janino:ExpressionEvaluatorFuzzer: Security exception in org.codehaus.janino.Parser.parseAssignmentExpression

Detailed Report: https://oss-fuzz.com/testcase?key=5311496733982720 Project: janino Fuzzing Engine: libFuzzer Fuzz Target: ExpressionEvaluatorFuzzer Job Type: libfuzzerasanjanino Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

swift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame length

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. It is fixed in 1.19.2 and later releases. This vulnerability is caused by a logica...

open5gs:gtp_message_fuzz: Use-of-uninitialized-value in tlv_parse_compound

Project: https://github.com/open5gs/open5gs.git Detailed Report: https://oss-fuzz.com/testcase?key=6050463423004672 Project: open5gs Fuzzing Engine: libFuzzer Fuzz Target: gtpmessagefuzz Job Type: libfuzzermsanopen5gs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

kernel: ASoC: soc-pcm: Add NULL check in BE reparenting

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: Add NULL check in BE reparenting Add NULL check in dpcmbereparent API, to handle kernel NULL pointer dereference error. The issue occurred in fuzzing test...

ghostscript:gs_device_ps2write_fuzzer: Segv on unknown address in gs_gc_reclaim

Detailed Report: https://oss-fuzz.com/testcase?key=5662216398176256 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gsgcreclaim ireclaim...

nccl:fuzz_xml: Index-out-of-bounds in xmlLoadSub

Project: https://github.com/NVIDIA/nccl.git Detailed Report: https://oss-fuzz.com/testcase?key=6133145670647808 Project: nccl Fuzzing Engine: libFuzzer Fuzz Target: fuzzxml Job Type: libfuzzerubsannccl Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: xmlLoadSub...

spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

Project: https://github.com/spring-projects/spring-data-mongodb.git Detailed Report: https://oss-fuzz.com/testcase?key=5981324264210432 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linu...

OSV-2023-391 UNKNOWN READ in wmem_tree_lookup32_array_le

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58832 Crash type: UNKNOWN READ Crash state: wmemtreelookup32arrayle dissectbtl2cap calldissectorwork...

bitcoin-core:wallet_notifications: Container-overflow in CSHA256::Write

Detailed Report: https://oss-fuzz.com/testcase?key=5189159019741184 Project: bitcoin-core Fuzzing Engine: centipede Fuzz Target: walletnotifications Job Type: centipedeasanbitcoin-core Platform Id: linux Crash Type: Container-overflow READ Crash Address: 0x611000048680 Crash State: CSHA256::Write...

spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

Project: https://github.com/spring-projects/spring-data-mongodb.git Detailed Report: https://oss-fuzz.com/testcase?key=5877650548457472 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linu...

UBUNTU-CVE-2023-32216

Mozilla developers and community members Ronald Crane, Andrew McCreight, Randell Jesup and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been...

assimp:assimp_fuzzer: Crash in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5513536726761472 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0001033f4c42 Crash Stat...

kernel: ASoC: soc-pcm: Add NULL check in BE reparenting

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: Add NULL check in BE reparenting Add NULL check in dpcmbereparent API, to handle kernel NULL pointer dereference error. The issue occurred in fuzzing test...

graphicsmagick:coder_BIGTIFF_fuzzer: Stack-buffer-overflow in _TIFFVGetField

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4549764084269056 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderBIGTIFFfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Stack-buffer-overflow WRI...

pdfbox:PDFStreamParserFuzzer: Security exception in org.junit.jupiter.engine.extension.TimeoutExtension.intercept

Project: https://github.com/apache/pdfbox.git Detailed Report: https://oss-fuzz.com/testcase?key=5900407330439168 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State...

pdfbox:PDFStreamParserFuzzer: Security exception in org.apache.pdfbox.pdfparser.BaseParser.parseCOSDictionaryValue

Project: https://github.com/apache/pdfbox.git Detailed Report: https://oss-fuzz.com/testcase?key=4577002547183616 Project: pdfbox Fuzzing Engine: libFuzzer Fuzz Target: PDFStreamParserFuzzer Job Type: libfuzzerasanpdfbox Platform Id: linux Crash Type: Security exception Crash Address: Crash State...

libucl:ucl_add_string_fuzzer: Heap-use-after-free in ucl_hash_func

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=5646900845215744 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Heap-buffer-overflow in pps_multilayer_extension

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4505349045747712 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

apache-commons-text:StringSubstitutorInterpolatorFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=6702312734457856 Project: apache-commons-text Fuzzing Engine: libFuzzer Fuzz Target: StringSubstitutorInterpolatorFuzzer Job Type: libfuzzerasanapache-commons-text Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

mvel:MvelFuzzer: Security exception in org.mvel2.MVELInterpretedRuntime.parseAndExecuteInterpreted

Detailed Report: https://oss-fuzz.com/testcase?key=6526606863892480 Project: mvel Fuzzing Engine: libFuzzer Fuzz Target: MvelFuzzer Job Type: libfuzzerasanmvel Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.mvel2.MVELInterpretedRuntime.parseAndExecuteInterpreted...