OSV-2021-573 Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32555 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator unsigned short OT::IntType::operator unsigned int OT::RangeRecord::intersects...

OSV-2021-570 Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32554 Crash type: Uncaught exception Crash state: com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject java.base/java.lang.invoke.MethodHandleNatives.refKindIsField...

lxc:fuzz-lxc-config-read: Use-of-uninitialized-value in strequal

Project: https://github.com/lxc/lxc.git Detailed Report: https://oss-fuzz.com/testcase?key=5084676248174592 Project: lxc Fuzzing Engine: libFuzzer Fuzz Target: fuzz-lxc-config-read Job Type: libfuzzermsanlxc Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

nats:fuzz_conf: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5088833726185472 Project: nats Fuzzing Engine: libFuzzer Fuzz Target: fuzzconf Job Type: libfuzzerasannats Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

jackson-core:JsonFuzzer: Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject

Detailed Report: https://oss-fuzz.com/testcase?key=5517685405384704 Project: jackson-core Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjackson-core Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

OSV-2021-564 Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32514 Crash type: Uncaught exception Crash state: com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray java.base/java.lang.Module.isStaticallyExportedOrOpen...

libyang:lys_parse_mem: Crash in lysp_check_identifierchar

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=5330744454021120 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lysparsemem Job Type: libfuzzerasanlibyang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fdb825b16e2 Crash...

php:php-fuzz-execute: Heap-use-after-free in zend_string_equal_content

Detailed Report: https://oss-fuzz.com/testcase?key=6034835622723584 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x604000026b60 Crash State: zendstringequalcontent...

jackson-core:JsonFuzzer: Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray

Project: https://github.com/FasterXML/jackson-core.git Detailed Report: https://oss-fuzz.com/testcase?key=4708846074462208 Project: jackson-core Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjackson-core Platform Id: linux Crash Type: Uncaught exception Crash Address:...

OSV-2021-563 Heap-use-after-free in AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator->

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32459 Crash type: Heap-use-after-free READ 8 Crash state: AK::NonnullOwnPtr::operator- JS::IndexedProperties::arraylikesize JS::IndexedProperties::append...

OSV-2021-562 Segv on unknown address in GC_generic_malloc_many

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32453 Crash type: Segv on unknown address Crash state: GCgenericmallocmany GCmallocatomic Strnewsize...

OSV-2021-561 UNKNOWN WRITE in wuffs_base__pixel_swizzler__bgr__bgra_premul__src

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32451 Crash type: UNKNOWN WRITE Crash state: wuffsbasepixelswizzlerbgrbgrapremulsrc wuffsbasepixelswizzlerswizzleinterleavedfromslice fuzz...

OSV-2021-560 Uncaught exception in java.base/java.lang.ClassLoader.defineClass0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32439 Crash type: Uncaught exception Crash state: java.base/java.lang.ClassLoader.defineClass0 java.base/java.lang.System$2.defineClass java.base/java.lang.invoke.MethodHandles$Lookup$ClassDefiner.defineClass...

lxc:fuzz-lxc-config-read: Stack-buffer-overflow in parse_byte_size_string

Detailed Report: https://oss-fuzz.com/testcase?key=4819590195576832 Project: lxc Fuzzing Engine: afl Fuzz Target: fuzz-lxc-config-read Job Type: aflasanlxc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f379b948a3f Crash State: parsebytesizestring...

lxc:fuzz-lxc-config-read: Heap-use-after-free in lxc_clear_sysctls

Project: https://github.com/lxc/lxc.git Detailed Report: https://oss-fuzz.com/testcase?key=4579681643921408 Project: lxc Fuzzing Engine: libFuzzer Fuzz Target: fuzz-lxc-config-read Job Type: libfuzzerasanlxc Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x602000000110...

OSV-2021-559 Uncaught exception in java.base/java.nio.CharBuffer.wrap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32405 Crash type: Uncaught exception Crash state: java.base/java.nio.CharBuffer.wrap java.base/sun.nio.cs.StreamDecoder.implRead java.base/sun.nio.cs.StreamDecoder.read...

OSV-2021-558 Uncaught exception in java.base/java.nio.Buffer.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32399 Crash type: Uncaught exception Crash state: java.base/java.nio.Buffer. java.base/java.nio.CharBuffer. java.base/java.nio.HeapCharBuffer...

OSV-2021-557 Heap-use-after-free in copy_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32375 Crash type: Heap-use-after-free READ 1 Crash state: copystring douncompressblock processblock...

OSV-2021-555 Uncaught exception in java.base/java.util.concurrent.ConcurrentHashMap.putVal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32395 Crash type: Uncaught exception Crash state: java.base/java.util.concurrent.ConcurrentHashMap.putVal java.base/java.util.concurrent.ConcurrentHashMap.put com.fasterxml.jackson.core.util.InternCache.intern...

OSV-2021-553 Heap-buffer-overflow in read_color_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32421 Crash type: Heap-buffer-overflow READ 1 Crash state: readcolorline readpaint ttfacegetpaint...