libjxl:djxl_fuzzer: Heap-buffer-overflow in jxl::ThreadPool::RunCallState<jxl::ConvertToExternal

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5502486264807424 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x7f76951543...

OSV-2021-852 Heap-buffer-overflow in parseInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35153 Crash type: Heap-buffer-overflow READ 1 Crash state: parseInternal JavaExampleFuzzerNativeparse...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=6704097009991680 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void intrapredictionangular vo...

grpc-gateway:fuzz: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5761259185242112 Project: grpc-gateway Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasangrpc-gateway Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

libreoffice:wmffuzzer: Heap-buffer-overflow in vcl::bitmap::CreateFromData

Detailed Report: https://oss-fuzz.com/testcase?key=4758664299806720 Project: libreoffice Fuzzing Engine: afl Fuzz Target: wmffuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60200001a156 Crash State: vcl::bitmap::CreateFromData...

OSV-2021-850 Heap-buffer-overflow in proto_item_append_text

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35102 Crash type: Heap-buffer-overflow READ 8 Crash state: protoitemappendtext dissectpfcp3gppenterpriseies calldissectorwork...

OSV-2021-849 Negative-size-param in mrb_str_format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35109 Crash type: Negative-size-param Crash state: mrbstrformat mrbfsprintf mrbvmexec...

imagemagick:ping_mvg_fuzzer: Heap-buffer-overflow in TracePoint

Detailed Report: https://oss-fuzz.com/testcase?key=5961114448953344 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0xf0d87070 Crash State: TracePoint...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in frame_get_vlmetalayers

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5966065472503808 Project: c-blosc2 Fuzzing Engine: afl Fuzz Target: decompressframefuzzer Job Type: aflasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

OSV-2021-841 Heap-use-after-free in AK::StringImpl::create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34973 Crash type: Heap-use-after-free READ Crash state: AK::StringImpl::create AK::String::String AK::URLParser::parsedataurl...

OSV-2021-840 Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34971 Crash type: Use-after-poison WRITE 8 Crash state: AK::RefPtr ::RefPtr AK::String::String JS::abstractrelation...

OSV-2021-838 Heap-use-after-free in multiline_parser_conf_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34960 Crash type: Heap-use-after-free READ 8 Crash state: multilineparserconffile flbparserconffile configfuzzer.c...

spotify-json:fuzz_decode: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5942421744648192 Project: spotify-json Fuzzing Engine: libFuzzer Fuzz Target: fuzzdecode Job Type: libfuzzerasanspotify-json Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0xffffffffffffffc7 Crash State: NULL Sanitizer: address ASAN...

fluent-bit:flb-it-fuzz-config_fuzzer_OSSFUZZ: Heap-use-after-free in multiline_parser_conf_file

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5406843416477696 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-configfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-free REA...

tidb:fuzzMarshalJSON: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6641037232701440 Project: tidb Fuzzing Engine: libFuzzer Fuzz Target: fuzzMarshalJSON Job Type: libfuzzerasantidb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000013d810c2 Crash State: NULL Sanitizer: address ASAN Recommended...

skcms:iccprofile_info: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5510857122512896 Project: skcms Fuzzing Engine: libFuzzer Fuzz Target: iccprofileinfo Job Type: libfuzzerasani386skcms Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xdcdcdcd8 Crash State: NULL Sanitizer: address ASAN Recommended...

orbit:CaptureEventProcessorProcessEventsFuzzer: Heap-use-after-free in orbit_capture_client::GpuQueueSubmissionProcessor::ProcessGpuQueueSubmission

Detailed Report: https://oss-fuzz.com/testcase?key=5684318251909120 Project: orbit Fuzzing Engine: libFuzzer Fuzz Target: CaptureEventProcessorProcessEventsFuzzer Job Type: libfuzzerasanorbit Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x612000078bc8 Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_TTA_fuzzer: Global-buffer-overflow in tta_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5629322560929792 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDTTAfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000ad7d...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-buffer-overflow in std::__1::char_traits<char>::length

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4691379056934912 Project: sleuthkit Fuzzing Engine: honggfuzz Fuzz Target: sleuthkitflsapfsfuzzer Job Type: honggfuzzasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

OSV-2021-822 Heap-buffer-overflow in AK::Formatter<char const*, void>::format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34863 Crash type: Heap-buffer-overflow READ 3 Crash state: AK::Formatter::format void AK::formatvalue AK::vformatimpl...