pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::RadiusLayer::isDataValid

Detailed Report: https://oss-fuzz.com/testcase?key=6556752189980672 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pcpp::RadiusLayer::isDataValid...

hiredis:format_command_fuzzer: Heap-double-free in alloc.h

Detailed Report: https://oss-fuzz.com/testcase?key=5687947347755008 Project: hiredis Fuzzing Engine: libFuzzer Fuzz Target: formatcommandfuzzer Job Type: libfuzzerasanhiredis Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x611000000d00 Crash State: alloc.h alloc.h Sanitizer:...

OSV-2021-1797 Heap-buffer-overflow in grk::GrkImage::cieLabToRGB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43161 Crash type: Heap-buffer-overflow WRITE 4 Crash state: grk::GrkImage::cieLabToRGB grk::GrkImage::applyColourManagement grk::CodeStreamDecompress::postProcess...

OSV-2021-1796 Heap-buffer-overflow in Curl_sasl_decode_mech

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43186 Crash type: Heap-buffer-overflow READ 10 Crash state: Curlsasldecodemech Curlsaslparseurlauthoption pop3parseurloptions...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::IPv6Layer::parseExtensions

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=6409201541316608 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

CVE-2021-45930

Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps::growAppend called from QPainterPath::addPath and QPathClipper::intersect...

CVE-2021-45931

HarfBuzz 2.9.0 has an out-of-bounds write in hbbitsetinvertiblet::set called from hbsparsesett::set and hbsetcopy...

AZL-8960 CVE-2021-45953 affecting package dnsmasq for versions less than 2.89-1

Dnsmasq 2.86 has a heap-based buffer overflow in extractname called from hashquestions and fuzzutil.c. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

CVE-2021-45952

Dnsmasq 2.86 has a heap-based buffer overflow in dhcpreply called from dhcppacket and FuzzDhcp. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

CVE-2021-45953

Dnsmasq 2.86 has a heap-based buffer overflow in extractname called from hashquestions and fuzzutil.c. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

CVE-2021-45954

Dnsmasq 2.86 has a heap-based buffer overflow in extractname called from answerauth and FuzzAuth. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

OSV-2021-1795 Negative-size-param in general_endcidrange_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43156 Crash type: Negative-size-param Crash state: generalendcidrangefunc cmapendcidrangefunc pdfipscriptinterpret...

OSV-2021-1793 Heap-buffer-overflow in seturl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43160 Crash type: Heap-buffer-overflow READ Crash state: seturl parseurl curlurlset...

Dnsmasq buffer error vulnerability

dnsmasq is a lightweight DNS forwarding and DHCP and TFTP server written in C. It can be used as a server to forward DNS, DHCP, and TFTP. Dnsmasq 2.86 suffers from a buffer error vulnerability that stems from a heap-based buffer overflow in extractname called from answerauth and FuzzAuth...

go-ethereum:fuzz_trie_nodes: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5934819643621376 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzztrienodes Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

envoy:server_fuzz_test: Container-overflow in std::__1::vector<std::__1::basic_string<char, std::__1::char_traits<char>, std::

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5887932634890240 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: serverfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Container-overflow READ Crash Address: 0x60800014ba...

OSV-2021-1791 Heap-buffer-overflow in ZSTD_createDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43110 Crash type: Heap-buffer-overflow READ Crash state: ZSTDcreateDDict bloscrundecompressionwithcontext blosc2decompressctx...

OSV-2021-1787 Global-buffer-overflow in stbi__jpeg_decode_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43113 Crash type: Global-buffer-overflow READ 4 Crash state: stbijpegdecodeblock stbidecodejpegimage stbijpegload...

stb:stbi_read_fuzzer: Global-buffer-overflow in stbi__jpeg_decode_block

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=5165030079856640 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzerasanstb Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000603a68...

tendermint:fuzz_rpc_jsonrpc_server: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5181807589457920 Project: tendermint Fuzzing Engine: libFuzzer Fuzz Target: fuzzrpcjsonrpcserver Job Type: libfuzzerasantendermint Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Cra...