OSV-2021-642 Heap-buffer-overflow in op_Const64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33318 Crash type: Heap-buffer-overflow WRITE 8 Crash state: opConst64 EvaluateExpression InitElements...

libjpeg-turbo:libjpeg_turbo_fuzzer: Heap-buffer-overflow in decode_mcu_fast

Project: https://github.com/libjpeg-turbo/libjpeg-turbo.git Detailed Report: https://oss-fuzz.com/testcase?key=5975135522783232 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: libjpegturbofuzzer Job Type: libfuzzerasani386libjpeg-turbo Platform Id: linux Crash Type:...

php:php-fuzz-execute: Heap-use-after-free in zend_gc_delref

Detailed Report: https://oss-fuzz.com/testcase?key=5470432774979584 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x604000026c90 Crash State: zendgcdelref zvaldelrefp...

wasm3:fuzzer: Crash in v_FindFunction

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6679546314227712 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerubsanwasm3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffcb Crash State:...

draco:draco_pc_decoder_without_dequantization_fuzzer: Heap-use-after-free in std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st

Project: https://github.com/google/draco.git Detailed Report: https://oss-fuzz.com/testcase?key=5639725823164416 Project: draco Fuzzing Engine: honggfuzz Fuzz Target: dracopcdecoderwithoutdequantizationfuzzer Job Type: honggfuzzasandraco Platform Id: linux Crash Type: Heap-use-after-free READ 8...

pcl:ply_reader_fuzzer: Heap-buffer-overflow in std::__1::__function::__func<std::__1::tuple<std::__1::function<void

Detailed Report: https://oss-fuzz.com/testcase?key=5992933665931264 Project: pcl Fuzzing Engine: afl Fuzz Target: plyreaderfuzzer Job Type: aflasanpcl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x608000000100 Crash State: std::1::function::func...

OSV-2021-640 Heap-buffer-overflow in frame_get_metalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33251 Crash type: Heap-buffer-overflow READ 6 Crash state: framegetmetalayers frametoschunk blosc2schunkfrombuffer...

openSUSE: Security Advisory for wavpack (openSUSE-SU-2021:0154-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OSV-2021-635 Heap-use-after-free in std::__1::__tree_iterator<std::__1::__value_type<std::__1::basic_string<char, st

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33227 Crash type: Heap-use-after-free READ 8 Crash state: std::1::treeiteratorstd::1::valuetypestd::1::basicstringchar, st void draco::Metadata::AddEntrystd::1::vectorunsigned char, std::1::allocat...

nats:fuzz_conf: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4940898338209792 Project: nats Fuzzing Engine: libFuzzer Fuzz Target: fuzzconf Job Type: libfuzzerasannats Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

wasm3:fuzzer: Heap-buffer-overflow in AcquireCodePageWithCapacity

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=5078029329104896 Project: wasm3 Fuzzing Engine: afl Fuzz Target: fuzzer Job Type: aflasanwasm3 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x6020000000a0 Crash State:...

libavc:avc_dec_fuzzer: Heap-buffer-overflow in ih264d_decode_slice_thread

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=5900980060291072 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcdecfuzzer Job Type: libfuzzerasani386libavc Platform Id:...

git:fuzz-pack-headers: Use-after-poison in unpack_object_header_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=4857403708407808 Project: git Fuzzing Engine: honggfuzz Fuzz Target: fuzz-pack-headers Job Type: honggfuzzasangit Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x7fffe173e000 Crash State: unpackobjectheaderbuffer...

skia:sksl2glsl: Null-dereference READ with empty stacktrace

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6194320689463296 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2glsl Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash...

OSV-2021-624 Heap-buffer-overflow in load_u32_be

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33039 Crash type: Heap-buffer-overflow READ 1 Crash state: loadu32be osslsm4setkey cipherhwsm4initkey...

OSV-2021-623 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33052 Crash type: Null-dereference READ Crash state: NULL...

OSV-2021-622 Heap-buffer-overflow in frame_get_vlmetalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33071 Crash type: Heap-buffer-overflow READ Crash state: framegetvlmetalayers frametoschunk blosc2schunkfrombuffer...

OSV-2021-620 Segv on unknown address in dwg_free_summaryinfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33059 Crash type: Segv on unknown address Crash state: dwgfreesummaryinfo dwgfree llvmfuzz.c...

gitea:fuzz_markdown_render_raw: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5726263340826624 Project: gitea Fuzzing Engine: libFuzzer Fuzz Target: fuzzmarkdownrenderraw Job Type: libfuzzerasangitea Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State: NULL Sanitizer: address ASAN...

wasm3:fuzzer: Global-buffer-overflow in Compile_BlockStatements

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=4968947125452800 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x0000005c8038 Cras...