selinux:secilc-fuzzer: Heap-buffer-overflow in cil_classorder_to_policydb

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=6604237280772096 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: secilc-fuzzer Job Type: libfuzzerasanselinux Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address...

njs:njs_process_script_fuzzer: Segv on unknown address in njs_vmcode_interpreter

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=4799785741713408 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

graphicsmagick:coder_WPG_fuzzer: Use-of-uninitialized-value in DestroyThreadViewSet

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5232822816210944 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderWPGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::mct::decompress_irrev

Detailed Report: https://oss-fuzz.com/testcase?key=4772443124269056 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::mct::decompressirrev...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::FileFormat::serializeAsoc

Detailed Report: https://oss-fuzz.com/testcase?key=6243076467195904 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::FileFormat::serializeAsoc...

libheif:color-conversion-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6466293349875712 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: color-conversion-fuzzer Job Type: libfuzzerubsanlibheif Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00b95a5a5575 Crash State: NULL Sanitizer: undefined UBS...

gitea -- multiple vulnerabilities

The Gitea Team reports for release 1.13.2: Prevent panic on fuzzer provided string Add secure/httpOnly attributes to the lang cookie...

selinux:secilc-fuzzer: Crash in is_avrule_redundant

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=4695079639973888 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: secilc-fuzzer Job Type: libfuzzerubsanselinux Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f447a67100...

openthread:ncp-uart-received-fuzzer: Stack-buffer-overflow in ot::NetworkData::ServiceTlv::GetServiceDataLength

Detailed Report: https://oss-fuzz.com/testcase?key=5708705517273088 Project: openthread Fuzzing Engine: afl Fuzz Target: ncp-uart-received-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f78f0f8c723 Crash State:...

c-blosc2:decompress_frame_fuzzer: Segv on unknown address in frame_get_lazychunk

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5156125253173248 Project: c-blosc2 Fuzzing Engine: afl Fuzz Target: decompressframefuzzer Job Type: aflasanc-blosc2 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

kimageformats:kimgio_ani_fuzzer: Use-of-uninitialized-value in ANIHandler::ensureScanned

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5969409489371136 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioanifuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

c-blosc2:decompress_frame_fuzzer: Crash in blosc_getitem

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5936592214687744 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x4bc31f...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in DHT::make_rbdiag

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6308396152258560 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

zeek:zeek-packet-fuzzer: Heap-use-after-free with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5974757501698048 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x62b0000024d0 Crash State: NULL Sanitizer: address ASAN...

zeek:zeek-packet-fuzzer: Heap-use-after-free in caf::detail::message_data::~message_data

Detailed Report: https://oss-fuzz.com/testcase?key=5696811578818560 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x62b0000024d0 Crash State:...

kimageformats:kimgio_avif_fuzzer: Use-of-uninitialized-value in aom_lpf_vertical_6_sse2

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4812506765852672 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioaviffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

grok:grk_decompress_fuzzer: Crash in grk::SparseBuffer<6u, 6u>::alloc

Detailed Report: https://oss-fuzz.com/testcase?key=5352193955856384 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6028000005a8 Crash State: grk::SparseBuffer::alloc bool...

selinux:secilc-fuzzer: Crash in cil_copy_macro

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5077351297843200 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: secilc-fuzzer Job Type: libfuzzermsanselinux Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000030687475...

selinux:secilc-fuzzer: Stack-use-after-return in cil_list_destroy

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5193173680914432 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: secilc-fuzzer Job Type: libfuzzerasanselinux Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Addres...

selinux:secilc-fuzzer: Use-of-uninitialized-value in cil_reset_classperms_list

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=4891252017463296 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: secilc-fuzzer Job Type: libfuzzermsanselinux Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...