lz4:round_trip_frame_uncompressed_fuzzer: Use-of-uninitialized-value in LZ4_compress_fast_extState_fastReset

Project: https://github.com/lz4/lz4.git Detailed Report: https://oss-fuzz.com/testcase?key=5810591549227008 Project: lz4 Fuzzing Engine: libFuzzer Fuzz Target: roundtripframeuncompressedfuzzer Job Type: libfuzzermsanlz4 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6400484251926528 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: NULL Sanitizer: memory MSAN Recommended...

graphicsmagick:coder_BIGTIFF_fuzzer: Use-of-uninitialized-value in AccumulateRGBA

Detailed Report: https://oss-fuzz.com/testcase?key=5674243869769728 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderBIGTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: AccumulateRGBA...

graphicsmagick:coder_BIGTIFF_fuzzer: Use-of-uninitialized-value in RGBTransformPackets

Detailed Report: https://oss-fuzz.com/testcase?key=5797247891144704 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderBIGTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: RGBTransformPackets...

lz4:round_trip_frame_uncompressed_fuzzer: Use-of-uninitialized-value in LZ4HC_compress_generic_noDictCtx

Project: https://github.com/lz4/lz4.git Detailed Report: https://oss-fuzz.com/testcase?key=6235198659887104 Project: lz4 Fuzzing Engine: libFuzzer Fuzz Target: roundtripframeuncompressedfuzzer Job Type: libfuzzermsanlz4 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Segv on unknown address in onig_free_body

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4650820305551360 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Segv on unknown...

protobuf-java: potential DoS in the parsing procedure for binary data

A flaw was found in protobuf-java. Google Protocol Buffer protobuf-java allows the interleaving of com.google.protobuf.UnknownFieldSet fields. By persuading a victim to open specially-crafted content, a remote attacker could cause a timeout in the ProtobufFuzzer function, resulting in a denial of...

libbpf:bpf-object-fuzzer: Memcpy-param-overlap in bpf_object__add_programs

Detailed Report: https://oss-fuzz.com/testcase?key=5040003935240192 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasani386libbpf Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x6b2ff800,0xf32ff800 and 0x6e903940, 0xf6903940 Crash...

libvpx:vpx_dec_fuzzer_vp9: Segv on unknown address in vp9_remove_common

Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=5068192141148160 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxdecfuzzervp9 Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Segv on unknown address Crash Address: Cra...

Fedora: Security Advisory for ffuf (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

ghostscript:gs_device_pxlmono_fuzzer: Heap-use-after-free in FT_Stream_ReadULong

Detailed Report: https://oss-fuzz.com/testcase?key=4522008968298496 Project: ghostscript Fuzzing Engine: honggfuzz Fuzz Target: gsdevicepxlmonofuzzer Job Type: honggfuzzasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x633000000850 Crash State:...

[SECURITY] Fedora 36 Update: ffuf-1.0.2-6.fc36

Fast web fuzzer written in Go...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in LookupDict2

Detailed Report: https://oss-fuzz.com/testcase?key=5951744827326464 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f84a5488288 Crash State: LookupDict2 LookupDictLi...

espeak-ng:ssml-fuzzer: Heap-buffer-overflow in string_decoder_getc_utf_8

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=5636498354995200 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in LookupThousands

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=4950865177346048 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

graphicsmagick:coder_PTIF_fuzzer: Use-of-uninitialized-value in VerticalFilter

Detailed Report: https://oss-fuzz.com/testcase?key=4699846082166784 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: VerticalFilter ResizeImage...

ffmpeg:ffmpeg_AV_CODEC_ID_QDRAW_fuzzer: Heap-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4608329791438848 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDQDRAWfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

graphicsmagick:coder_SVG_fuzzer: Heap-use-after-free in xmlParseInternalSubset

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6220369456922624 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderSVGfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Heap-use-after-free READ 8...

apache-commons-configuration:YAMLConfigurationWriteFuzzer: Uncaught exception in org.apache.commons.configuration2.AbstractYAMLBasedConfiguration.parseCollection

Detailed Report: https://oss-fuzz.com/testcase?key=5001364155006976 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

spirv-tools:spvtools_opt_performance_fuzzer: Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct

Project: https://github.com/KhronosGroup/SPIRV-Tools.git Detailed Report: https://oss-fuzz.com/testcase?key=5652264460615680 Project: spirv-tools Fuzzing Engine: libFuzzer Fuzz Target: spvtoolsoptperformancefuzzer Job Type: libfuzzerasani386spirv-tools Platform Id: linux Crash Type:...