OSV-2021-1183 UNKNOWN WRITE in draco::DepthFirstTraverser<draco::CornerTable, draco::MeshAttributeIndicesEncodi

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37864 Crash type: UNKNOWN WRITE Crash state: draco::DepthFirstTraverserdraco::CornerTable, draco::MeshAttributeIndicesEncodi draco::MeshTraversalSequencerdraco::DepthFirstTraverserdraco::CornerTable, dra...

arrow:arrow-ipc-stream-fuzz: Segv on unknown address in arrow::DefaultBackend

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4757582821064704 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

libucl:ucl_add_string_fuzzer: Crash in ucl_array_append

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=5125667289694208 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x002973657a7a...

OSV-2021-1181 Heap-buffer-overflow in draco::MeshPredictionSchemeTexCoordsDecoder<int, draco::PredictionSchemeWrapDeco

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37814 Crash type: Heap-buffer-overflow WRITE 4 Crash state: draco::MeshPredictionSchemeTexCoordsDecoderint, draco::PredictionSchemeWrapDeco draco::MeshPredictionSchemeTexCoordsDecoderint, draco::PredictionSchemeWrapDeco...

libvips:jpegsave_file_fuzzer: Null-dereference READ with empty stacktrace

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=6292199667531776 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavefilefuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

tdengine:sql-fuzzer: Heap-buffer-overflow in strRmquote

Project: https://github.com/taosdata/TDengine.git Detailed Report: https://oss-fuzz.com/testcase?key=5783816602517504 Project: tdengine Fuzzing Engine: libFuzzer Fuzz Target: sql-fuzzer Job Type: libfuzzerasantdengine Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.MemberValueArrayInitializer

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4987789511360512 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

net-snmp:snmp_api_fuzzer: Crash with empty stacktrace

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5383470403158016 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpapifuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type: UNKNOWN...

gonids:fuzz_parserule: Crash in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5442188109021184 Project: gonids Fuzzing Engine: libFuzzer Fuzz Target: fuzzparserule Job Type: libfuzzerasangonids Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000010c00008 Crash State: pthreadcreate cgotrypthreadcreate Sanitizer...

OSV-2021-1174 Heap-use-after-free in zend_string_release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37695 Crash type: Heap-use-after-free READ 4 Crash state: zendstringrelease zendclosurefreestorage zendobjectsstoredel...

OSV-2021-1173 UNKNOWN READ in luaG_getfuncline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37678 Crash type: UNKNOWN READ Crash state: luaGgetfuncline luaGrunerror luaDgrowstack...

draco:draco_pc_decoder_fuzzer: Stack-buffer-overflow in bool draco::FloatPointsTreeDecoder::DecodePointCloud<draco::PointAttributeVector

Project: https://github.com/google/draco.git Detailed Report: https://oss-fuzz.com/testcase?key=5992473277628416 Project: draco Fuzzing Engine: honggfuzz Fuzz Target: dracopcdecoderfuzzer Job Type: honggfuzzasandraco Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

draco:draco_mesh_decoder_fuzzer: Index-out-of-bounds in draco::MeshEdgebreakerTraversalValenceDecoder::DecodeSymbol

Project: https://github.com/google/draco.git Detailed Report: https://oss-fuzz.com/testcase?key=4686639960555520 Project: draco Fuzzing Engine: libFuzzer Fuzz Target: dracomeshdecoderfuzzer Job Type: libfuzzerubsandraco Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State...

OSV-2021-1172 UNKNOWN WRITE in snmp_add_var

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37647 Crash type: UNKNOWN WRITE Crash state: snmpaddvar snmpapifuzzer.c...

OSV-2021-1170 Heap-buffer-overflow in exif_get_slong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37581 Crash type: Heap-buffer-overflow READ 1 Crash state: exifgetslong exifgetsrational mnoteappleentrygetvalue...

libigl:igl_fuzzer: Invalid-free in igl_fuzzer.cpp

Project: https://github.com/libigl/libigl.git Detailed Report: https://oss-fuzz.com/testcase?key=5387100439052288 Project: libigl Fuzzing Engine: libFuzzer Fuzz Target: iglfuzzer Job Type: libfuzzerasanlibigl Platform Id: linux Crash Type: Invalid-free Crash Address: 0x608000000120 Crash State:...

OSV-2021-1166 Use-of-uninitialized-value in H5F_addr_decode_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37536 Crash type: Use-of-uninitialized-value Crash state: H5Faddrdecodelen H5VLnativetokentoaddr H5VLnativeobjectopen...

imagemagick:ping_ttf_fuzzer: Heap-buffer-overflow in tt_skip_pdffont_random_tag

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5365043533840384 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: pingttffuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libexif:exif_from_data_fuzzer: Heap-buffer-overflow in exif_get_slong

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=5645042249760768 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exiffromdatafuzzer Job Type: libfuzzerasanlibexif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

freetype2:truetype-render: Heap-buffer-overflow in tt_skip_pdffont_random_tag

Detailed Report: https://oss-fuzz.com/testcase?key=6295940886036480 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: truetype-render Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000000496 Crash State: ttskippdffontrandomt...