libraw:libraw_nef_fuzzer: Use-of-uninitialized-value in LibRaw::ph1_bithuff

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5746224885530624 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

llvm:clang-fuzzer: Use-of-uninitialized-value in X86_64ABIInfo::computeInfo

Detailed Report: https://oss-fuzz.com/testcase?key=4905123874209792 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: X8664ABIInfo::computeInfo...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-buffer-overflow in add_compile_string

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6291057615175680 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

llvm:clang-objc-fuzzer: Use-of-uninitialized-value in clang::Lexer::getTokenPrefixLength

Detailed Report: https://oss-fuzz.com/testcase?key=4917536873906176 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::Lexer::getTokenPrefixLength...

openexr:openexr_exrcheck_fuzzer: Heap-double-free in Imf_3_1::RgbaInputFile::~RgbaInputFile

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5213683985285120 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-double-free Crash Address:...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::PacketLengthMarkers::readPLM

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5755868006711296 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

selinux:binpolicy-fuzzer: Crash in write_cond_nodes_to_conf

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5972918775971840 Project: selinux Fuzzing Engine: honggfuzz Fuzz Target: binpolicy-fuzzer Job Type: honggfuzzasanselinux Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

selinux:binpolicy-fuzzer: Use-of-uninitialized-value in validate_datum_array_gaps

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5709963832459264 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: binpolicy-fuzzer Job Type: libfuzzermsanselinux Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...

tint:tint_spirv_tools_hlsl_writer_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=5639073652408320 Project: tint Fuzzing Engine: libFuzzer Fuzz Target: tintspirvtoolshlslwriterfuzzer Job Type: libfuzzerubsantint Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace...

libvips:thumbnail_fuzzer: Heap-buffer-overflow in vips_rect_intersectrect

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=4732694506897408 Project: libvips Fuzzing Engine: afl Fuzz Target: thumbnailfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x602000015800...

PT-2022-36863

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free read crash. The crash occurs in the following functions: cb stdout flush, output pre cb flush, and is trigger...

clamav:clamav_dbload_PDB_fuzzer: Stack-buffer-overflow in load_regex_matcher

Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=5138577619550208 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadPDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in unsigned long grk::N_AVX2::vscheduler<grk::N_AVX2::DecompressDcShiftIrrev>

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5434885018353664 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

vlc:vlc-demux-libfuzzer: Heap-buffer-overflow in aout_ChannelReorder

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=4569829783240704 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-libfuzzer Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x613000001340 Crash...

libucl:ucl_add_string_fuzzer: Segv on unknown address in ucl_object_free_internal

Detailed Report: https://oss-fuzz.com/testcase?key=6195708519120896 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: uclobjectfreeinternal uclparserfree...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in LoadVoice

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=6259546849411072 Project: espeak-ng Fuzzing Engine: afl Fuzz Target: ssml-fuzzer Job Type: aflasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ff8ca08e99...

espeak-ng:ssml-fuzzer: Global-buffer-overflow in InterpretPhoneme

Detailed Report: https://oss-fuzz.com/testcase?key=4985703908376576 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000001103bfb Crash State: InterpretPhoneme...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-buffer-overflow in onig_node_str_cat

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4749992680620032 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-buffer-overflow in add_compile_string

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4729663862210560 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ 3...

imagemagick:ping_mvg_fuzzer: Heap-buffer-overflow in TraceEllipse

Detailed Report: https://oss-fuzz.com/testcase?key=5871359050252288 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0xf1c87070 Crash State: TraceEllipse...