossfuzz: Use-of-uninitialized-value in sqlite3VdbeChangeEncoding

Detailed Report: https://oss-fuzz.com/testcase?key=4546929305976832 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sqlite3VdbeChangeEncoding sqlite3resultvalue...

elfutils:fuzz-libelf: Use-of-uninitialized-value in elf_compress_gnu

Detailed Report: https://oss-fuzz.com/testcase?key=6467719510228992 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libelf Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: elfcompressgnu fuzzlogicone fuzz-libelf.c...

elfutils:fuzz-libdwfl: Use-of-uninitialized-value in elf_compress_gnu

Detailed Report: https://oss-fuzz.com/testcase?key=4725021634854912 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: elfcompressgnu checksection dwarfbeginelf...

OSV-2022-284 Heap-double-free in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46019 Crash type: Heap-double-free Crash state: readconfig readglob readconfig...

OSV-2022-282 Heap-buffer-overflow in cosm_new_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46002 Crash type: Heap-buffer-overflow WRITE 1 Crash state: cosmnewfile epassNUMBERpkcs15generatekey scpkcs15initgeneratekey...