assimp:assimp_fuzzer: Heap-buffer-overflow in std::__1::enable_if<

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5023112086290432 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

assimp:assimp_fuzzer: Heap-use-after-free in std::__1::vector<char, std::__1::allocator<char> >::size

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4717909462089728 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x604000003f...

OSV-2021-591 Segv on unknown address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32767 Crash type: Segv on unknown address Crash state: NULL...

libheif:file-fuzzer: Global-buffer-overflow in read_coding_unit

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5656817364500480 Project: libheif Fuzzing Engine: afl Fuzz Target: file-fuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000000f8b47e...

libredwg:llvmfuzz: Heap-buffer-overflow in dxf_blocks_read

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6304517726535680 Project: libredwg Fuzzing Engine: honggfuzz Fuzz Target: llvmfuzz Job Type: honggfuzzasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

unicorn:fuzz_emu_arm64_armbe: Use-of-uninitialized-value in helper_wfi_aarch64eb

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=4571556359569408 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarm64armbe Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

gpac:fuzz_parse: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6389891240951808 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f9f9f84ddb0 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securi...

CVE-2021-3479

There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger excessive consumption of memory, resulting in an impact to system availability...

openbabel:fuzz_obconversion_smiles: Heap-buffer-overflow in OpenBabel::OBSmilesParser::ParseSmiles

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=6215343736487936 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzobconversionsmiles Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Cras...

libyang:lyd_parse_mem_xml: Invalid-free in ly_err_free

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=6514604038553600 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememxml Job Type: libfuzzerasanlibyang Platform Id: linux Crash Type: Invalid-free Crash Address: 0x622000000b46 Crash...

OSV-2021-585 Heap-buffer-overflow in ebitmap_match_any

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32675 Crash type: Heap-buffer-overflow READ 8 Crash state: ebitmapmatchany avtabmap cilcheckneverallow...

suricata:fuzz_sigpcap_aware: Crash in fuzz_sigpcap_aware.c

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=4640111380791296 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcapaware Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000004bdea4c Cra...

suricata:fuzz_sigpcap_aware: Stack-buffer-overflow in FPC_next_tcp

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5190230303965184 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcapaware Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

kimageformats:kimgio_heif_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=6164913002250240 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void intrapredictionangular...

OSV-2021-581 UNKNOWN READ in unsigned short flatbuffers::ReadScalar<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32647 Crash type: UNKNOWN READ Crash state: unsigned short flatbuffers::ReadScalar flatbuffers::Table::GetOptionalFieldOffset flatbuffers::Table::CheckField...

ffmpeg:ffmpeg_AV_CODEC_ID_PGMYUV_fuzzer: Heap-buffer-overflow in ff_combine_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6001928875147264 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDPGMYUVfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libvips:webpsave_buffer_fuzzer: Heap-buffer-overflow in lzw_decode

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5726625548337152 Project: libvips Fuzzing Engine: afl Fuzz Target: webpsavebufferfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2021-577 Segv on unknown address in dwg_free_MTEXTATTRIBUTEOBJECTCONTEXTDATA_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32604 Crash type: Segv on unknown address Crash state: dwgfreeMTEXTATTRIBUTEOBJECTCONTEXTDATAprivate dwgfreeMTEXTATTRIBUTEOBJECTCONTEXTDATA dwgfreevariablenoclass...

ghostscript:gstoraster_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5559346722373632 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000003cc0f70 Crash State: NULL Sanitizer: address ASAN...

sqlite3:ossfuzz: Index-out-of-bounds in sqlite3VdbeExec

Detailed Report: https://oss-fuzz.com/testcase?key=5552782812774400 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzerubsansqlite3 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: sqlite3VdbeExec sqlite3Step sqlite3step Sanitizer:...