OSV-2021-417 Heap-use-after-free in __cil_verify_classperms

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31065 Crash type: Heap-use-after-free READ 8 Crash state: cilverifyclassperms cilverifyclasspermission cilpreverifyhelper...

graphicsmagick:coder_MNG_fuzzer: Heap-buffer-overflow in ReadMNGImage

Detailed Report: https://oss-fuzz.com/testcase?key=4580215097524224 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderMNGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6060000000be Crash State: ReadMNGImage ReadImage...

go-attestation:parse_event_log_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4684920695947264 Project: go-attestation Fuzzing Engine: libFuzzer Fuzz Target: parseeventlogfuzzer Job Type: libfuzzerasango-attestation Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address...

go-attestation:parse_event_log_fuzzer: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4728213731409920 Project: go-attestation Fuzzing Engine: libFuzzer Fuzz Target: parseeventlogfuzzer Job Type: libfuzzerasango-attestation Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreat...

OSV-2021-414 Heap-use-after-free in us_socket_close

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31047 Crash type: Heap-use-after-free READ 8 Crash state: ussocketclose wrapepollwait uslooprun...

OSV-2021-413 UNKNOWN WRITE in sudo_user_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31042 Crash type: UNKNOWN WRITE Crash state: sudouserfree sudoerspolicyclose fuzzpolicy.c...

systemd:fuzz-systemctl-parse-argv: Heap-double-free in mfree

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=6252008602468352 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-systemctl-parse-argv Job Type: libfuzzerasansystemd Platform Id: linux Crash Type: Heap-double-free Crash Address:...

grpc-gateway:fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6241805840547840 Project: grpc-gateway Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasangrpc-gateway Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000304190b9 Crash State: NULL Sanitizer: address ASAN Recommended...

OSV-2021-411 UNKNOWN READ in ot::Cli::Interpreter::OutputFormatV

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31002 Crash type: UNKNOWN READ Crash state: ot::Cli::Interpreter::OutputFormatV ot::Cli::Interpreter::OutputLine ot::Cli::SrpServer::ProcessDomain...

OSV-2021-404 Segv on unknown address in blosc_read_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30974 Crash type: Segv on unknown address Crash state: bloscreadheader blosc2getitemctx bloscgetitem...

libreoffice:pptfuzzer: Stack-buffer-overflow in int rtl::str::getLength<char>

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6535927918886912 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash...

scapy:pcap_fuzzer: Uncaught exception in _read_block_spb

Detailed Report: https://oss-fuzz.com/testcase?key=4947059864109056 Project: scapy Fuzzing Engine: libFuzzer Fuzz Target: pcapfuzzer Job Type: libfuzzerasanscapy Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: readblockspb readblock readpacket Sanitizer: address ASAN...

OSV-2021-401 Segv on unknown address in us_internal_dispatch_ready_poll

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30951 Crash type: Segv on unknown address Crash state: usinternaldispatchreadypoll uslooprun test...

OSV - Open Source Vulnerability DB And Triage Service

OSV is a vulnerability database and triage infrastructure for open source projects aimed at helping both open source maintainers and consumers of open source. For open source maintainers, OSV's automation helps reduce the burden of triage. Each vulnerability undergoes automated bisection and impa...

libreoffice:scrtffuzzer: Heap-use-after-free in std::__1::unique_ptr<SvxRTFItemStackList, std::__1::default_delete<SvxRTFItemSta

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4911909918867456 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: scrtffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in RestoreAtomConnectionsSetStereo

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=6325199375040512 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: inchiinputfuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

OSV-2021-399 Heap-buffer-overflow in void AK::__format_value<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30914 Crash type: Heap-buffer-overflow READ 1 Crash state: void AK::formatvalue AK::vformatimpl AK::vformatimpl...

uwebsockets:EpollHelloWorld: Segv on unknown address in us_internal_dispatch_ready_poll

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5300075842633728 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: EpollHelloWorld Job Type: libfuzzerasanuwebsockets Platform Id: linux Crash Type: Segv on unknown address Crash...

uwebsockets:EpollHelloWorld: Null-dereference READ with empty stacktrace

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5375680151945216 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: EpollHelloWorld Job Type: libfuzzerubsanuwebsockets Platform Id: linux Crash Type: Null-dereference READ Crash...

sqlite3:ossfuzz: Use-of-uninitialized-value in patternCompare

Detailed Report: https://oss-fuzz.com/testcase?key=6755276260769792 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: patternCompare likeFunc sqlite3VdbeExec Sanitize...