OSV-2022-257 Segv on unknown address in flb_config_map_properties_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45670 Crash type: Segv on unknown address Crash state: flbconfigmappropertiescheck configmapfuzzer.c...

OSV-2022-255 Heap-double-free in flb_pack_state_reset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45667 Crash type: Heap-double-free Crash state: flbpackstatereset packjsonstatefuzzer.c flbpackstateinit...

OSV-2022-254 Heap-use-after-free in jsmn_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45651 Crash type: Heap-use-after-free WRITE 4 Crash state: jsmnparse flbjsontokenise flbpackjsonstate...

ffmpeg:ffmpeg_BSF_VP9_SUPERFRAME_fuzzer: Heap-buffer-overflow in vp9_superframe_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5173378975137792 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegBSFVP9SUPERFRAMEfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

elfutils:fuzz-libdwfl: Use-of-uninitialized-value in process_file

Detailed Report: https://oss-fuzz.com/testcase?key=5736328928559104 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: processfile processfile dwflreportoffline...

OSV-2022-252 Heap-buffer-overflow in grk::PacketLengthMarkers::readPLM

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45622 Crash type: Heap-buffer-overflow READ 1 Crash state: grk::PacketLengthMarkers::readPLM grk::CodeStreamDecompress::processmarker grk::CodeStreamDecompress::readHeaderProcedureImpl...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-double-free in read_config

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5844602366590976 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-double-free...

fluent-bit:flb-it-fuzz-config_map_fuzzer_OSSFUZZ: Segv on unknown address in flb_config_map_properties_check

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5072466567888896 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configmapfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Segv on unknown...

fluent-bit:flb-it-fuzz-pack_json_state_fuzzer_OSSFUZZ: Heap-double-free in flb_pack_state_reset

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4907879998554112 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-packjsonstatefuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-double-free...

fluent-bit:flb-it-fuzz-record_ac_fuzzer_OSSFUZZ: Segv on unknown address in flb_ra_create

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5948759685595136 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-recordacfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Segv on unknown addre...

elfutils:fuzz-libdwfl: Use-of-uninitialized-value in find_debuginfo_in_path

Detailed Report: https://oss-fuzz.com/testcase?key=5859104961200128 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: finddebuginfoinpath...

elfutils:fuzz-libdwfl: Crash in read_long_names

Detailed Report: https://oss-fuzz.com/testcase?key=5787862593830912 Project: elfutils Fuzzing Engine: afl Fuzz Target: fuzz-libdwfl Job Type: aflasanelfutils Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x7fdae5ef5000 Crash State: readlongnames libelfnextarhdrwrlock dupelf Sanitizer:...

elfutils:fuzz-libdwfl: Use-of-uninitialized-value in __libelf_read_mmaped_file

Detailed Report: https://oss-fuzz.com/testcase?key=6298551989174272 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: libelfreadmmapedfile elfmemory decompress...

elfutils:fuzz-libdwfl: Use-of-uninitialized-value in __libdw_gunzip

Detailed Report: https://oss-fuzz.com/testcase?key=5742116662280192 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: libdwgunzip decompress libdwopenelf...

elfutils:fuzz-libelf: Use-of-uninitialized-value in validate_str

Detailed Report: https://oss-fuzz.com/testcase?key=5658767587409920 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libelf Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: validatestr elfstrptr fuzzlogicone...

elfutils:fuzz-libdwfl: Heap-buffer-overflow in strtol

Detailed Report: https://oss-fuzz.com/testcase?key=4673586076450816 Project: elfutils Fuzzing Engine: honggfuzz Fuzz Target: fuzz-libdwfl Job Type: honggfuzzasanelfutils Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7fffe2c93000 Crash State: strtol libelfnextarhdrwrloc...

OSV-2022-250 Heap-buffer-overflow in __covrec_1D46B478ANUMBER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45603 Crash type: Heap-buffer-overflow READ 1 Crash state: covrec1D46B478ANUMBER covrecF49D057CNUMBER covrec5D82FD3F85773DBDu...

OSV-2022-249 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45591 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::EvaluateValue...

freeradius:fuzzer_dhcpv4: Heap-buffer-overflow in __covrec_1D46B478ANUMBER

Detailed Report: https://oss-fuzz.com/testcase?key=6711548259729408 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdhcpv4 Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x611000001177 Crash State: covrec1D46B478ANUMBER...

Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities to the best of our knowledge.

...