OSV-2020-1668 Memcpy-param-overlap in ot::Message::Write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25226 Crash type: Memcpy-param-overlap Crash state: ot::Message::Write ot::Message::CopyTo ot::Ip6::Ip6::InsertMplOption...

OSV-2020-1667 Heap-use-after-free in xmlTextReaderRead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25210 Crash type: Heap-use-after-free READ 4 Crash state: xmlTextReaderRead xml.c xmlTextReaderFreeNode...

OSV-2020-1664 Negative-size-param in BaseMemStream<char const>::getChars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25221 Crash type: Negative-size-param Crash state: BaseMemStream::getChars Stream::doGetChars Stream::fillString...

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in std::__1::vector<unsigned int, std::__1::allocator<unsigned int> >::reserve

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5762452447559680 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

envoy:server_fuzz_test: Heap-use-after-free in Envoy::Http::AsyncStreamImpl::resetStream

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5539928229019648 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: serverfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

alembic:alembic_dump_info_fuzzer: Segv on unknown address in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/alembic/alembic.git Detailed Report: https://oss-fuzz.com/testcase?key=5723831061446656 Project: alembic Fuzzing Engine: libFuzzer Fuzz Target: alembicdumpinfofuzzer Job Type: libfuzzerasanalembic Platform Id: linux Crash Type: Segv on unknown address Crash Address:...

OSV-2020-1661 Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25181 Crash type: Use-of-uninitialized-value Crash state: fuzzing::memory::memorytestmsan cryptofuzz::ExecutorBase::postp cryptofuzz::ExecutorBase::Run...

OSV-2020-1659 Use-of-uninitialized-value in LibRaw::parse_sinar_ia

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25188 Crash type: Use-of-uninitialized-value Crash state: LibRaw::parsesinaria LibRaw::identify LibRaw::opendatastream...

alembic:alembic_dump_info_fuzzer: Segv on unknown address in std::__1::__tree_node_base<void*>* std::__1::__tree_min<std::__1::__tree_node_ba

Project: https://github.com/alembic/alembic.git Detailed Report: https://oss-fuzz.com/testcase?key=5636402992381952 Project: alembic Fuzzing Engine: afl Fuzz Target: alembicdumpinfofuzzer Job Type: aflasanalembic Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

libreoffice:ww8fuzzer: Heap-use-after-free in SwMSDffManager::ProcessObj

Detailed Report: https://oss-fuzz.com/testcase?key=4776111647752192 Project: libreoffice Fuzzing Engine: afl Fuzz Target: ww8fuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60f00004ef98 Crash State: SwMSDffManager::ProcessObj...

libzmq:test_socket_options_fuzzer: Heap-buffer-overflow in zmq_z85_decode

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5458470013501440 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testsocketoptionsfuzzer Job Type: libfuzzerasanlibzmq Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

open62541:fuzz_binary_decode: Use-of-uninitialized-value in DiagnosticInfo_clear

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=4959778072428544 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzbinarydecode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::RangeEqualsVisitor::Visit

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6310318291288064 Project: arrow Fuzzing Engine: honggfuzz Fuzz Target: arrow-ipc-stream-fuzz Job Type: honggfuzzasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

OSV-2020-1647 UNKNOWN READ in aiTexture::~aiTexture

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25108 Crash type: UNKNOWN READ Crash state: aiTexture::aiTexture Assimp::MDLImporter::SkipSkinLump3DGSMDL7 Assimp::HMPImporter::ReadFirstSkin...

libzmq:test_socket_options_fuzzer: Heap-buffer-overflow in test_socket_options_fuzzer.cpp

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=4903899407056896 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testsocketoptionsfuzzer Job Type: libfuzzerasani386libzmq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

yara:macho_fuzzer: Heap-buffer-overflow in macho_is_32

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5708023786635264 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: machofuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x622000002e03...

OSV-2020-1645 Use-of-uninitialized-value in std::__1::char_traits<char>::length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25076 Crash type: Use-of-uninitialized-value Crash state: std::1::chartraits::length std::1::basicstring, std::1::allocatorch Magick::formatExceptionMessage...

OSV-2020-1644 Segv on unknown address in clang::Sema::PushDeclContext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25059 Crash type: Segv on unknown address Crash state: clang::Sema::PushDeclContext clang::Sema::ActOnStartDelayedMemberDeclarations clang::Parser::ParseLexedPragmas...

OSV-2020-1643 Heap-use-after-free in UA_NodeMap_delete

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25068 Crash type: Heap-use-after-free READ 4 Crash state: UANodeMapdelete UAServernew fuzzbinarymessage.cc...

leptonica:pix4_fuzzer: Use-of-uninitialized-value in pixGetCmapHistogramInRect

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=4713657823657984 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: pix4fuzzer Job Type: libfuzzermsanleptonica Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...