OSV-2021-1605 Heap-use-after-free in perfetto::trace_processor::SliceTracker::GetStackHash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41226 Crash type: Heap-use-after-free READ 8 Crash state: perfetto::traceprocessor::SliceTracker::GetStackHash perfetto::traceprocessor::SliceTracker::StartSlice perfetto::traceprocessor::SliceTracker::Scoped...

OSV-2021-1604 Heap-buffer-overflow in jxl::N_AVX2::SingleFromSingle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41225 Crash type: Heap-buffer-overflow READ Crash state: jxl::NAVX2::SingleFromSingle jxl::ThreadPool::SequentialRunnerStatic jxl::ModularFrameDecoder::ModularImageToDecodedRect...

OSV-2021-1601 Heap-buffer-overflow in parquet::DeltaByteArrayDecoder::GetInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41221 Crash type: Heap-buffer-overflow WRITE 1 Crash state: parquet::DeltaByteArrayDecoder::GetInternal parquet::DeltaByteArrayDecoder::DecodeArrow parquet::internal::ByteArrayChunkedRecordReader::ReadValuesSpaced...

fluent-bit:flb-it-fuzz-config_fuzzer_OSSFUZZ: Heap-buffer-overflow in mk_rconf_read

Detailed Report: https://oss-fuzz.com/testcase?key=5058465710604288 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62100000a0ff Crash State:...

dgraph:parser_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5618729564635136 Project: dgraph Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasandgraph Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000205ce8 Crash State: NULL Sanitizer: address ASAN Recommended...

OSV-2021-1597 UNKNOWN READ in void jxl::CopyImageTo<int>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41217 Crash type: UNKNOWN READ Crash state: void jxl::CopyImageTo jxl::ModularFrameDecoder::DecodeGroup jxl::FrameDecoder::ProcessACGroup...

OSV-2021-1595 UNKNOWN WRITE in sprint_realloc_hinted_integer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41205 Crash type: UNKNOWN WRITE Crash state: sprintreallochintedinteger sprintreallocinteger snprintinteger...

libjxl:djxl_fuzzer: Segv on unknown address in jxl::N_AVX2::SingleFromSingle

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5473482434019328 Project: libjxl Fuzzing Engine: honggfuzz Fuzz Target: djxlfuzzer Job Type: honggfuzzasanlibjxl Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::DeltaByteArrayDecoder::GetInternal

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4529592296144896 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

libvips:pngsave_buffer_fuzzer: Crash in void jxl::CopyImageTo<int>

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=4743583874285568 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: pngsavebufferfuzzer Job Type: libfuzzerubsanlibvips Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000005540050...

gvisor:state_load_fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5560232110063616 Project: gvisor Fuzzing Engine: libFuzzer Fuzz Target: stateloadfuzz Job Type: libfuzzerasangvisor Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000201328 Crash State: NULL Sanitizer: address ASAN Recommended...

OSV-2021-1594 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41144 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...

OSV-2021-1592 Heap-buffer-overflow in arrow::internal::ValidateArrayImpl::Visit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41143 Crash type: Heap-buffer-overflow READ 4 Crash state: arrow::internal::ValidateArrayImpl::Visit arrow::internal::ValidateArrayImpl::ValidateWithType arrow::internal::ValidateArrayImpl::Validate...

stb:stbi_read_fuzzer: Heap-buffer-overflow in stbi__jpeg_huff_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5566868505624576 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x629000129661 Crash State: stbijpeghuffdecode stbijpegdecodeblockprogac...

libraw:libraw_raf_fuzzer: Use-of-uninitialized-value in LibRaw::pentax_load_raw

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6685300638744576 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawraffuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

binutils:fuzz_objdump_safe: Dynamic-stack-buffer-overflow in error_handler_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5709208721424384 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdumpsafe Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 8 Crash Address: 0x7fffb6dca200 Crash State: errorhandlerinternal...

binutils:fuzz_disas_ext-bfd_arch_i386: Dynamic-stack-buffer-overflow in fetch_data

Detailed Report: https://oss-fuzz.com/testcase?key=4862202146848768 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisasext-bfdarchi386 Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE Crash Address: 0x7ffd9e0bcae0 Crash State: fetchdata printin...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in inflate

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5555286354558976 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

OSV-2021-1585 Heap-buffer-overflow in _parse_to

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41073 Crash type: Heap-buffer-overflow READ 1 Crash state: parseto parseto gethdrfield...

bitcoin-core:hex: Use-of-uninitialized-value in CPubKey::IsFullyValid

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=4890491615838208 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: hex Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...