ghostscript:gs_device_xpswrite_fuzzer: Heap-use-after-free in sputs

Detailed Report: https://oss-fuzz.com/testcase?key=5839963183185920 Project: ghostscript Fuzzing Engine: honggfuzz Fuzz Target: gsdevicexpswritefuzzer Job Type: honggfuzzasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address: 0x522000000130 Crash State: sputs...

CVE-2024-38618

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Set lower bound of start tick time Currently ALSA timer doesn't have the lower limit of the start tick time, and it allows a very small size, e.g. 1 tick with 1ns resolution for hrtimer. Such a situation may lead to ...

CVE-2022-48760

The CVE-2022-48760 entry concerns a Linux kernel USB subsystem hang in usb_kill_urb() caused by memory-access ordering issues (SB pattern) between usb_kill_urb() and __usb_hcd_giveback_urb() on SMP systems. The vulnerability is fixed by adding memory barriers, specifically using the smp_mb__after...

fastjson2:JsonFuzzer: Security exception in com.alibaba.fastjson2.JSONPathSegment$CycleNameSegment$MapLoop.accept

Project: https://github.com/alibaba/fastjson2.git Detailed Report: https://oss-fuzz.com/testcase?key=6140570544701440 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in FillOutINChI

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=4694523136507904 Project: inchi Fuzzing Engine: afl Fuzz Target: inchiinputfuzzer Job Type: aflasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x50e000000758...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in CtPartFill

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=6198616121737216 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: inchiinputfuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

curl:curl_fuzzer_dict: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4862845807296512 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerdict Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

jackson-databind:ObjectReaderRandomClassFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Detailed Report: https://oss-fuzz.com/testcase?key=6693801816031232 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ObjectReaderRandomClassFuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in SetInitialRanks2

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=4734201680166912 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: inchiinputfuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

speex:speex_decode_fuzzer_fixed: Use-of-uninitialized-value in compute_rms16

Project: https://gitlab.xiph.org/xiph/speex.git Detailed Report: https://oss-fuzz.com/testcase?key=4963492514824192 Project: speex Fuzzing Engine: libFuzzer Fuzz Target: speexdecodefuzzerfixed Job Type: libfuzzermsanspeex Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

harfbuzz:hb-draw-fuzzer: Crash in OT::VarComponent::get_path_at

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6610112583106560 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-draw-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5160ffe90780 Crash State:...

glslang:compile_fuzzer: Crash in glslang::TInfoSinkBase::location

Project: https://github.com/khronosgroup/glslang.git Detailed Report: https://oss-fuzz.com/testcase?key=6679667028328448 Project: glslang Fuzzing Engine: libFuzzer Fuzz Target: compilefuzzer Job Type: libfuzzerasanglslang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000dfff8000...

ghostscript:gs_device_eps2write_fuzzer: Crash in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5275087262515200 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceeps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000045e066 Crash State: chunkfreeobject szlibfr...

CVE-2023-52742 net: USB: Fix wrong-direction WARNING in plusb.c

In the Linux kernel, the following vulnerability has been resolved: net: USB: Fix wrong-direction WARNING in plusb.c The syzbot fuzzer detected a bug in the plusb network driver: A zero-length control-OUT transfer was treated as a read instead of a write. In modern kernels this error provokes a...

CVE-2023-52742

The CVE-2023-52742 entry concerns the Linux kernel USB plusb driver. The vulnerability arises from treating a zero-length control-OUT transfer as a read instead of a write, triggering a WARNING in urb.c when usb_submit_urb is executed. The provided connected details specify the root cause as inco...

Talos releases new macOS open-source fuzzer

Cisco Talos has developed a fuzzer that enables us to test macOS software on commodity hardware. Fuzzer utilizes a snapshot-based fuzzing approach and is based on WhatTheFuzz framework. Support for VM state extraction was implemented and WhatTheFuzz was extended to support the loading of VMWare...

hdf5:h5_extended_fuzzer: Crash in H5SL_search

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=4558177868775424 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzerubsanhdf5 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000018598 Crash Stat...

cairo:svg-render-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5747637872558080 Project: cairo Fuzzing Engine: libFuzzer Fuzz Target: svg-render-fuzzer Job Type: libfuzzerubsancairo Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x581218eeb000 Crash State: NULL Sanitizer: undefined UBSAN...

ffmpeg:ffmpeg_AV_CODEC_ID_SMC_fuzzer: Heap-buffer-overflow in smc_encode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5878041048842240 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSMCfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

harfbuzz:hb-subset-fuzzer: Heap-use-after-free in hb_subset_plan_t::hb_subset_plan_t

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6696597055406080 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x5180000006...