OSV-2021-530 UNKNOWN WRITE in g_array_append_vals

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32131 Crash type: UNKNOWN WRITE Crash state: garrayappendvals gbytearrayappend fuefifirmwarefilesystemwrite...

OSV-2021-526 Heap-use-after-free in ZSTD_freeDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32076 Crash type: Heap-use-after-free READ Crash state: ZSTDfreeDDict blosc2freectx blosc2schunkfree...

c-blosc2:decompress_frame_fuzzer: Use-of-uninitialized-value in get_coffset

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5644771784785920 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

gonids:fuzz_parserule: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5201803940593664 Project: gonids Fuzzing Engine: libFuzzer Fuzz Target: fuzzparserule Job Type: libfuzzerasangonids Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000190247c0 Crash State: NULL Sanitizer: address ASAN Recommended...

libyang:lyd_parse_mem_xml: Invalid-free in ly_set_erase

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=5126633741746176 Project: libyang Fuzzing Engine: afl Fuzz Target: lydparsememxml Job Type: aflasanlibyang Platform Id: linux Crash Type: Invalid-free Crash Address: 0x615000000034 Crash State:...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in bshuf_shuffle_bit_eightelem_sse2

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=4959500214861824 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash...

OSV-2021-520 Heap-buffer-overflow in flatbuffers::EscapeString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32008 Crash type: Heap-buffer-overflow READ 1 Crash state: flatbuffers::EscapeString flexbuffers::Reference::ToString void flexbuffers::AppendToString...

libraw:libraw_fuzzer: Use-of-uninitialized-value in saneSonyCameraInfo

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5453409617575936 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

prometheus:fuzzParseOpenMetric: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6439772563308544 Project: prometheus Fuzzing Engine: libFuzzer Fuzz Target: fuzzParseOpenMetric Job Type: libfuzzerasanprometheus Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Cras...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::subtract_black_internal

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4612814623866880 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

OSV-2021-514 UNKNOWN READ in _fini

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31953 Crash type: UNKNOWN READ Crash state: fini...

OSV-2021-512 Heap-buffer-overflow in luaG_getfuncline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31892 Crash type: Heap-buffer-overflow READ 1 Crash state: luaGgetfuncline luaGrunerror luaDgrowstack...

OSV-2021-510 Heap-use-after-free in grk_object_unref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31874 Crash type: Heap-use-after-free READ 8 Crash state: grkobjectunref grk::GrkObjectImpl::release grk::GrkObject::unref...

OSV-2021-509 Heap-buffer-overflow in _estrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31922 Crash type: Heap-buffer-overflow READ Crash state: estrdup exifprocessusercomment exifprocessIFDTAGimpl...

php:php-fuzz-exif: Heap-buffer-overflow in _estrdup

Detailed Report: https://oss-fuzz.com/testcase?key=4507758918500352 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60b00038d42e Crash State: estrdup exifprocessusercomment...

lua:fuzz_lua: Heap-buffer-overflow in luaG_getfuncline

Project: https://github.com/lua/lua.git Detailed Report: https://oss-fuzz.com/testcase?key=5823823048998912 Project: lua Fuzzing Engine: afl Fuzz Target: fuzzlua Job Type: aflasanlua Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6030001daaa5 Crash State:...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::FileFormatDecompress::serializeAsoc

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5687209786212352 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

istio:fuzz_parse_inputs: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6299876703993856 Project: istio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparseinputs Job Type: libfuzzerasanistio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000200008 Crash State: NULL Sanitizer: address ASAN Recommended...

libredwg:llvmfuzz: Heap-buffer-overflow in dxf_skip_ws

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5712574051123200 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2021-504 Heap-buffer-overflow in ih264d_mark_err_slice_skip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31757 Crash type: Heap-buffer-overflow WRITE 8 Crash state: ih264dmarkerrsliceskip ih264dvideodecode ih264dapifunction...