ASB-A-191444150

In rwt4tsmdetectndef of rwt4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure due to a limited change in behavior based on the out of bounds data with no additional execution privileges needed. User interaction is not...

harfbuzz:hb-subset-fuzzer: Crash in bool OT::OffsetTo<OT::ClipBox, OT::IntType<unsigned int, 3u>, true>::serialize_c

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6254792024915968 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62a00101714b...

harfbuzz:hb-subset-fuzzer: Crash in OT::ClipBox::copy

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=6315334756335616 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerubsanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000033308f...

libbpf:bpf-object-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5268028497985536 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerubsanlibbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000003bf0020 Crash State: NULL Sanitizer: undefined UBSAN...

vulhub

This is an open-source collection of vulnerable web applications and environments for testing and learning about web application security. It is a project maintained by phith0n and hosted on GitHub. The project provides a variety of vulnerable applications and environments, including web servers,...

libbpf:bpf-object-fuzzer: Global-buffer-overflow in btf_new

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6612626260492288 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasanlibbpf Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address:...

libbpf:bpf-object-fuzzer: Crash in __bpf_object__open

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6218051104669696 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasanlibbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6140000542a0 Crash...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5906830614724608 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in generic_unpack

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=6199238543933440 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow RE...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in hufDecode

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5371651546546176 Project: openexr Fuzzing Engine: honggfuzz Fuzz Target: openexrexrcheckfuzzer Job Type: honggfuzzasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow RE...

ffmpeg:ffmpeg_AV_CODEC_ID_SPEEX_fuzzer: Segv on unknown address in ff_vector_fmul_scalar_sse

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6713285764841472 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSPEEXfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Cras...

pcl:ply_reader_fuzzer: Container-overflow in void pcl::PLYReader::vertexListPropertyContentCallback<int>

Detailed Report: https://oss-fuzz.com/testcase?key=5541835464900608 Project: pcl Fuzzing Engine: afl Fuzz Target: plyreaderfuzzer Job Type: aflasanpcl Platform Id: linux Crash Type: Container-overflow WRITE 4 Crash Address: 0x7f83a682d800 Crash State: void...

gdal:gdal_filesystem_fuzzer: Heap-use-after-free in GDALRasterBand::~GDALRasterBand

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5194612591951872 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in generic_unpack

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=6247182961868800 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.ast.expr.BinaryExpr.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5530030613069824 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in unpack_32bit

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=6256587329634304 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

rdkit:smiles_string_to_mol_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6739763583909888 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x002900000028 Crash State: NULL Sanitizer: memory MSAN...

freeradius:fuzzer_tacacs: Global-buffer-overflow in fr_base16_decode_nstd

Detailed Report: https://oss-fuzz.com/testcase?key=6338493966581760 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzertacacs Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x7f6dfcfc85bf Crash State: frbase16decodenstd...

freeradius:fuzzer_dns: Heap-buffer-overflow in fr_struct_from_network

Detailed Report: https://oss-fuzz.com/testcase?key=5656612828741632 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdns Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6060000003b6 Crash State: frstructfromnetwork...

ffmpeg:ffmpeg_AV_CODEC_ID_THEORA_fuzzer: Crash in ff_emu_edge_vfix12_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5925660741206016 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTHEORAfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x71b7f166a07...