OSV-2021-503 Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31765 Crash type: Use-after-poison READ 8 Crash state: std::1::uniqueptrSkSL::Expression, std::1::defaultdeleteSkSL::Expression SkSL::DefinitionMap::getKnownDefinition SkSL::VariableReference::constantPropagate...

skia:api_mock_gpu_canvas: Heap-use-after-free in GrGpuResource::release

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5646541764296704 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apimockgpucanvas Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

OSV-2021-498 Invalid-free in frame_get_lazychunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31705 Crash type: Invalid-free Crash state: framegetlazychunk framedecompresschunk blosc2schunkdecompresschunk...

OSV-2021-495 Heap-double-free in bit_chain_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31724 Crash type: Heap-double-free Crash state: bitchainfree dwgencodeMTEXT dwgencodeaddobject...

kimageformats:kimgio_heif_fuzzer: Heap-buffer-overflow in put_epel_8_fallback

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6743682167472128 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

systemd:fuzz-systemctl-parse-argv: Heap-use-after-free in user_and_machine_equivalent

Detailed Report: https://oss-fuzz.com/testcase?key=5876397522419712 Project: systemd Fuzzing Engine: afl Fuzz Target: fuzz-systemctl-parse-argv Job Type: aflasansystemd Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6040001fdf20 Crash State: userandmachineequivalent...

libyang:lyd_parse_mem_json: Heap-buffer-overflow in lyjson_number

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=5450016241090560 Project: libyang Fuzzing Engine: afl Fuzz Target: lydparsememjson Job Type: aflasanlibyang Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x60500000a187...

OSV-2021-487 UNKNOWN READ in blosc_run_decompression_with_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31611 Crash type: UNKNOWN READ Crash state: bloscrundecompressionwithcontext blosc2decompressctx framedecompresschunk...

libredwg:llvmfuzz: Heap-buffer-overflow in encode_3dsolid

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6358874572587008 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

libredwg:llvmfuzz: Dynamic-stack-buffer-overflow in dxf_fixup_string

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4527176918630400 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 15 Crash Addres...

OSV-2021-481 Heap-buffer-overflow in ZSTD_createDDict_advanced

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31586 Crash type: Heap-buffer-overflow READ Crash state: ZSTDcreateDDictadvanced ZSTDcreateDDict bloscrundecompressionwithcontext...

OSV-2021-480 UNKNOWN READ in std::__Fuzzer::basic_filebuf<char, std::__Fuzzer::char_traits<char> >::setbuf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31578 Crash type: UNKNOWN READ Crash state: std::Fuzzer::basicfilebuf ::setbuf std::Fuzzer::basicfilebuf ::basicfil...

ffmpeg:ffmpeg_AV_CODEC_ID_SGA_fuzzer: Heap-buffer-overflow in lzss_decompress

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5176667708456960 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDSGAfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x631000010c8...

zlib-ng:minigzip_fuzzer: Heap-buffer-overflow in minigzip_fuzzer.c

Detailed Report: https://oss-fuzz.com/testcase?key=4788349112025088 Project: zlib-ng Fuzzing Engine: libFuzzer Fuzz Target: minigzipfuzzer Job Type: libfuzzerasani386zlib-ng Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0xf2651e0f Crash State: minigzipfuzzer.c Sanitizer:...

c-blosc2:decompress_frame_fuzzer: Crash in blosc_d

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=6429394043273216 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x30607494...

OSV-2021-476 Heap-buffer-overflow in blosc_d

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31556 Crash type: Heap-buffer-overflow READ 4 Crash state: bloscd dojob bloscrundecompressionwithcontext...

libredwg:llvmfuzz: Heap-buffer-overflow in dwg_decode_MINSERT_private

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5737591749083136 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

php:php-fuzz-execute: Heap-use-after-free in php_var_dump

Detailed Report: https://oss-fuzz.com/testcase?key=4768551329202176 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x606000015024 Crash State: phpvardump phparrayelementdump...

libyang:lys_parse_mem: Heap-buffer-overflow in parse_revision

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=4561110814556160 Project: libyang Fuzzing Engine: afl Fuzz Target: lysparsemem Job Type: aflasanlibyang Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x60b000010f90 Crash...

c-blosc2:decompress_frame_fuzzer: Crash in delta_decoder

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5419414330671104 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfb54b8...