Scalable Fuzzing Infrastructure: ClusterFuzz

ClusterFuzz is a scalable fuzzing infrastructure which finds security and stability issues in software. It is used by Google for fuzzing the Chrome Browser, and serves as the fuzzing backend for OSS-Fuzz . ClusterFuzz provides many features which help seamlessly integrate fuzzing into a software...

Successfully acquired WinRAR 19-year-old code-execution vulnerability-a vulnerability warning-the black bar safety net

In this paper, we describes how to use the WinAFL fuzz testing tool Find WinRAR in the logic error, and use it to completely control the volatile trap host story. The vulnerability only by extracting a carefully constructed archive file can be successfully exploited, so that more than 5 billion...

envoy/config_fuzz_test: Heap-use-after-free in std::__1::__bucket_list_deallocator<std::__1::allocator<std::__1::__hash_node_ba

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5666128418832384 Project: envoy Fuzzer: libFuzzerenvoyconfigfuzztest Fuzz target binary: configfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

file/magic_fuzzer: Heap-buffer-overflow in looks_ucs32

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=5684238215544832 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

envoy/config_fuzz_test: Heap-use-after-free in Envoy::Server::InitManagerImpl::initializeTarget

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5664687524413440 Project: envoy Fuzzer: libFuzzerenvoyconfigfuzztest Fuzz target binary: configfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

imagemagick/encoder_heic_fuzzer: Heap-buffer-overflow in derive_spatial_luma_vector_prediction

Detailed report: https://oss-fuzz.com/testcase?key=5671545446334464 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x61b00000060c...

tidy-html5/tidy_fuzzer: Use-of-uninitialized-value in TextEndsWithNewline

Detailed report: https://oss-fuzz.com/testcase?key=5662667379834880 Project: tidy-html5 Fuzzer: libFuzzertidy-html5tidyfuzzer Fuzz target binary: tidyfuzzer Job Type: libfuzzermsantidy-html5 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: TextEndsWithNewline...

imagemagick/encoder_dcm_fuzzer: Heap-buffer-overflow in ReadDCMImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5740513026637824 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdcmfuzzer Fuzz target binary: encoderdcmfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_dng_fuzzer: Global-buffer-overflow in LibRaw::parse_makernote

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5733147803648000 Project: imagemagick Fuzzer: aflimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

kimageformats/kimgio_fuzzer: Crash in BLEND_SOURCE_OVER_ARGB32_WITH_CONST_ALPHA_AVX2

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5765015108321280 Project: kimageformats Fuzzer: aflkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

graphicsmagick/coder_MVG_fuzzer: Heap-buffer-overflow in DrawDashPolygon

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5741583656288256 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

dav1d/dav1d_fuzzer: Crash in dav1d_ipred_filter_avx2

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5697181166600192 Project: dav1d Fuzzer: libFuzzerdav1dfuzzer Fuzz target binary: dav1dfuzzer Job Type: libfuzzerasandav1d Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

graphicsmagick/coder_PTIF_fuzzer: Use-of-uninitialized-value in DisassociateAlphaRegion

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5690547757383680 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPTIFfuzzer Fuzz target binary: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

grpc/api_fuzzer: Incorrect-function-pointer-type in grpc_core::AresDnsResolver::StartResolvingLocked

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5642204746350592 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Crash...

envoy/codec_impl_fuzz_test: Heap-use-after-free in Envoy::Http::HttpStream::HttpStream

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5722972495544320 Project: envoy Fuzzer: libFuzzerenvoycodecimplfuzztest Fuzz target binary: codecimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8...

envoy/codec_impl_fuzz_test: Heap-use-after-free in Envoy::Http::HttpStream::directionalAction

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5657409819770880 Project: envoy Fuzzer: libFuzzerenvoycodecimplfuzztest Fuzz target binary: codecimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8...

graphicsmagick/coder_PTIF_fuzzer: Use-of-uninitialized-value in DisassociateAlphaRegion

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5713410539388928 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPTIFfuzzer Fuzz target binary: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

radare2/ia_fuzz: Heap-double-free in _parse_resource_directory

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5652434150490112 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x605000064db...

kimageformats/kimgio_fuzzer: Use-of-uninitialized-value in QImage::pixel

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5676156395716608 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

tidy-html5/tidy_fuzzer: Use-of-uninitialized-value in PPrintText

Detailed report: https://oss-fuzz.com/testcase?key=5672685609156608 Project: tidy-html5 Fuzzer: libFuzzertidy-html5tidyfuzzer Fuzz target binary: tidyfuzzer Job Type: libfuzzermsantidy-html5 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: PPrintText...