yamlbeans:YamlReaderFuzzer: Security exception in com.esotericsoftware.yamlbeans.YamlReader.readValueInternal

Detailed Report: https://oss-fuzz.com/testcase?key=6714838224863232 Project: yamlbeans Fuzzing Engine: libFuzzer Fuzz Target: YamlReaderFuzzer Job Type: libfuzzerasanyamlbeans Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

CVE-2023-43760: Undefined Security Weakness

Certain WithSecure products allow Denial of Service via a fuzzed PE32 file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure...

RUSTSEC-2023-0063 Denial of service in Quinn servers

Receiving QUIC frames containing a frame with unknown frame type could lead to a panic. Unfortunately this is issue was not found by our fuzzing infrastructure. Thanks to the QUIC Tester research group for reporting this issue...

Denial of service in Quinn servers

Receiving QUIC frames containing a frame with unknown frame type could lead to a panic. Unfortunately this is issue was not found by our fuzzing infrastructure. Thanks to the QUIC Tester research group for reporting this issue...

lldpd:fuzz_edp: Use-of-uninitialized-value in edp_decode

Project: https://github.com/lldpd/lldpd.git Detailed Report: https://oss-fuzz.com/testcase?key=5923150534410240 Project: lldpd Fuzzing Engine: libFuzzer Fuzz Target: fuzzedp Job Type: libfuzzermsanlldpd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: edpdecod...

CVE-2023-41880

Wasmtime is a standalone runtime for WebAssembly. Wasmtime versions from 10.0.0 to versions 10.02, 11.0.2, and 12.0.1 contain a miscompilation of the WebAssembly i64x2.shrs instruction on x8664 platforms when the shift amount is a constant value that is larger than 32. Only x8664 is affected so a...

CVE-2023-41880 Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64

Wasmtime is a standalone runtime for WebAssembly. Wasmtime versions from 10.0.0 to versions 10.02, 11.0.2, and 12.0.1 contain a miscompilation of the WebAssembly i64x2.shrs instruction on x8664 platforms when the shift amount is a constant value that is larger than 32. Only x8664 is affected so a...

wasmedge:wasmedge-fuzztool: Crash in WasmEdge::Loader::SharedLibrary::load

Project: https://github.com/WasmEdge/WasmEdge.git Detailed Report: https://oss-fuzz.com/testcase?key=6377386704502784 Project: wasmedge Fuzzing Engine: honggfuzz Fuzz Target: wasmedge-fuzztool Job Type: honggfuzzasanwasmedge Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x7db83ef06e61 Cra...

serenity:FuzzPNGLoader: Non-positive-vla-bound-value in Gfx::unfilter

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=6027211779735552 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzPNGLoader Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Non-positive-vla-bound-value Crash Address...

GHSA-GW5P-Q8MJ-P7GH Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64

Impact Wasmtime versions from 10.0.0 to 12.0.1 contain a miscompilation of the WebAssembly i64x2.shrs instruction on x8664 platforms when the shift amount is a constant value that is larger than 32. Only x8664 is affected so all other targets are not affected by this. The miscompilation results i...

g-auth-library-java:TokenVerifierFuzzer: Security exception in com.google.api.client.json.JsonParser.parseArray

Detailed Report: https://oss-fuzz.com/testcase?key=6683973465800704 Project: g-auth-library-java Fuzzing Engine: libFuzzer Fuzz Target: TokenVerifierFuzzer Job Type: libfuzzerasang-auth-library-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

javaparser:parseFuzzer: Security exception in com.github.javaparser.CommentsInserter.insertComments

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5031971505700864 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

htslib:hts_open_fuzzer: Heap-buffer-overflow in uint7_get_64

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5097832530706432 Project: htslib Fuzzing Engine: honggfuzz Fuzz Target: htsopenfuzzer Job Type: honggfuzzasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libxaac:xaac_enc_fuzzer: Global-buffer-overflow in iusace_quantize_lines

Project: https://github.com/ittiam-systems/libxaac.git Detailed Report: https://oss-fuzz.com/testcase?key=5693649469702144 Project: libxaac Fuzzing Engine: libFuzzer Fuzz Target: xaacencfuzzer Job Type: libfuzzerasani386libxaac Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash...

OSV-2023-813 UNKNOWN READ in parse_priv_value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62188 Crash type: UNKNOWN READ Crash state: parseprivvalue parseprivacy fuzzparsemsg.c...

spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.standard.InternalSpelExpressionParser.eatExp

Project: https://github.com/spring-projects/spring-data-mongodb.git Detailed Report: https://oss-fuzz.com/testcase?key=6481869884227584 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linu...

spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

Project: https://github.com/spring-projects/spring-data-mongodb.git Detailed Report: https://oss-fuzz.com/testcase?key=5173671670710272 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linu...

libucl:ucl_add_string_fuzzer: Heap-use-after-free in ucl_hash_func

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=5927395011723264 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

pdfbox:PDFStreamParserFuzzer: Security exception in java.base/java.util.ArrayList.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=4779007763415040 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.ArrayList...

capstone:fuzz_disasmv5: Use-of-uninitialized-value in PPC_post_printer

Detailed Report: https://oss-fuzz.com/testcase?key=6051118487306240 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmv5 Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: PPCpostprinter fillinsn csdisasm Sanitize...