OSV-2021-464 Heap-buffer-overflow in blosc_read_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31535 Crash type: Heap-buffer-overflow READ 16 Crash state: bloscreadheader blosc2cbuffersizes framegetlazychunk...

OSV-2021-461 Heap-buffer-overflow in ProcessReply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31527 Crash type: Heap-buffer-overflow READ 1 Crash state: ProcessReply wolfSSLconnect client.c...

OSV-2021-460 Heap-buffer-overflow in Op_to_sdr_planes::convert_colorspace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31495 Crash type: Heap-buffer-overflow READ 2 Crash state: Optosdrplanes::convertcolorspace heif::ColorConversionPipeline::convertimage heif::convertcolorspace...

OSV-2021-459 Segv on unknown address in slice_segment_header::operator=

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31492 Crash type: Segv on unknown address Crash state: slicesegmentheader::operator= slicesegmentheader::read decodercontext::readsliceNAL...

OSV-2021-457 Heap-buffer-overflow in unescape_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31491 Crash type: Heap-buffer-overflow READ 1 Crash state: unescapetag ircparsemessagetags ircservereventtags...

suricata:fuzz_sigpcap: Heap-use-after-free in JsonDNP3LoggerToClient

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=6666200017928192 Project: suricata Fuzzing Engine: afl Fuzz Target: fuzzsigpcap Job Type: aflasansuricata Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x631000190800 Crash...

lua:fuzz_lua: Heap-buffer-overflow in luaG_runerror

Project: https://github.com/lua/lua.git Detailed Report: https://oss-fuzz.com/testcase?key=4832107483496448 Project: lua Fuzzing Engine: libFuzzer Fuzz Target: fuzzlua Job Type: libfuzzerasanlua Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x604000001a77 Crash State:...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in blosc_read_header

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5866489321226240 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash...

kimageformats:kimgio_heif_fuzzer: Use-of-uninitialized-value in decoded_picture_buffer::get_image

Detailed Report: https://oss-fuzz.com/testcase?key=4631524692590592 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

kimageformats:kimgio_heif_fuzzer: Use-of-uninitialized-value in put_unweighted_pred_16_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=5048523671339008 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: putunweightedpred16fallback...

fio:fuzz_parseini: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6356056973377536 Project: fio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparseini Job Type: libfuzzerubsanfio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7feb4e2a9970 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

libredwg:llvmfuzz: Crash in dwg_encode

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6196003641360384 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x632000180000 Crash...

OSV-2021-455 Heap-use-after-free in zend_hash_iterator_pos_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31423 Crash type: Heap-use-after-free READ 1 Crash state: zendhashiteratorposex ZENDFEFETCHRWSPECVARHANDLER fuzzerexecuteex...

OSV-2021-454 Heap-buffer-overflow in irc_parse_message_tags

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31443 Crash type: Heap-buffer-overflow READ 8 Crash state: ircparsemessagetags ircservereventtags signalemitreal...

OSV-2021-453 UNKNOWN WRITE in std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31457 Crash type: UNKNOWN WRITE Crash state: std::1::pair uWS::HttpParser::fenceAndConsumePostPadded0 uWS::HttpParser::consumePostPadded std::1::function::funcLLVMFuzzerTestOneInput::$0, std::1::allocatorLL...

OSV-2021-450 Global-buffer-overflow in coap_pdu_parse_opt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31479 Crash type: Global-buffer-overflow WRITE 1 Crash state: coappduparseopt coappduparse...

orbit:CaptureEventProcessorProcessEventsFuzzer: Heap-use-after-free in GpuQueueSubmissionProcessor::ProcessGpuQueueSubmission

Detailed Report: https://oss-fuzz.com/testcase?key=5598317532807168 Project: orbit Fuzzing Engine: libFuzzer Fuzz Target: CaptureEventProcessorProcessEventsFuzzer Job Type: libfuzzerasanorbit Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60c000000d48 Crash State:...

kimageformats:kimgio_heif_fuzzer: Heap-buffer-overflow in Op_to_sdr_planes::convert_colorspace

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5020322681192448 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

kimageformats:kimgio_heif_fuzzer: Segv on unknown address in slice_segment_header::operator=

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4625006744174592 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioheiffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash Stat...

irssi:server-fuzz: Heap-buffer-overflow in unescape_tag

Project: https://github.com/irssi/irssi.git Detailed Report: https://oss-fuzz.com/testcase?key=4577891154264064 Project: irssi Fuzzing Engine: afl Fuzz Target: server-fuzz Job Type: aflasanirssi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60300011669f Crash State:...