envoy/codec_impl_fuzz_test: Heap-use-after-free in Envoy::Http::HttpStream::HttpStream

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5722972495544320 Project: envoy Fuzzer: libFuzzerenvoycodecimplfuzztest Fuzz target binary: codecimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8...

grpc/ssl_server_fuzzer: Heap-buffer-overflow in grpc_core::HandshakerArgs::HandshakerArgs

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5732516768514048 Project: grpc Fuzzer: libFuzzergrpcsslserverfuzzer Fuzz target binary: sslserverfuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Addres...

envoy/codec_impl_fuzz_test: NULL

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5656339617939456 Project: envoy Fuzzer: libFuzzerenvoycodecimplfuzztest Fuzz target binary: codecimplfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address...

openh264/decoder_fuzzer: Heap-use-after-free in WelsDec::MapColToList0

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5746677611233280 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free READ 4...

skia/android_codec: Use-of-uninitialized-value in sse2::blit_row_s32a_opaque

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5678951362461696 Project: skia Fuzzer: libFuzzerskiaandroidcodec Fuzz target binary: androidcodec Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

kimageformats/kimgio_fuzzer: Crash in fetchARGB32ToRGBA64PM

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5710138931937280 Project: kimageformats Fuzzer: aflkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

skia/api_path_measure: Use-of-uninitialized-value in bool set_point_length<false>

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5673676119212032 Project: skia Fuzzer: libFuzzerskiaapipathmeasure Fuzz target binary: apipathmeasure Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

capstone/fuzz_disasmnext: Stack-buffer-overflow in SStream_concat

Detailed report: https://oss-fuzz.com/testcase?key=5639352435081216 Project: capstone Fuzzer: aflcapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: aflasancapstone Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 5 Crash Address: 0x7f4820a63634 Crash State: SStreamconca...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in decoded_picture_buffer::get_image

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5766188506808320 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

capstone/fuzz_disasmnext: Index-out-of-bounds in getRegisterName

Detailed report: https://oss-fuzz.com/testcase?key=5672597763653632 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerubsancapstone Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: getRegisterName...

capstone/fuzz_disasmnext: Crash in fuzz_disasm.c

Detailed report: https://oss-fuzz.com/testcase?key=5688575243321344 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000a2e58 Crash State: fuzzdisasm.c...

capstone/fuzz_disasmnext: Index-out-of-bounds in getRegisterName

Detailed report: https://oss-fuzz.com/testcase?key=5639933111304192 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerubsancapstone Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: getRegisterName...

radare2/ia_fuzz: Heap-double-free in _free_resources

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5670419745472512 Project: radare2 Fuzzer: aflradare2iafuzz Fuzz target binary: iafuzz Job Type: aflasanradare2 Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x625000005100 Crash Stat...

llvm/llvm-microsoft-demangle-fuzzer: Heap-buffer-overflow in llvm::ms_demangle::Node** llvm::ms_demangle::ArenaAllocator::allocArray<llvm::ms

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5647811742269440 Project: llvm Fuzzer: libFuzzerllvmllvm-microsoft-demangle-fuzzer Fuzz target binary: llvm-microsoft-demangle-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type:...

ots/ots-fuzzer: Heap-buffer-overflow in ots::OpenTypeSTAT::Serialize

Project: https://github.com/khaledhosny/ots.git Detailed report: https://oss-fuzz.com/testcase?key=5702836548009984 Project: ots Fuzzer: libFuzzerotsots-fuzzer Fuzz target binary: ots-fuzzer Job Type: libfuzzerasanots Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

libarchive/libarchive_fuzzer: Heap-buffer-overflow in read_bits_16

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5637848603033600 Project: libarchive Fuzzer: afllibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

bignum-fuzzer/fuzzer_boringssl_mbedtls_num_len_100_all_operations_num_loops_1: Heap-buffer-overflow in mpi_write_hlp

Project: https://github.com/guidovranken/bignum-fuzzer.git Detailed report: https://oss-fuzz.com/testcase?key=5167698789531648 Project: bignum-fuzzer Fuzzer: libFuzzerbignum-fuzzerfuzzerboringsslmbedtlsnumlen100alloperationsnumloops1 Fuzz target binary:...

macOS 10.14.3 iOS 12.1.3 - Kernel Heap Overflow in PF_KEY due to Lack of Bounds Checking when Retrieving Statistics

macOS 10.14.3 iOS 12.1.3 - Kernel Heap Overflow in PFKEY due to Lack of Bounds Checking when Retrieving Statistics / Inspired by Ned Williamsons's fuzzer I took a look at the netkey code. keygetsastat handles SADBGETSASTAT messages: It allocates a buffer based on the number of SAs there currently...

openh264/decoder_fuzzer: Heap-use-after-free in WelsDec::WelsReorderRefList

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5709564312289280 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free READ 4...

openthread/cli-uart-received-fuzzer: Index-out-of-bounds in ot::RouterTable::IsAllocated

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5744891089387520 Project: openthread Fuzzer: libFuzzeropenthreadcli-uart-received-fuzzer Fuzz target binary: cli-uart-received-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux Cras...