llvm:clang-fuzzer: Segv on unknown address in EvaluateObjectArgument

Detailed Report: https://oss-fuzz.com/testcase?key=5664409284509696 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: EvaluateObjectArgument...

ots:ots-fuzzer: Heap-buffer-overflow in LZ4_decompress_safe_partial

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=5662681298370560 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzerasanots Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6180000007d0...

llvm:clangd-fuzzer: Crash in clang::serialization::reader::HeaderFileInfoTrait::ReadData

Detailed Report: https://oss-fuzz.com/testcase?key=5194868125335552 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clangd-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fe69ffbbfbf Crash State:...

llvm:clang-objc-fuzzer: Segv on unknown address in LValue::addUnsizedArray

Detailed Report: https://oss-fuzz.com/testcase?key=5720597908946944 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: LValue::addUnsizedArray...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::DeclareImplicitCopyConstructor

Detailed Report: https://oss-fuzz.com/testcase?key=5719523747692544 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::DeclareImplicitCopyConstructor void...

llvm:clang-fuzzer: Segv on unknown address in clang::LookupResult::sanity

Detailed Report: https://oss-fuzz.com/testcase?key=4872329519955968 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::LookupResult::sanity...

llvm:clang-fuzzer: Segv on unknown address in llvm::llvm_unreachable_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5165184549388288 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: llvm::llvmunreachableinternal clang::operator...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::ActOnStartOfFunctionDef

Detailed Report: https://oss-fuzz.com/testcase?key=5729474851373056 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::ActOnStartOfFunctionDef...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::getCurBlock

Detailed Report: https://oss-fuzz.com/testcase?key=5718959311814656 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::getCurBlock...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::PerformImplicitConversion

Detailed Report: https://oss-fuzz.com/testcase?key=5693858247868416 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::PerformImplicitConversion...

llvm:clang-objc-fuzzer: Segv on unknown address in clang::Sema::ActOnMethodDeclaration

Detailed Report: https://oss-fuzz.com/testcase?key=5759960881561600 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::ActOnMethodDeclaration...

llvm:clang-fuzzer: Segv on unknown address in clang::Parser::ParseCXXAmbiguousParenExpression

Detailed Report: https://oss-fuzz.com/testcase?key=5663724107202560 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Parser::ParseCXXAmbiguousParenExpression...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::CreateOverloadedBinOp

Detailed Report: https://oss-fuzz.com/testcase?key=5681625778356224 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::CreateOverloadedBinOp...

ots:ots-fuzzer: Heap-buffer-overflow in LZ4_read16

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=6229453185482752 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzerasanots Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6180000007ce...

openthread:ncp-uart-received-fuzzer: Stack-buffer-overflow in ot::MeshCoP::Commissioner::GeneratePskc

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5163475521503232 Project: openthread Fuzzing Engine: libFuzzer Fuzz Target: ncp-uart-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow WRIT...

openthread:radio-receive-done-fuzzer: Stack-buffer-overflow in ot::Message::Write

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5110937602490368 Project: openthread Fuzzing Engine: afl Fuzz Target: radio-receive-done-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 11 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Global-buffer-overflow in apply_band_extension

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5679823087468544 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDATRAC9fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

llvm:clang-fuzzer: Segv on unknown address in llvm::llvm_unreachable_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5639537548328960 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: llvm::llvmunreachableinternal...

SockPuppet: A Walkthrough of a Kernel Exploit for iOS 12.4

Posted by Ned Williamson, 20% on Project Zero Introduction I have a somewhat unique opportunity in this writeup to highlight my experience as an iOS research newcomer. Many high quality iOS kernel exploitation writeups have been published, but those often feature weaker initial primitives combine...

ffmpeg:ffmpeg_BSF_AV1_FRAME_MERGE_fuzzer: Index-out-of-bounds in cbs_av1_read_film_grain_params

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5747424845103104 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFAV1FRAMEMERGEfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...