OSV-2020-2171 Stack-buffer-overflow in fp_read_unsigned_bin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27666 Crash type: Stack-buffer-overflow READ 8 Crash state: fpreadunsignedbin mpreadunsignedbin wcRsaPublicKeyDecodeRaw...

wolfssl:fuzzer-wolfssh-client: Stack-buffer-overflow in fp_read_unsigned_bin

Detailed Report: https://oss-fuzz.com/testcase?key=5702057176334336 Project: wolfssl Fuzzing Engine: afl Fuzz Target: fuzzer-wolfssh-client Job Type: aflasanwolfssl Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7ffda2039cb8 Crash State: fpreadunsignedbin...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in ojph::local::ojph_decode_codeblock

Detailed Report: https://oss-fuzz.com/testcase?key=6591909627428864 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerasangrok Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x606000000a80 Crash State:...

OSV-2020-2168 Heap-buffer-overflow in H5D__scatter_mem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27625 Crash type: Heap-buffer-overflow WRITE Crash state: H5Dscattermem H5Dscatgathread H5Dcontigread...

tidb:fuzzMarshalJSON: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4860761331204096 Project: tidb Fuzzing Engine: libFuzzer Fuzz Target: fuzzMarshalJSON Job Type: libfuzzerasantidb Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

prometheus:fuzzParseMetricSelector: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5758834282594304 Project: prometheus Fuzzing Engine: libFuzzer Fuzz Target: fuzzParseMetricSelector Job Type: libfuzzerasanprometheus Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000201320 Crash State: NULL Sanitizer: address...

exprtk:exprtk_fuzzer: Stack-buffer-overflow in exprtk::lexer::generator::scan_string

Project: https://github.com/ArashPartow/exprtk.git Detailed Report: https://oss-fuzz.com/testcase?key=5728655862661120 Project: exprtk Fuzzing Engine: libFuzzer Fuzz Target: exprtkfuzzer Job Type: libfuzzerasanexprtk Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

OSV-2020-2167 Heap-buffer-overflow in ojph::local::ojph_decode_codeblock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27533 Crash type: Heap-buffer-overflow WRITE 4 Crash state: ojph::local::ojphdecodecodeblock grk::t1ht::T1HT::decompress grk::DecompressBlockExec::open...

OSV-2020-2165 Use-of-uninitialized-value in isSameGfxColor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27523 Crash type: Use-of-uninitialized-value Crash state: isSameGfxColor Gfx::doAxialShFill Gfx::opShFill...

OSV-2020-2161 Heap-buffer-overflow in msix_vector_masked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27418 Crash type: Heap-buffer-overflow READ 1 Crash state: msixvectormasked msixismasked msixtablemmiowrite...

OSV-2020-2159 Heap-buffer-overflow in flb_parser_json_do

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27499 Crash type: Heap-buffer-overflow READ Crash state: flbparserjsondo flbparserdo parserfuzzer.c...

OSV-2020-2158 Global-buffer-overflow in arrow::Status arrow::internal::ValidateArrayFullImpl::ValidateListLike<arrow::Li

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27475 Crash type: Global-buffer-overflow READ 4 Crash state: arrow::Status arrow::internal::ValidateArrayFullImpl::ValidateListLikearrow::Li arrow::internal::ValidateArrayFullImpl::ValidateWithType...

OSV-2020-2157 Stack-buffer-overflow in insert_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27480 Crash type: Stack-buffer-overflow READ 1 Crash state: insertkey detectnetkey scpkcs15emutcosinitex...

OSV-2020-2155 Heap-buffer-overflow in wolfSSH_CleanPath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27436 Crash type: Heap-buffer-overflow READ 16 Crash state: wolfSSHCleanPath ParseScpCommand DoScpRequest...

OSV-2020-2154 Heap-buffer-overflow in void arrow::internal::TransferBitmap<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27474 Crash type: Heap-buffer-overflow READ 8 Crash state: void arrow::internal::TransferBitmap arrow::ConcatenateBitmaps arrow::ConcatenateImpl::Concatenate...

openvswitch:odp_target: Heap-buffer-overflow in get_32aligned_be64

Project: https://github.com/openvswitch/ovs.git Detailed Report: https://oss-fuzz.com/testcase?key=5663078959808512 Project: openvswitch Fuzzing Engine: libFuzzer Fuzz Target: odptarget Job Type: libfuzzerasanopenvswitch Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_EXR_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4770472801337344 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDEXRfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer:...

libsndfile:sndfile_fuzzer: Heap-buffer-overflow in copyPredictorTo24

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=5092501698117632 Project: libsndfile Fuzzing Engine: honggfuzz Fuzz Target: sndfilefuzzer Job Type: honggfuzzasanlibsndfile Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

fluent-bit:flb-it-fuzz-parser_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_parser_json_do

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5656181661761536 Project: fluent-bit Fuzzing Engine: honggfuzz Fuzz Target: flb-it-fuzz-parserfuzzerOSSFUZZ Job Type: honggfuzzasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow RE...

envoy:h2_capture_persistent_fuzz_test: Heap-use-after-free in Envoy::Http::StreamCallbackHelper::runResetCallbacks

Detailed Report: https://oss-fuzz.com/testcase?key=5673532021014528 Project: envoy Fuzzing Engine: afl Fuzz Target: h2capturepersistentfuzztest Job Type: aflasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x603000303678 Crash State:...