OSV-2021-1546 Heap-buffer-overflow in pn_buffer_append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40748 Crash type: Heap-buffer-overflow READ Crash state: pnbufferappend pnidatainternnode pnidecoderdecodevalue...

qpid-proton:fuzz-connection-driver: Heap-buffer-overflow in pn_buffer_append

Project: https://github.com/apache/qpid-proton.git Detailed Report: https://oss-fuzz.com/testcase?key=5990277035196416 Project: qpid-proton Fuzzing Engine: libFuzzer Fuzz Target: fuzz-connection-driver Job Type: libfuzzerasanqpid-proton Platform Id: linux Crash Type: Heap-buffer-overflow READ Cra...

OSV-2021-1540 Heap-buffer-overflow in consume_list

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40723 Crash type: Heap-buffer-overflow READ 1 Crash state: consumelist pnamqpdecodeDqEoQBIoIe pnmessagedecode...

freetype2:truetype: Heap-buffer-overflow in tt_face_vary_cvt

Detailed Report: https://oss-fuzz.com/testcase?key=5649991339737088 Project: freetype2 Fuzzing Engine: afl Fuzz Target: truetype Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x602000000cb8 Crash State: ttfacevarycvt ttfaceloadcvt ttsetmmblen...

php:php-fuzz-exif: Heap-buffer-overflow in _estrdup

Detailed Report: https://oss-fuzz.com/testcase?key=5120731294334976 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6030001cdbae Crash State: estrdup exifprocessusercomment...

libexif:exif_from_data_fuzzer: Use-of-uninitialized-value in exif_entry_format_value

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=5780913485643776 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exiffromdatafuzzer Job Type: libfuzzermsanlibexif Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

net-snmp:snmp_mib_fuzzer: Stack-buffer-overflow in parse_objecttype

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4658956098732032 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpmibfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: Stack-buffer-overfl...

binutils:fuzz_objdump_safe: Heap-buffer-overflow in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=5691484599353344 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzobjdumpsafe Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62d000027120 Crash State: bfdgetl32...

dav1d:dav1d_fuzzer_mt: Heap-buffer-overflow in dav1d_cdef_brow_8bpc

Project: https://code.videolan.org/videolan/dav1d.git Detailed Report: https://oss-fuzz.com/testcase?key=5387199655313408 Project: dav1d Fuzzing Engine: libFuzzer Fuzz Target: dav1dfuzzermt Job Type: libfuzzerasandav1d Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

OSV-2021-1526 Global-buffer-overflow in fr_unix_time_from_tm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40600 Crash type: Global-buffer-overflow READ 2 Crash state: frunixtimefromtm frunixtimefromstr frvalueboxfromsubstr...

OSV-2021-1521 Heap-buffer-overflow in exif_data_load_data_content

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40617 Crash type: Heap-buffer-overflow READ 4 Crash state: exifdataloaddatacontent exifdataloaddata exifloadergetdata...

php:php-fuzz-tracing-jit: Crash in add_function_slow

Detailed Report: https://oss-fuzz.com/testcase?key=5824689268719616 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x18188000591a Crash State: addfunctionslow addfunction...

binutils:fuzz_disas_ext-bfd_arch_i386: Dynamic-stack-buffer-overflow in fetch_data

Detailed Report: https://oss-fuzz.com/testcase?key=5730636799803392 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisasext-bfdarchi386 Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE Crash Address: 0x7ffe8264c1c0 Crash State: fetchdata printin...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::ObjFileParser::getFace

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6253045663531008 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address:...

runc:configs_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5216543441551360 Project: runc Fuzzing Engine: libFuzzer Fuzz Target: configsfuzzer Job Type: libfuzzerasanrunc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000e877223 Crash State: NULL Sanitizer: address ASAN Recommended Securi...

go-ethereum:fuzzTxfetcher: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6496701091807232 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzTxfetcher Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x10c0028d0420 Crash State: NULL Sanitizer: address ASAN...

OSV-2021-1515 Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40507 Crash type: Heap-use-after-free READ 1 Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypestd::1::basic dd::Propertiesimpl::set dd::eatpairs...

OSV-2021-1514 Container-overflow in m3d_load

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40535 Crash type: Container-overflow READ 1 Crash state: m3dload Assimp::M3DWrapper::M3DWrapper Assimp::M3DImporter::InternReadFile...

php:php-fuzz-tracing-jit: Heap-use-after-free in zval_ptr_dtor

Detailed Report: https://oss-fuzz.com/testcase?key=6748907644780544 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x613000001000 Crash State: zvalptrdtor...

binutils:fuzz_windres: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6664251322793984 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzwindres Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN...