libavif:[email protected]: Index-out-of-bounds in read_markers

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=4625198796046336 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerubsanlibavif Platform Id: linux Crash Type:...

PT-2024-40833 · Git +1 · Libavif

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, as reported by OSS-Fuzz. The crash state involves LLVMFuzzerRunDriver. No information is provided...

http-pattern-matcher:http_template_fuzz_test: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6624741750276096 Project: http-pattern-matcher Fuzzing Engine: libFuzzer Fuzz Target: httptemplatefuzztest Job Type: libfuzzerasanhttp-pattern-matcher Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x588ff322bd85 Crash State: NULL...

htslib:hts_open_fuzzer: Heap-buffer-overflow in hts_log

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=4989422449786880 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

upx:decompress_packed_file_fuzzer: Stack-buffer-overflow in PackLinuxElf32::unpack

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=6229815489265664 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: decompresspackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

gpac:fuzz_probe_analyze: Stack-buffer-overflow in gf_text_get_utf8_line

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5092126568284160 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x78f857e668c0 Crash State...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in gsfdmx_probe_data

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4859671613603840 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x62500028275a...

apache-commons-net:OS400FTPEntryParserFuzzer: Security exception in java.base/java.util.regex.Pattern$BmpCharPropertyGreedy.match

Detailed Report: https://oss-fuzz.com/testcase?key=5165573512167424 Project: apache-commons-net Fuzzing Engine: libFuzzer Fuzz Target: OS400FTPEntryParserFuzzer Job Type: libfuzzerasanapache-commons-net Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

wget2:libwget_utils_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6643037262381056 Project: wget2 Fuzzing Engine: afl Fuzz Target: libwgetutilsfuzzer Job Type: aflasanwget2 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

libucl:ucl_add_string_fuzzer: Segv on unknown address in ucl_object_free_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5681856183861248 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: uclobjectfreeinternal uclparserfree...

ffmpeg:ffmpeg_dem_WSD_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6510258168070144 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemWSDfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5669251310485504 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

arrow:arrow-ipc-stream-fuzz: Stack-buffer-overflow in arrow::ArrayPrinter::Print

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5048291196731392 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffc3545049f...

libtorrent:http_tracker: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5026408875229184 Project: libtorrent Fuzzing Engine: afl Fuzz Target: httptracker Job Type: aflasanlibtorrent Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

cfengine:string_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6464674136653824 Project: cfengine Fuzzing Engine: afl Fuzz Target: stringfuzzer Job Type: aflasancfengine Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

upx:test_packed_file_fuzzer: Heap-use-after-free in N_BELE_RTP::LEPolicy::get64

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=5044309392949248 Project: upx Fuzzing Engine: afl Fuzz Target: testpackedfilefuzzer Job Type: aflasanupx Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x628000009f20 Crash State:...

arrow:arrow-ipc-file-fuzz: Stack-buffer-overflow in arrow::ArrayPrinter::Print

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6529377667973120 Project: arrow Fuzzing Engine: honggfuzz Fuzz Target: arrow-ipc-file-fuzz Job Type: honggfuzzasanarrow Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

wasm3:fuzzer: Crash in CompileBlock

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=5171604120207360 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanwasm3 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x726000010428 Crash State:...

libucl:ucl_add_string_fuzzer: Crash in ucl_hash_destroy

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=6596746140319744 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000022d3...

PT-2024-12146 · Corax · Corax

Name of the Vulnerable Software and Affected Versions: Corax affected versions not specified Description: The issue concerns Corax, an extensible edge-coverage-guided grey-box fuzzing framework written in PHP. It is designed to automatically detect and report vulnerabilities for PHP applications,...