libssh2:ssh2_client_fuzzer: Null-dereference READ in session_startup

Project: https://github.com/cmeister2/libssh2.git https://github.com/libssh2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=6102905738887168 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerasanlibssh2 Platform Id: linux Crash Type:...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::IOSystem2Unzip::opendisk

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4925607018889216 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

vlc:vlc-demux-dec-libfuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5453819813691392 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerubsanvlc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x02e1ffa00020 Crash State: NULL Sanitizer: undefined UBSAN...

OSV-2022-17 Heap-buffer-overflow in ap_is_chunked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43371 Crash type: Heap-buffer-overflow READ 1 Crash state: apischunked fuzzutils.c...

OSV-2022-16 UNKNOWN READ in MqttProps_Free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43370 Crash type: UNKNOWN READ Crash state: MqttPropsFree MqttClientDecodePacket MqttClientWaitType...

OSV-2022-15 Global-buffer-overflow in ZSTD_compressBlock_opt0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43365 Crash type: Global-buffer-overflow READ 1 Crash state: ZSTDcompressBlockopt0 ZSTDcompressBlockbtopt ZSTDbuildSeqStore...

PT-2022-36840

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue was identified, as reported by OSS-Fuzz. The crash type is specified as Heap-buffer-overflow READ 1, and the crash state...

A potential Denial of Service issue in protobuf-java

Summary A potential Denial of Service issue in protobuf-java was discovered in the parsing procedure for binary data. Affected versions: All versions of Java Protobufs including Kotlin and JRuby prior to the versions listed below. Protobuf "javalite" users typically Android are not affected...

OSV-2022-13 Heap-use-after-free in read_data_compressed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43324 Crash type: Heap-use-after-free READ 4 Crash state: readdatacompressed archivereadformatrarreaddata archivereaddatablock...

OSV-2022-12 Heap-buffer-overflow in print_mac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43304 Crash type: Heap-buffer-overflow WRITE 4 Crash state: printmac logpacket dhcpreply...

OSV-2022-10 Heap-buffer-overflow in check_bad_address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43308 Crash type: Heap-buffer-overflow WRITE 1 Crash state: checkbadaddress checkforboguswildcard FuzzCheckForBogusWildcard...

OSV-2022-6 Heap-buffer-overflow in extract_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43299 Crash type: Heap-buffer-overflow WRITE 1 Crash state: extractname hashquestions fuzzutil.c...

PT-2022-37103

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 1 crash has been reported. The crash involves the extract name and hash questions functions in the fuzz util.c file. No...

spirv-tools:spvtools_as_fuzzer: Heap-buffer-overflow in spvTextEncodeOperand

Detailed Report: https://oss-fuzz.com/testcase?key=6399714312978432 Project: spirv-tools Fuzzing Engine: afl Fuzz Target: spvtoolsasfuzzer Job Type: aflasanspirv-tools Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60300010f584 Crash State: spvTextEncodeOperand...

OSV-2022-4 Memcpy-param-overlap in ZSTD_createDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43287 Crash type: Memcpy-param-overlap Crash state: ZSTDcreateDDict bloscrundecompressionwithcontext blosc2decompressctx...

dnsmasq:fuzz_rfc1035: Heap-buffer-overflow in check_bad_address

Detailed Report: https://oss-fuzz.com/testcase?key=5228634988740608 Project: dnsmasq Fuzzing Engine: libFuzzer Fuzz Target: fuzzrfc1035 Job Type: libfuzzerasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x607000000dfc Crash State: checkbadaddress...

elfutils:fuzz-dwfl-core: Crash in read_addrs

Detailed Report: https://oss-fuzz.com/testcase?key=4696722113167360 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-dwfl-core Job Type: libfuzzerasani386elfutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xf75b3fe0 Crash State: readaddrs dwfllinkmapreport...

dnsmasq:fuzz_dhcp: Heap-buffer-overflow in print_mac

Detailed Report: https://oss-fuzz.com/testcase?key=6472936406515712 Project: dnsmasq Fuzzing Engine: libFuzzer Fuzz Target: fuzzdhcp Job Type: libfuzzerasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x60700000006c Crash State: printmac logpacket dhcpreply...

OSV-2022-3 UNKNOWN READ in pdfi_free_array

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43255 Crash type: UNKNOWN READ Crash state: pdfifreearray pdfifreeobject pdfifreedict...

OSV-2022-1 Heap-use-after-free in pdfi_dereference

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43268 Crash type: Heap-use-after-free READ 4 Crash state: pdfidereference pdfidictnext pdficheckResources...