OSV-2021-958 Dynamic-stack-buffer-overflow in mdb_numeric_to_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35972 Crash type: Dynamic-stack-buffer-overflow WRITE 16 Crash state: mdbnumerictostring mdbxferbounddata mdbattemptbind...

OSV-2021-955 Stack-buffer-overflow in Buffer_AppendIndentUnchecked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36009 Crash type: Stack-buffer-overflow WRITE 1 Crash state: BufferAppendIndentUnchecked encode encode...

ujson:hypothesis_structured_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6417175324786688 Project: ujson Fuzzing Engine: libFuzzer Fuzz Target: hypothesisstructuredfuzzer Job Type: libfuzzerubsanujson Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fe952202020 Crash State: NULL Sanitizer: undefined UBSAN...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Crash in std::__1::enable_if<true, apfs_omap_key const*>::type APFSBtreeNode<apfs_omap_ke

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5785312956645376 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsapfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

opus:opus_multi_fuzzer_fixed: Dynamic-stack-buffer-overflow in _celt_autocorr

Project: https://gitlab.xiph.org/xiph/opus.git Detailed Report: https://oss-fuzz.com/testcase?key=5215915598807040 Project: opus Fuzzing Engine: afl Fuzz Target: opusmultifuzzerfixed Job Type: aflasanopus Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE Crash Address:...

ndpi:fuzz_process_packet: Use-of-uninitialized-value in ndpi_detection_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5563620380508160 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

yara:rules_fuzzer: Dynamic-stack-buffer-overflow in _yr_arena_make_ptr_relocatable

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5260115128221696 Project: yara Fuzzing Engine: afl Fuzz Target: rulesfuzzer Job Type: aflasanyara Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 8 Crash Address: 0x7ffcf92e1360...

go-sftp:fuzz_sftp: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5707240047771648 Project: go-sftp Fuzzing Engine: libFuzzer Fuzz Target: fuzzsftp Job Type: libfuzzerasango-sftp Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-use-after-free in APFSJObject::add_entry

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5681470109777920 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address:...

guetzli:guetzli_fuzzer: Dynamic-stack-buffer-overflow in std::__1::__bit_reference<std::__1::vector<bool, std::__1::allocator<bool> >, tr

Project: https://github.com/google/guetzli.git Detailed Report: https://oss-fuzz.com/testcase?key=5516239039496192 Project: guetzli Fuzzing Engine: afl Fuzz Target: guetzlifuzzer Job Type: aflasanguetzli Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 8 Crash Address:...

pcl:ply_reader_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4562072347213824 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x006162677220 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

OSV-2021-940 Heap-buffer-overflow in json_string_unescape

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35925 Crash type: Heap-buffer-overflow WRITE 1 Crash state: jsonstringunescape aftervalue executecallbacks...

OSV-2021-939 Segv on unknown address in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35912 Crash type: Segv on unknown address Crash state: helpeructracecode...

OSV-2021-935 Heap-buffer-overflow in answer_request

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35920 Crash type: Heap-buffer-overflow WRITE 1 Crash state: answerrequest FuzzAnswerTheRequest fuzzrfc1035.c...

PT-2021-28342

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 1 crash has been reported. The crash occurs in the answer request state and involves the FuzzAnswerTheRequest function in th...

sql-parser:fuzz_sql_parse: Dynamic-stack-buffer-overflow in std::__1::__wrap_iter<hsql::Expr**>::__wrap_iter

Project: https://github.com/hyrise/sql-parser.git Detailed Report: https://oss-fuzz.com/testcase?key=6653515308072960 Project: sql-parser Fuzzing Engine: afl Fuzz Target: fuzzsqlparse Job Type: aflasansql-parser Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 8 Crash Address:...

sleuthkit:sleuthkit_fls_fat_fuzzer: Stack-use-after-scope in std::__1::__tuple_leaf<0ul, unsigned long const&, false>::__tuple_leaf<unsigned

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6520166639861760 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsfatfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Stack-use-after-scope WRITE 8 Crash Address:...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::subtract_black_internal

Detailed Report: https://oss-fuzz.com/testcase?key=6712234343530496 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::subtractblackinternal...

OSV-2021-934 Heap-buffer-overflow in extract_addresses

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35865 Crash type: Heap-buffer-overflow WRITE 1 Crash state: extractaddresses FuzzExtractTheAddress fuzzrfc1035.c...

OSV-2021-932 Heap-buffer-overflow in resize_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35898 Crash type: Heap-buffer-overflow WRITE Crash state: resizepacket FuzzResizePacket fuzzrfc1035.c...