OSV-2021-1269 Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38777 Crash type: Use-of-uninitialized-value Crash state: std::1::basicostream & std::1::putcha S2LaxPolylineShape::Init S2LaxPolylineShape::S2LaxPolylineShape...

PT-2021-27783

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue. The crash state includes functions such as get body and parse sdp, and is related to the file fuzz parse...

ffmpeg:ffmpeg_AV_CODEC_ID_MSNSIREN_fuzzer: Global-buffer-overflow in decode_vector

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6539877966020608 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMSNSIRENfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

wolfmqtt:wolfmqtt-fuzzer: Crash in MqttDecode_Num

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=5886629907136512 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasanwolfmqtt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x621000013c09...

s2geometry:s2_fuzzer: Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

Project: https://github.com/google/s2geometry.git Detailed Report: https://oss-fuzz.com/testcase?key=6657611836030976 Project: s2geometry Fuzzing Engine: libFuzzer Fuzz Target: s2fuzzer Job Type: libfuzzermsans2geometry Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

woff2:convert_woff2ttf_fuzzer_new_entry: Use-of-uninitialized-value in woff2::WOFF2StringOut::Write

Project: https://github.com/google/woff2.git Detailed Report: https://oss-fuzz.com/testcase?key=6464887392436224 Project: woff2 Fuzzing Engine: libFuzzer Fuzz Target: convertwoff2ttffuzzernewentry Job Type: libfuzzermsanwoff2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

simdjson:fuzz_print_json: Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

Detailed Report: https://oss-fuzz.com/testcase?key=6404466631376896 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzprintjson Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::basicostream & std::1::putcha...

ots:ots-fuzzer: Use-of-uninitialized-value in ots::OpenTypeNAME::Serialize

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=5968064106070016 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzermsanots Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

bitcoin-core:key: Use-of-uninitialized-value in key_fuzz_target

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=5734826813030400 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: key Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

Detailed Report: https://oss-fuzz.com/testcase?key=5524907803410432 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::basicostream & std::1::putcha...

graphicsmagick:enhance_fuzzer: Use-of-uninitialized-value in jas_strtok

Detailed Report: https://oss-fuzz.com/testcase?key=5488201695887360 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jasstrtok jasinitcodecs...

libraw:libraw_fuzzer: Use-of-uninitialized-value in DHT::make_rbdiag

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5068724227407872 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

flac:fuzzer_exo: Use-of-uninitialized-value in FLACParser::~FLACParser

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=4781915262025728 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzerexo Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

librdkafka:fuzz_regex: Heap-buffer-overflow in compile

Detailed Report: https://oss-fuzz.com/testcase?key=6209392337354752 Project: librdkafka Fuzzing Engine: libFuzzer Fuzz Target: fuzzregex Job Type: libfuzzerasanlibrdkafka Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x620000001000 Crash State: compile compile compile...

libarchive:libarchive_fuzzer: Crash in copy_string

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=4968596728578048 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerubsanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

tidb:fuzzMarshalJSON: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4890595382919168 Project: tidb Fuzzing Engine: libFuzzer Fuzz Target: fuzzMarshalJSON Job Type: libfuzzerasantidb Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

libarchive:libarchive_fuzzer: Heap-buffer-overflow in next_cache_entry

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=6494798048002048 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

OSV-2021-1266 UNKNOWN WRITE in void AK::BumpAllocator<true, 2097152ul>::for_each_chunk<AK::UniformBumpAllocator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38701 Crash type: UNKNOWN WRITE Crash state: void AK::BumpAllocator::foreachchunk::BumpAllocatedLinkedList regex::Matcher::execute...

apache-httpd:fuzz_preq: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6004816267051008 Project: apache-httpd Fuzzing Engine: libFuzzer Fuzz Target: fuzzpreq Job Type: libfuzzerubsanapache-httpd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000ca28b70 Crash State: NULL Sanitizer: undefined UBSAN...

OSV-2021-1262 Heap-buffer-overflow in H5O__chunk_deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38686 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Ochunkdeserialize H5Ocachechkdeserialize H5Cprotect...