OSV-2020-2220 Heap-buffer-overflow in mk_rconf_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28241 Crash type: Heap-buffer-overflow READ 1 Crash state: mkrconfread mkrconfopen flbparserconffile...

PT-2020-22165

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type known as Heap-double-free. The crash state involves several functions: sc pkcs15 free tokeninfo, sc pkcs15 card free,...

qpdf:qpdf_fuzzer: Heap-buffer-overflow in Pl_ASCII85Decoder::write

Project: https://github.com/qpdf/qpdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5162370603286528 Project: qpdf Fuzzing Engine: afl Fuzz Target: qpdffuzzer Job Type: aflasanqpdf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x615001bbabca Crash State:...

fluent-bit:flb-it-fuzz-http_fuzzer_OSSFUZZ: Heap-use-after-free in check_connection

Detailed Report: https://oss-fuzz.com/testcase?key=5647136884654080 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-httpfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-free READ 6 Crash Address: 0x603000000565 Crash State:...

fluent-bit:flb-it-fuzz-config_fuzzer_OSSFUZZ: Heap-buffer-overflow in mk_rconf_read

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4877570214592512 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow RE...

serenity:FuzzGIFLoader: Global-buffer-overflow in Gfx::decode_frame

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=6281737226944512 Project: serenity Fuzzing Engine: afl Fuzz Target: FuzzGIFLoader Job Type: aflasanserenity Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

fluent-bit:flb-it-fuzz-msgpack_to_gelf_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_sds_cat_utf8

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6227554268741632 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-msgpacktogelffuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type:...

exprtk:exprtk_fuzzer: Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/ArashPartow/exprtk.git Detailed Report: https://oss-fuzz.com/testcase?key=5176673682849792 Project: exprtk Fuzzing Engine: honggfuzz Fuzz Target: exprtkfuzzer Job Type: honggfuzzasanexprtk Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

serenity:FuzzPNGLoader: Heap-buffer-overflow in decode

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=6265409137016832 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzPNGLoader Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

uwebsockets:Http: Crash in decltype

Detailed Report: https://oss-fuzz.com/testcase?key=4787986289655808 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: Http Job Type: libfuzzermsanuwebsockets Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x716000010000 Crash State: decltype...

OSV-2020-2216 Heap-buffer-overflow in ojph::local::ojph_decode_codeblock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28103 Crash type: Heap-buffer-overflow WRITE 4 Crash state: ojph::local::ojphdecodecodeblock grk::t1ht::T1HT::decompress grk::DecompressBlockExec::open...

serenity:FuzzPNGLoader: Heap-buffer-overflow in decode

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5636989654925312 Project: serenity Fuzzing Engine: afl Fuzz Target: FuzzPNGLoader Job Type: aflasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6060000001...

zydis:ZydisFuzz: Index-out-of-bounds in ZydisDecodeInstruction

Project: https://github.com/zyantific/zydis.git Detailed Report: https://oss-fuzz.com/testcase?key=5737070714421248 Project: zydis Fuzzing Engine: libFuzzer Fuzz Target: ZydisFuzz Job Type: libfuzzerubsanzydis Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

serenity:FuzzRegexPosixExtended: Heap-buffer-overflow in regex::Lexer::back

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5077400093982720 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzRegexPosixExtended Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

imagemagick:encoder_jpg_fuzzer: Use-of-uninitialized-value in decompress_smooth_data

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5673136636559360 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderjpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

llvm:llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::StringMapImpl::LookupBucketFor

Detailed Report: https://oss-fuzz.com/testcase?key=5071836601384960 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x607000000148 Crash State:...

OSV-2020-2212 Heap-buffer-overflow in ih264d_fill_bs1_16x16mb_pslice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28039 Crash type: Heap-buffer-overflow READ 8 Crash state: ih264dfillbs116x16mbpslice ih264dcomputebsnonmbaffthread ih264drecondeblkslice...

mruby:mruby_fuzzer: Use-of-uninitialized-value in mrb_vm_exec

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5672826878820352 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

kubernetes:yaml_FuzzSigYaml: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4920805418598400 Project: kubernetes Fuzzing Engine: libFuzzer Fuzz Target: yamlFuzzSigYaml Job Type: libfuzzerasankubernetes Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

PT-2020-22160

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to a segmentation fault on an unknown address. The crash involved the ndpi free and ndpi free flow functions, and it happened in the...