keycloak:SamlParserFuzzer: Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

Detailed Report: https://oss-fuzz.com/testcase?key=5374512092217344 Project: keycloak Fuzzing Engine: libFuzzer Fuzz Target: SamlParserFuzzer Job Type: libfuzzerasankeycloak Platform Id: linux Crash Type: Security exception Crash Address: Crash State: com.ctc.wstx.dtd.FullDTDReader.readContentSpe...

poco:mail_message_fuzzer: Segv on unknown address in std::__1::ios_base::~ios_base

Project: https://github.com/pocoproject/poco.git Detailed Report: https://oss-fuzz.com/testcase?key=4995747949379584 Project: poco Fuzzing Engine: afl Fuzz Target: mailmessagefuzzer Job Type: aflasanpoco Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

Why Fuzzing Isn’t Enough to Test Your APIs for Security Issues

Learn about API testing best practices and find out why fuzzing has limitations for enterprises that need API security...

aflnet_profuzzbench

It is an offensive tool for network protocols. The primary CVE ID is not present in the provided context, but the tool is an extension of American Fuzzy Lop AFL, which is a greybox fuzzer for protocol implementations. The tool, AFLNet, is seeded with a corpus of recorded message exchanges between...

vulkan-loader:instance_create_fuzzer: Crash in printf_common

Project: https://github.com/khronosgroup/Vulkan-Loader.git Detailed Report: https://oss-fuzz.com/testcase?key=4820577276723200 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: instancecreatefuzzer Job Type: libfuzzerasanvulkan-loader Platform Id: linux Crash Type: UNKNOWN READ Crash...

suricata:fuzz_sigpcap: Non-positive-vla-bound-value in TransformFromBase64Decode

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=4717843533332480 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcap Job Type: libfuzzerubsansuricata Platform Id: linux Crash Type: Non-positive-vla-bound-value Crash Address: Crash...

Stable Channel Update for Desktop

The Stable channel has been updated to 129.0.6668.89/.90 for Windows, Mac and 129.0.6668.89 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restrict...

libultrahdr:ultrahdr_dec_fuzzer: Use-of-uninitialized-value in format_message

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5279522344206336 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrdecfuzzer Job Type: libfuzzermsanlibultrahdr Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

h2database:SqlStatementFuzzer: Security exception in SqlStatementFuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=5769505618329600 Project: h2database Fuzzing Engine: libFuzzer Fuzz Target: SqlStatementFuzzer Job Type: libfuzzerasanh2database Platform Id: linux Crash Type: Security exception Crash Address: Crash State: SqlStatementFuzzer Sanitizer: address...

zxing:MultiFormatDecodeFuzzer: Security exception in java.desktop/java.awt.image.DataBufferByte.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5581154432909312 Project: zxing Fuzzing Engine: libFuzzer Fuzz Target: MultiFormatDecodeFuzzer Job Type: libfuzzerasanzxing Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.desktop/java.awt.image.DataBufferByte...

keycloak:SamlMetadataParserFuzzer: Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

Detailed Report: https://oss-fuzz.com/testcase?key=6122692003037184 Project: keycloak Fuzzing Engine: libFuzzer Fuzz Target: SamlMetadataParserFuzzer Job Type: libfuzzerasankeycloak Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Stable Channel Update for Desktop

The Stable channel has been updated to 129.0.6668.70/.71 for Windows, Mac and 129.0.6668.70 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restrict...

graphql-java:GraphqlFuzzer: Security exception in graphql.schema.GraphQLTypeUtil.simplePrint

Project: https://github.com/graphql-java/graphql-java.git Detailed Report: https://oss-fuzz.com/testcase?key=6479968740114432 Project: graphql-java Fuzzing Engine: libFuzzer Fuzz Target: GraphqlFuzzer Job Type: libfuzzerasangraphql-java Platform Id: linux Crash Type: Security exception Crash...

gpac:fuzz_probe_analyze: Heap-use-after-free in gsfdmx_finalize

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5906524839411712 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x511000400ff8 Crash State:...

maven:ProjectArtifactMetadataFuzzer: Security exception in ProjectArtifactMetadataFuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=5075270824951808 Project: maven Fuzzing Engine: libFuzzer Fuzz Target: ProjectArtifactMetadataFuzzer Job Type: libfuzzerasanmaven Platform Id: linux Crash Type: Security exception Crash Address: Crash State: ProjectArtifactMetadataFuzzer Sanitize...

sqlite3: heap-buffer-overflow in sqlite3Utf16ByteLen

With the following new fuzz target generated by https://github.com/google/oss-fuzz-gen: include "/src/sqlite3/bld/sqlite3.h" include include include extern "C" int LLVMFuzzerTestOneInputconst uint8t data, sizet size sqlite3 db; if sqlite3open":memory:", &db != SQLITEOK return 0; // Use size...

libical: global-buffer-overflow in icaltime_timegm

With the following new fuzz target: include include include include include "/src/libical/src/libical/icalcomponent.h" extern "C" int LLVMFuzzerTestOneInputconst uint8t data, sizet size char icalstring = char mallocsize + 1; memcpyicalstring, data, size; icalstringsize = '\0'; icalcomponent comp ...

htslib: heap-buffer-overflow in hts_hopen

With the new fuzz target: include include include include include include include include "/src/htslib/htslib/sam.h" include "../../htslib/hfile.h" include "../../htslib/hts.h" static void htscloseoraborthtsFile file if htsclosefile != 0 abort; int LLVMFuzzerTestOneInputconst uint8t data, sizet...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5124941329006592 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

openexr:openexr_exrcorecheck_fuzzer: Crash in MemcmpInterceptorCommon

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5191937005518848 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcorecheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: UNKNOWN READ Crash...