net-snmp:snmp_mib_fuzzer: Stack-buffer-overflow in check_utc

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5228380673409024 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpmibfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

OSV-2021-1509 Heap-buffer-overflow in handle_gets

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40455 Crash type: Heap-buffer-overflow READ Crash state: handlegets climbox cliscanmail...

PT-2021-8189

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the comedi driver, specifically the ni usb6501 component, which lacks proper sanity checks on USB transfer buffer sizes. This can lead to zero-size-pointer...

mysql-server:fuzz_initfile: Heap-use-after-free in Segment::write

Detailed Report: https://oss-fuzz.com/testcase?key=6238365687611392 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6080000135a8 Crash State: Segment::write...

php:php-fuzz-function-jit: Heap-use-after-free in zend_is_unwind_exit

Detailed Report: https://oss-fuzz.com/testcase?key=4803665358094336 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf6302a8c Crash State: zendisunwindexit...

net-snmp:snmp_api_fuzzer: Heap-buffer-overflow in asn_realloc_rbuild_string

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5941786955087872 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpapifuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: Heap-buffer-overflo...

apache-httpd:fuzz_preq: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5130139780907008 Project: apache-httpd Fuzzing Engine: libFuzzer Fuzz Target: fuzzpreq Job Type: libfuzzerubsanapache-httpd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000001422a29 Crash State: NULL Sanitizer: undefined UBSAN...

OSV-2021-1496 Heap-buffer-overflow in jxl::JxlBoxContentDecoder::Process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40396 Crash type: Heap-buffer-overflow WRITE 1 Crash state: jxl::JxlBoxContentDecoder::Process JxlDecoderProcessInput djxlfuzzer.cc...

OSV-2021-1495 Use-of-uninitialized-value in key_fuzz_target

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40381 Crash type: Use-of-uninitialized-value Crash state: keyfuzztarget std::1::function::funcvoid function.h...

PT-2021-30964

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40381 Crash type: Use-of-uninitialized-value Crash state: key fuzz target std:: 1:: function:: funcvoid function.h...

nginx:http_request_fuzzer: Stack-use-after-return in ngx_rbtree_insert_timer_value

Detailed Report: https://oss-fuzz.com/testcase?key=6250329646170112 Project: nginx Fuzzing Engine: honggfuzz Fuzz Target: httprequestfuzzer Job Type: honggfuzzasannginx Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address: 0x7ffff6f612e8 Crash State: ngxrbtreeinserttimervalu...

assimp:assimp_fuzzer: Crash in [heap]

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5683706732347392 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000038bb010 Crash Stat...

OSV-2021-1493 Global-buffer-overflow in fb_label_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40368 Crash type: Global-buffer-overflow WRITE 1 Crash state: fblabelname readasourcefile performanassemblypass...

libbpf:bpf-object-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5268028497985536 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerubsanlibbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000003bf0020 Crash State: NULL Sanitizer: undefined UBSAN...

assimp:assimp_fuzzer: Crash in Assimp::ASE::Parser::ParseLV4MeshFloat

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6143849471279104 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00537fff7fb5 Crash State...

libigl:igl_fuzzer: Segv on unknown address in std::__Fuzzer::pair<std::__Fuzzer::__hash_iterator<std::__Fuzzer::__hash_node<st

Detailed Report: https://oss-fuzz.com/testcase?key=6216027038416896 Project: libigl Fuzzing Engine: libFuzzer Fuzz Target: iglfuzzer Job Type: libfuzzermsanlibigl Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

OSV-2021-1489 UNKNOWN READ in __bpf_object__open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40317 Crash type: UNKNOWN READ Crash state: bpfobjectopen bpfobjectopenmem bpf-object-fuzzer.c...

radare2:ia_fuzz: Heap-buffer-overflow in parse_microsoft_mangled_name

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=6335468061458432 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

binutils:fuzz_as: Use-of-uninitialized-value in input_file_open

Detailed Report: https://oss-fuzz.com/testcase?key=5756501302575104 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: inputfileopen inputscrubnewfile readasourcefile...

libucl:ucl_add_string_fuzzer: Segv on unknown address in ucl_object_free_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5114347555258368 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: uclobjectfreeinternal uclparserfree...