libaom:av1_dec_fuzzer: Heap-buffer-overflow in row_mt_worker_hook

Detailed Report: https://oss-fuzz.com/testcase?key=5555611524268032 Project: libaom Fuzzing Engine: honggfuzz Fuzz Target: av1decfuzzer Job Type: honggfuzzasanlibaom Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x613000000aa8 Crash State: rowmtworkerhook threadloop...

imagemagick:ping_mvg_fuzzer: Heap-buffer-overflow in DrawPolygonPrimitive

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5549654337519616 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: pingmvgfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

clamav:clamav_scanmap_HTML_fuzzer: Heap-buffer-overflow in cli_js_parse_done

Detailed Report: https://oss-fuzz.com/testcase?key=6652896370884608 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavscanmapHTMLfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x629000004218 Crash State: clijsparsedone clihtmlnormalis...

bitcoin-core:script: Use-of-uninitialized-value in decltype

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=5089263128018944 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: script Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

OSV-2022-165 Stack-buffer-overflow in fmt::v8::basic_memory_buffer<unsigned int, 32ul, std::__1::allocator<unsigned in

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44763 Crash type: Stack-buffer-overflow READ 4 Crash state: fmt::v8::basicmemorybufferunsigned int, 32ul, std::1::allocatorunsigned in fmt::v8::detail::bigint::square fmt::v8::detail::bigint::assignpow10...

fmt:one-arg-fuzzer: Stack-buffer-overflow in fmt::v8::basic_memory_buffer<unsigned int, 32ul, std::__1::allocator<unsigned in

Project: https://github.com/fmtlib/fmt.git Detailed Report: https://oss-fuzz.com/testcase?key=4801828213096448 Project: fmt Fuzzing Engine: libFuzzer Fuzz Target: one-arg-fuzzer Job Type: libfuzzerasanfmt Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7ffcdf0b9e70...

OSV-2022-158 Heap-buffer-overflow in parse_primitive

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44695 Crash type: Heap-buffer-overflow READ 1 Crash state: parseprimitive plistfromjson jplistfuzzer.cc...

graphicsmagick:coder_DCM_fuzzer: Use-of-uninitialized-value in jp2_box_get

Detailed Report: https://oss-fuzz.com/testcase?key=5681149173694464 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderDCMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jp2boxget jp2decode...

opencv:core_fuzzer: Incorrect-function-pointer-type in cv::split

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=5696253281828864 Project: opencv Fuzzing Engine: libFuzzer Fuzz Target: corefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Crash...

OSV-2022-152 UNKNOWN WRITE

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44641 Crash type: UNKNOWN WRITE Crash state: NULL...

libplist:jplist_fuzzer: Heap-buffer-overflow in parse_primitive

Project: https://github.com/libimobiledevice/libplist.git Detailed Report: https://oss-fuzz.com/testcase?key=5137847689019392 Project: libplist Fuzzing Engine: libFuzzer Fuzz Target: jplistfuzzer Job Type: libfuzzerasanlibplist Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

OSV-2022-151 Heap-buffer-overflow in extensionObjectOrder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44623 Crash type: Heap-buffer-overflow READ 4 Crash state: extensionObjectOrder extensionObjectOrder extensionObjectOrder...

OSV-2022-150 Heap-buffer-overflow in coap_split_uri_sub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44611 Crash type: Heap-buffer-overflow READ 1 Crash state: coapspliturisub coapgeturipath...

libyang:lyd_parse_mem_json: Heap-buffer-overflow in lydjson_nested_ext

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=5483535966797824 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememjson Job Type: libfuzzerasanlibyang Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

open62541:fuzz_json_decode_encode: Heap-buffer-overflow in extensionObjectOrder

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5663845975195648 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzjsondecodeencode Job Type: aflasanopen62541 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

OSV-2021-1807 Heap-use-after-free in dhcp6_no_relay

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44573 Crash type: Heap-use-after-free WRITE 1 Crash state: dhcp6norelay dhcp6mayberelay dhcp6mayberelay...

OSV-2022-146 Stack-use-after-scope in tag_cfa_pattern::Put

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44590 Crash type: Stack-use-after-scope READ 1 Crash state: tagcfapattern::Put dngtiffdirectory::Put dngimagewriter::WriteTIFFWithProfile...

OSV-2022-145 Heap-buffer-overflow in print_mac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44581 Crash type: Heap-buffer-overflow WRITE 4 Crash state: printmac logpacket dhcpreply...

OSV-2022-144 Segv on unknown address in onig_free_body

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44603 Crash type: Segv on unknown address Crash state: onigfreebody onignew flbregexcreate...

OSV-2022-142 Heap-use-after-free in archive_read_format_rar_read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44547 Crash type: Heap-use-after-free READ 4 Crash state: archivereadformatrarreaddata archivereaddata libarchivefuzzer.cc...