OSV-2020-2024 Heap-buffer-overflow in pixFindHorizontalRuns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26268 Crash type: Heap-buffer-overflow WRITE 4 Crash state: pixFindHorizontalRuns pixFillPolygon graphicsfuzzer.cc...

PT-2020-22070

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves functions such as destroy op array, fuzzer do request, and fuzzer...

ffmpeg:ffmpeg_AV_CODEC_ID_CRI_fuzzer: Heap-buffer-overflow in unpack_10bit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5161495882891264 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDCRIfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x7f513aa7828...

wolfssl:fuzzer-wolfssl-server: Crash in wolfCrypt_custom_free

Detailed Report: https://oss-fuzz.com/testcase?key=5171589131534336 Project: wolfssl Fuzzing Engine: afl Fuzz Target: fuzzer-wolfssl-server Job Type: aflasanwolfssl Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000788e50 Crash State: wolfCryptcustomfree wolfSSLFree GetDhPublicK...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::t1_ht::T1HT::postDecode

Detailed Report: https://oss-fuzz.com/testcase?key=5706757122555904 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::t1ht::T1HT::postDecode...

wolfssl:fuzzer-wolfssl-rsa: Index-out-of-bounds in fp_read_radix_16

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4899197473783808 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-rsa Job Type: libfuzzerubsanwolfssl Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

PT-2020-22053

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the fuzz reader transmit, sc single transmit, and sc...

ffmpeg:ffmpeg_AV_CODEC_ID_MOBICLIP_fuzzer: Heap-buffer-overflow in predict_motion

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5688995402743808 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDMOBICLIPfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

libucl:ucl_add_string_fuzzer: Crash in ucl_array_append

Detailed Report: https://oss-fuzz.com/testcase?key=5740121418366976 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000012737700 Crash State: uclarrayappend uclparsergetcontainer...

sleuthkit:sleuthkit_fls_hfs_fuzzer: Heap-buffer-overflow in hfs_cat_traverse

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5736489013739520 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflshfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

imagemagick:encoder_inline_fuzzer: Heap-buffer-overflow in Fax3Decode2D

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5127059796656128 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderinlinefuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

wolfssl:fuzzer-wolfssh-server: Heap-buffer-overflow in SendUserAuthPkOk

Detailed Report: https://oss-fuzz.com/testcase?key=4871081842966528 Project: wolfssl Fuzzing Engine: afl Fuzz Target: fuzzer-wolfssh-server Job Type: aflasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61100000013f Crash State: SendUserAuthPkOk...

oniguruma:fuzzer: Stack-buffer-overflow in onigenc_unicode_get_case_fold_codes_by_str

Detailed Report: https://oss-fuzz.com/testcase?key=5142910239244288 Project: oniguruma Fuzzing Engine: afl Fuzz Target: fuzzer Job Type: aflasanoniguruma Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7ffc76be7664 Crash State: onigencunicodegetcasefoldcodesbystr...

hermes:fuzzer-jsi-entry: Stack-buffer-overflow in hermes::regex::Parser<hermes::regex::Regex<hermes::regex::UTF16RegexTraits>, cha

Project: https://github.com/facebook/hermes.git Detailed Report: https://oss-fuzz.com/testcase?key=5645974943563776 Project: hermes Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-jsi-entry Job Type: libfuzzerasanhermes Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash Address:...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_string_prototype_repeat

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5096859524399104 Project: njs Fuzzing Engine: afl Fuzz Target: njsprocessscriptfuzzer Job Type: aflasannjs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 10 Crash Address: 0x6230000019c8 Crash State:...

OpenRedireX - Asynchronous Open redirect Fuzzer for Humans

A Fuzzer For OpenRedirect Issues. Key Features : Takes a url or list of urls and fuzzes them for Open redirect issues You can specify your own payloads in 'payloads.txt' Shows Location header history if any Fast as it is Asynchronous umm thats it , nothing much ! Usage : Note : Use Python 3.7+ ! ...

minify:minify-data-uri-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6587409154965504 Project: minify Fuzzing Engine: libFuzzer Fuzz Target: minify-data-uri-fuzzer Job Type: libfuzzerasanminify Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000074d94b4 Crash State: NULL Sanitizer: address ASAN...

openexr:openexr_scanlines_fuzzer: Heap-buffer-overflow in Imf_2_5::FastHufDecoder::FastHufDecoder

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5715033768853504 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrscanlinesfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

JITSploitation I: A JIT Bug

By Samuel Groß, Project Zero This three-part series highlights the technical challenges involved in finding and exploiting JavaScript engine vulnerabilities in modern web browsers and evaluates current exploit mitigation technologies. The exploited vulnerability, CVE-2020-9802, was fixed in iOS...

golang:fuzzer-httpresp: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6305957406310400 Project: golang Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-httpresp Job Type: libfuzzerasangolang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000039204f2 Crash State: NULL Sanitizer: address ASAN Recommended...