openthread:ip6-send-fuzzer: Stack-buffer-overflow in ot::Message::Read

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5682816276234240 Project: openthread Fuzzing Engine: libFuzzer Fuzz Target: ip6-send-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash...

matio:matio_fuzzer: Crash in H5O_chunk_deserialize

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5716605253713920 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0009ffbe04a8 Crash State:...

wireshark:fuzzshark_ip_proto-udp: Heap-use-after-free in wmem_strbuf_get_str

Project: https://code.wireshark.org/review/wireshark Detailed Report: https://oss-fuzz.com/testcase?key=5193372674818048 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

openthread:radio-receive-done-fuzzer: Stack-buffer-overflow in ot::NetworkData::Leader::SendCommissioningGetResponse

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5741928179564544 Project: openthread Fuzzing Engine: libFuzzer Fuzz Target: radio-receive-done-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow REA...

libhtp:fuzz_htp: Use-of-uninitialized-value in LzmaDec_TryDummy

Project: https://github.com/OISF/libhtp.git Detailed Report: https://oss-fuzz.com/testcase?key=5164808743157760 Project: libhtp Fuzzing Engine: libFuzzer Fuzz Target: fuzzhtp Job Type: libfuzzermsanlibhtp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

irssi:server-fuzz: Bad-free in sig_destroyed

Project: https://github.com/irssi/irssi.git Detailed Report: https://oss-fuzz.com/testcase?key=5716112825647104 Project: irssi Fuzzing Engine: afl Fuzz Target: server-fuzz Job Type: aflasanirssi Platform Id: linux Crash Type: Bad-free Crash Address: 0x6190000016e0 Crash State: sigdestroyed...

ffmpeg:ffmpeg_AV_CODEC_ID_THP_fuzzer: Heap-buffer-overflow in ljpeg_decode_rgb_scan

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5763147314495488 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTHPfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

libvips:jpegsave_file_fuzzer: Crash in vips__foreign_convert_saveable

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5688033944272896 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavefilefuzzer Job Type: libfuzzerubsanlibvips Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

postgis:wkb_import_fuzzer: Heap-buffer-overflow in byte_from_wkb_state

Project: https://git.osgeo.org/gitea/postgis/postgis.git Detailed Report: https://oss-fuzz.com/testcase?key=5686969597689856 Project: postgis Fuzzing Engine: afl Fuzz Target: wkbimportfuzzer Job Type: aflasanpostgis Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

gdal:gdal_fuzzer: Heap-buffer-overflow in Get

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5757740735004672 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf0e9033f Crash...

libavc:avc_dec_fuzzer: Heap-buffer-overflow in ih264d_compute_bs_non_mbaff_thread

Project: https://android.googlesource.com/platform/external/libavc Detailed Report: https://oss-fuzz.com/testcase?key=5140635270512640 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

wireshark:fuzzshark_ip: Heap-use-after-free in wmem_str_hash

Detailed Report: https://oss-fuzz.com/testcase?key=5654423381999616 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x60200218c390 Crash State: wmemstrhash wmemmaplookup...

chakra: Crash in Js::JavascriptOperators::GetPropertyNoCache

Detailed report: https://oss-fuzz.com/testcase?key=5679056967696384 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00107fff8012 Crash State: Js::JavascriptOperators::GetPropertyNoCache Js::JavascriptPromise::ResolveHelper...

Amazon Linux AMI : GraphicsMagick (ALAS-2019-1257)

GraphicsMagick is now participating in Google's oss-fuzz project due to the contributions and assistance of Alex Gaynor. Since February 4 2018, 343 issues have been opened by oss-fuzz and 331 of those issues have been resolved. The issues list is available at...

gdal:cad_fuzzer: Crash in CADBuffer::Read2B

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5725897545482240 Project: gdal Fuzzing engine: libFuzzer Fuzz target: cadfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x154fdc99 Crash State:...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parse_makernote_ADDRESS

Detailed report: https://oss-fuzz.com/testcase?key=5632907177099264 Project: imagemagick Fuzzing engine: libFuzzer Fuzz target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::parsemakernoteADDRESS...

aspell:aspell_fuzzer: Crash in acommon::DecodeDirect<unsigned short>::decode

Project: https://github.com/gnuaspell/aspell.git Detailed report: https://oss-fuzz.com/testcase?key=5673813550825472 Project: aspell Fuzzing engine: libFuzzer Fuzz target: aspellfuzzer Job Type: libfuzzerubsanaspell Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000001cbb000 Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Global-buffer-overflow in dequantize

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5648247961419776 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDATRAC9fuzzer Fuzz target binary: ffmpegAVCODECIDATRAC9fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ ...

Low: GraphicsMagick

Issue Overview: GraphicsMagick is now participating in Google's oss-fuzz project due to the contributions and assistance of Alex Gaynor. Since February 4 2018, 343 issues have been opened by oss-fuzz and 331 of those issues have been resolved. The issues list is available at...

ffmpeg/ffmpeg_AV_CODEC_ID_RALF_fuzzer: Index-out-of-bounds in decode_channel

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5086088934195200 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDRALFfuzzer Fuzz target binary: ffmpegAVCODECIDRALFfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...