OSV-2021-1206 Stack-use-after-scope in uprv_stricmp_70

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38156 Crash type: Stack-use-after-scope READ 1 Crash state: uprvstricmp70 ulocimpgetLanguage70 canonicalize...

OSV-2021-1204 Heap-buffer-overflow in MqttClient_DecodePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38146 Crash type: Heap-buffer-overflow WRITE 1 Crash state: MqttClientDecodePacket MqttClientHandlePacket MqttClientWaitType...

ujson:hypothesis_structured_fuzzer: Stack-buffer-overflow in ujson.cpython-38-x86_64-linux-gnu.so

Detailed Report: https://oss-fuzz.com/testcase?key=6165079859527680 Project: ujson Fuzzing Engine: libFuzzer Fuzz Target: hypothesisstructuredfuzzer Job Type: libfuzzerasanujson Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffcd053e440 Crash State:...

qemu:qemu-fuzz-i386-target-generic-fuzz-sdhci-v3: Heap-buffer-overflow in sdhci_read_dataport

Detailed Report: https://oss-fuzz.com/testcase?key=6369760082788352 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-sdhci-v3 Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x615000020800 Crash State:...

OSV-2021-1201 Heap-buffer-overflow in q_memchr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38065 Crash type: Heap-buffer-overflow READ 1 Crash state: qmemchr parsequotedparam parseparambody...

gdbm:gdbm_fuzzer: Heap-buffer-overflow in cache_elem_new

Detailed Report: https://oss-fuzz.com/testcase?key=6381313813250048 Project: gdbm Fuzzing Engine: libFuzzer Fuzz Target: gdbmfuzzer Job Type: libfuzzerasangdbm Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x60700000014f Crash State: cacheelemnew cachelookup gdbmgetbuck...

OSV-2021-1199 Heap-use-after-free in i_zval_ptr_dtor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38001 Crash type: Heap-use-after-free READ 1 Crash state: izvalptrdtor concatfunction zendbinaryop...

OSV-2021-1198 Heap-buffer-overflow in parse_param_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38052 Crash type: Heap-buffer-overflow READ 1 Crash state: parseparamname parseparam2 parseparams2...

OSV-2021-1197 Heap-buffer-overflow in H5O__linfo_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38041 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Olinfodecode H5Omsgreadoh H5Omsgread...

kamailio:fuzz_parse_msg: Heap-buffer-overflow in q_memchr

Project: https://github.com/kamailio/kamailio.git Detailed Report: https://oss-fuzz.com/testcase?key=5430243570089984 Project: kamailio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsemsg Job Type: libfuzzerasankamailio Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2021-1194 Heap-use-after-free in zend_string_release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38014 Crash type: Heap-use-after-free READ 4 Crash state: zendstringrelease zendclosurefreestorage zendobjectsstoredel...

wolfmqtt:wolfmqtt-fuzzer: Heap-buffer-overflow in MqttDecode_Vbi

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=6537285315723264 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasani386wolfmqtt Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

php:php-fuzz-execute: Heap-use-after-free in zend_string_release

Detailed Report: https://oss-fuzz.com/testcase?key=4777065514139648 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf452e694 Crash State: zendstringrelease...

wolfmqtt:wolfmqtt-fuzzer: Heap-buffer-overflow in MqttDecode_Num

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=6124843632820224 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasani386wolfmqtt Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

OSV-2021-1192 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37927 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::PoolBuffer::MakeUnique arrow::AllocateBuffer...

OSV-2021-1189 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37915 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::defaultmemorypool arrow::ipc::IpcReadOptions::Defaults...

ipfs:ipfs_ds_flatfs: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6240620362465280 Project: ipfs Fuzzing Engine: libFuzzer Fuzz Target: ipfsdsflatfs Job Type: libfuzzerasanipfs Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

json-patch:fuzz_create_merge: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6191915939266560 Project: json-patch Fuzzing Engine: libFuzzer Fuzz Target: fuzzcreatemerge Job Type: libfuzzerasanjson-patch Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000004c940c Crash State: NULL Sanitizer: address ASAN...

arrow:arrow-ipc-file-fuzz: Segv on unknown address in arrow::DefaultBackend

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6674891504484352 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-file-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State...

OSV-2021-1186 Segv on unknown address in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37856 Crash type: Segv on unknown address Crash state: helpeructracecode...