OSV-2022-39 Stack-buffer-overflow in BZ2_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43564 Crash type: Stack-buffer-overflow READ 1 Crash state: BZ2decompress BZ2bzDecompress ftbzip2filefilloutput...

imagemagick:encoder_png32_fuzzer: Index-out-of-bounds in cmsReadTag

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5239561779806208 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpng32fuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash...

md4c:fuzz-mdhtml: Heap-buffer-overflow in md_decode_utf8__

Project: https://github.com/mity/md4c.git Detailed Report: https://oss-fuzz.com/testcase?key=5161754722697216 Project: md4c Fuzzing Engine: honggfuzz Fuzz Target: fuzz-mdhtml Job Type: honggfuzzasanmd4c Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000000ba Crash...

OSV-2022-37 Heap-buffer-overflow in stringProcess

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43535 Crash type: Heap-buffer-overflow READ 1 Crash state: stringProcess tVariantCreateExt tVariantCreate...

OSV-2022-36 Heap-buffer-overflow in void absl::BytesToHexStringInternal<std::__1::basic_string<char, std::__1::char_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43553 Crash type: Heap-buffer-overflow READ 1 Crash state: void absl::BytesToHexStringInternalstd::1::basicstringchar, std::1::char absl::BytesToHexString...

freetype2:bzip2: Stack-buffer-overflow in BZ2_decompress

Detailed Report: https://oss-fuzz.com/testcase?key=4524321446428672 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: bzip2 Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fff9bceb706 Crash State: BZ2decompress BZ2bzDecompress...

dav1d:dav1d_fuzzer_mt: Use-of-uninitialized-value in dav1d_get_cpu_flags_x86

Project: https://code.videolan.org/videolan/dav1d.git Detailed Report: https://oss-fuzz.com/testcase?key=4904312235491328 Project: dav1d Fuzzing Engine: libFuzzer Fuzz Target: dav1dfuzzermt Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

OSV-2022-34 Heap-buffer-overflow in LZ4_decompress_safe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43513 Crash type: Heap-buffer-overflow READ 16 Crash state: LZ4decompresssafe bloscd dojob...

OSV-2022-33 Heap-buffer-overflow in ndlz8_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43519 Crash type: Heap-buffer-overflow READ 8 Crash state: ndlz8decompress bloscd dojob...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::FileFormatDecompress::apply_palette_clr

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=6229625057968128 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

php:php-fuzz-tracing-jit: Segv on unknown address in zero

Detailed Report: https://oss-fuzz.com/testcase?key=5098168402968576 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-tracing-jit Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: zero zendexecute fuzzerdorequestfrombuffer...

OSV-2022-32 Heap-buffer-overflow in _estrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43484 Crash type: Heap-buffer-overflow READ 11 Crash state: estrdup exifprocessusercomment exifprocessIFDTAGimpl...

OSV-2022-31 Heap-buffer-overflow in md_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43473 Crash type: Heap-buffer-overflow READ 1 Crash state: mdparse mdhtml fuzz-mdhtml.c...

PT-2022-36916

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the md parse and md html functions, specifically in the fuzz-mdhtml.c file. No...

elfutils:fuzz-dwfl-core: Use-of-uninitialized-value in handle_file_note

Detailed Report: https://oss-fuzz.com/testcase?key=5344860645752832 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-dwfl-core Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: handlefilenote dwflsegmentreportmodule...

md4c:fuzz-mdhtml: Heap-buffer-overflow in md_parse

Detailed Report: https://oss-fuzz.com/testcase?key=5469403431436288 Project: md4c Fuzzing Engine: honggfuzz Fuzz Target: fuzz-mdhtml Job Type: honggfuzzasanmd4c Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000bb Crash State: mdparse mdhtml fuzz-mdhtml.c...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in ParseSegmentMobileH

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=6560784258301952 Project: inchi Fuzzing Engine: afl Fuzz Target: inchiinputfuzzer Job Type: aflasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000001f2...

OSV-2022-24 Null-dereference READ in session_startup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43419 Crash type: Null-dereference READ Crash state: sessionstartup libssh2sessionhandshake ssh2clientfuzzer.cc...

binutils:fuzz_objdump: Heap-buffer-overflow in evax_bfd_print_dst

Detailed Report: https://oss-fuzz.com/testcase?key=6551914504912896 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000b5 Crash State: evaxbfdprintdst evaxbfdprintimage...

imagemagick:encoder_qoi_fuzzer: Heap-buffer-overflow in ReadQOIImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4510216379564032 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderqoifuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4...