ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_h323

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5258804877459456 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000000f9...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in internal_huf_decompress

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=6627441303486464 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow RE...

php:php-fuzz-exif: Heap-buffer-overflow in _estrdup

Detailed Report: https://oss-fuzz.com/testcase?key=5047977448701952 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 15 Crash Address: 0x60300042692e Crash State: estrdup exifprocessusercomment...

What is fuzz testing? What is it used to test for?

Fuzz testing, regularly known as fuzzing, is a product testing procedure that incorporates embedding flawed or arbitrary information FUZZ into a product framework to recognize coding issues and security issues. Fuzz testing involves infusing information into a framework utilizing robotized or...

imagemagick:encoder_label_fuzzer: Heap-buffer-overflow in InterpolatePixelChannel

Detailed Report: https://oss-fuzz.com/testcase?key=6537505778827264 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderlabelfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60a000005e34 Crash State:...

OSV-2022-55 Heap-buffer-overflow in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43687 Crash type: Heap-buffer-overflow READ 1 Crash state: ndlz4decompress ndlzdecompress bloscd...

OSV-2021-1803 UNKNOWN READ in chunk_obj_alloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43680 Crash type: UNKNOWN READ Crash state: chunkobjalloc chunkallocbytes cmapendfbrangefunc...

envoy:h1_capture_persistent_fuzz_test: Crash in Envoy::IntegrationTestServerImpl::~IntegrationTestServerImpl

Detailed Report: https://oss-fuzz.com/testcase?key=6320245042708480 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: h1capturepersistentfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f1906a74de0 Crash State:...

gstreamer:gst-discoverer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5115101261201408 Project: gstreamer Fuzzing Engine: libFuzzer Fuzz Target: gst-discoverer Job Type: libfuzzerubsangstreamer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fa400000002 Crash State: NULL Sanitizer: undefined UBSAN...

OSV-2022-51 Negative-size-param in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43671 Crash type: Negative-size-param Crash state: ndlz4decompress ndlzdecompress bloscd...

OSV-2022-48 Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43664 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processTLSBlock ndpisearchtlsudp...

freetype2:cff-render-ftengine: Use-of-uninitialized-value in ps_hints_apply

Detailed Report: https://oss-fuzz.com/testcase?key=5462525913726976 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: cff-render-ftengine Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pshintsapply...

ndpi:fuzz_process_packet: Heap-buffer-overflow in processClientServerHello

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5682551937695744 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60c0000005fa...

OSV-2021-1802 UNKNOWN READ in pdfi_count_cff_index

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43599 Crash type: UNKNOWN READ Crash state: pdficountcffindex pdfireadcfffont pdfiloadfont...

md4c:fuzz-mdhtml: Crash in md_build_attribute

Project: https://github.com/mity/md4c.git Detailed Report: https://oss-fuzz.com/testcase?key=6602397969940480 Project: md4c Fuzzing Engine: libFuzzer Fuzz Target: fuzz-mdhtml Job Type: libfuzzerubsanmd4c Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000213c000 Crash State:...

libbpf:bpf-object-fuzzer: Crash in bpf_object_open

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6679144220459008 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasani386libbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00fa0000 Crash...

libressl:asn1parse: Heap-buffer-overflow in asn1_parse2

Project: https://github.com/libressl-portable/portable.git Detailed Report: https://oss-fuzz.com/testcase?key=5664610332573696 Project: libressl Fuzzing Engine: libFuzzer Fuzz Target: asn1parse Job Type: libfuzzerasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

OSV-2022-42 Heap-buffer-overflow in md_decode_utf8__

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43589 Crash type: Heap-buffer-overflow READ 1 Crash state: mddecodeutf8 mdlinklabelhash mdislinkreference...

OSV-2022-41 Segv on unknown address in zero

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43538 Crash type: Segv on unknown address Crash state: zero zendexecute fuzzerdorequestfrombuffer...

OSV-2022-40 UNKNOWN READ in md_build_attribute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43587 Crash type: UNKNOWN READ Crash state: mdbuildattribute mdenterleavespana mdprocessnormalblockcontents...