Mozilla: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9. Some of these bugs showed evidence of memory corruption and we presume th...

Mozilla: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9. Some of these bugs showed evidence of memory corruption and we presume th...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.ast.expr.Name.accept

Detailed Report: https://oss-fuzz.com/testcase?key=5768632505860096 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.github.javaparser.ast.expr.Name.accept...

clamav:clamav_dbload_WDB_fuzzer: Stack-buffer-overflow in parse_regex

Detailed Report: https://oss-fuzz.com/testcase?key=5098589270966272 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadWDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f70bee29820 Crash State: parseregex cliregex2suffix...

Mozilla: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9. Some of these bugs showed evidence of memory corruption and we presume th...

UBUNTU-CVE-2022-31747

Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_search_http_tcp

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6313638622789632 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 11 Crash Address: 0x611000004e85...

ndpi:fuzz_process_packet: Use-of-uninitialized-value in ndpi_strdup

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5409126345211904 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

opensc:fuzz_pkcs15_tool: Stack-use-after-return in test_update

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6010901314011136 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15tool Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-use-after-return READ 1 Crash Address:...

libigl:igl_fuzzer: Negative-size-param with empty stacktrace

Project: https://github.com/libigl/libigl.git Detailed Report: https://oss-fuzz.com/testcase?key=5814270684692480 Project: libigl Fuzzing Engine: libFuzzer Fuzz Target: iglfuzzer Job Type: libfuzzerasanlibigl Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: NULL...

Frelatage - The Python Fuzzer That The World Deserves

pip3 install frelatage Current release :0.0.7 Frelatage is a coverage-based Python fuzzing library which can be used to fuzz python code. The development of Frelatage was inspired by various other fuzzers, including AFL/AFL++, Atheris and PythonFuzz. The main purpose of the project is to take...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4643392530808832 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_value_property_set

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5749959716110336 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

dng_sdk:dng_validate_fuzzer: Stack-use-after-scope in RefCopyBytes

Detailed Report: https://oss-fuzz.com/testcase?key=5294437367939072 Project: dngsdk Fuzzing Engine: afl Fuzz Target: dngvalidatefuzzer Job Type: aflasandngsdk Platform Id: linux Crash Type: Stack-use-after-scope READ Crash Address: 0x7f60f066c494 Crash State: RefCopyBytes DoCopyBytes dngstream::P...

Z-Fuzzer

Z-Fuzzer: Zigbee Protocol Implementation Fuzzing Z-Fuzzer is...

tint:tint_spv_reader_spv_writer_fuzzer: Container-overflow in tint::resolver::DependencyScanner::TraverseExpression

Detailed Report: https://oss-fuzz.com/testcase?key=5576919879385088 Project: tint Fuzzing Engine: honggfuzz Fuzz Target: tintspvreaderspvwriterfuzzer Job Type: honggfuzzasantint Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address: 0x6050000038d0 Crash State:...

CVE-2022-30775

xpdf 4.04 allocates excessive memory when presented with crafted input. This can be triggered by for example sending a crafted PDF document to the pdftoppm binary. It is most easily reproduced with the DCMAKECXXCOMPILER=afl-clang-fast++ option...

libreoffice:pptfuzzer: Heap-use-after-free in GenericSalLayout::GetCharWidths

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5650248850079744 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash...

cbor-java:FuzzDec: Uncaught exception in co.nstant.in.cbor.decoder.ByteStringDecoder.decodeInfinitiveLength

Detailed Report: https://oss-fuzz.com/testcase?key=6474955837014016 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

Mozilla: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we...