OSV-2021-899 Heap-buffer-overflow in synth_name_to_path

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35548 Crash type: Heap-buffer-overflow READ 8 Crash state: synthnametopath v9fsconametopath v9fscompleterename...

cosmos-sdk:fuzz_types_parsedeccoin: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4966064235610112 Project: cosmos-sdk Fuzzing Engine: libFuzzer Fuzz Target: fuzztypesparsedeccoin Job Type: libfuzzerasancosmos-sdk Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002430000 Crash State: NULL Sanitizer: address ASA...

OSV-2021-897 Heap-buffer-overflow in ZSTD_decompressMultiFrame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35537 Crash type: Heap-buffer-overflow READ Crash state: ZSTDdecompressMultiFrame ZSTDdecompressusingDDict bloscd...

gdal:mitab_tab_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5157065600401408 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: mitabtabfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00000c1e3fe0 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

selinux:secilc-fuzzer: Heap-buffer-overflow in ebitmap_match_any

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=6034092813582336 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: secilc-fuzzer Job Type: libfuzzerasanselinux Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

qemu:qemu-fuzz-i386-target-generic-fuzz-virtio-9p-synth: Heap-buffer-overflow in synth_name_to_path

Detailed Report: https://oss-fuzz.com/testcase?key=4668575699828736 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-virtio-9p-synth Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x609000287ae0 Crash...

OSV-2021-895 Segv on unknown address in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35514 Crash type: Segv on unknown address Crash state: helpeructracecode...

gdal:gdal_fuzzer: Heap-buffer-overflow in GDALTGARasterBand::IReadBlock

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5370967848255488 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000185f3 Crash...

OSV-2021-892 Heap-buffer-overflow in explicit_bzero

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35485 Crash type: Heap-buffer-overflow WRITE Crash state: explicitbzero cryptofree sshdisconnect...

OSV-2021-891 Heap-buffer-overflow in __cil_cat_expr_range_to_bitmap_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35492 Crash type: Heap-buffer-overflow READ 4 Crash state: cilcatexprrangetobitmaphelper cilexprtobitmap evaluatecatexpression...

teleport:parse_fuzz: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5192281404604416 Project: teleport Fuzzing Engine: libFuzzer Fuzz Target: parsefuzz Job Type: libfuzzerasanteleport Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.serializer.SerializeWriter.expandCapacity

Detailed Report: https://oss-fuzz.com/testcase?key=6278424174919680 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

tidb:fuzzMarshalJSON: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5366779718270976 Project: tidb Fuzzing Engine: libFuzzer Fuzz Target: fuzzMarshalJSON Job Type: libfuzzerasantidb Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

OSV-2021-887 Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35436 Crash type: Use-after-poison WRITE 8 Crash state: AK::RefPtr ::RefPtr AK::String::String JS::abstractrelation...

jsoup:XmlFuzzer: Timeout in XmlFuzzer

Project: https://github.com/jhy/jsoup.git Detailed Report: https://oss-fuzz.com/testcase?key=5807882221256704 Project: jsoup Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanjsoup Platform Id: linux Crash Type: Timeout exceeds 60 secs Crash Address: Crash State: XmlFuzzer...

imagemagick:encoder_mpc_fuzzer: Use-of-uninitialized-value in AcquireUniqueFileResource

Detailed Report: https://oss-fuzz.com/testcase?key=6751133677780992 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermpcfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: AcquireUniqueFileResource...

OSV-2021-882 Uncaught exception

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35392 Crash type: Uncaught exception Crash state: NULL...

tinygltf:fuzz_gltf: Heap-buffer-overflow in stbi__tga_load

Project: https://github.com/syoyo/tinygltf.git Detailed Report: https://oss-fuzz.com/testcase?key=5890725463064576 Project: tinygltf Fuzzing Engine: libFuzzer Fuzz Target: fuzzgltf Job Type: libfuzzerasantinygltf Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address:...

imagemagick:ping_pcl_fuzzer: Use-of-uninitialized-value in AcquireUniqueFileResource

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4731160394596352 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingpclfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

fluent-bit:flb-it-fuzz-config_fuzzer_OSSFUZZ: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4724867529310208 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f90e3401220 Crash State: NULL Sanitizer:...