Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities to the best of our knowledge.

...

poppler:pdf_file_fuzzer: Use-of-uninitialized-value in Splash::compositeBackground

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=6067463823949824 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

json-java:JsonJavaFuzzer: Uncaught exception in java.base/java.util.Arrays.copyOfRange

Project: https://github.com/stleary/JSON-java.git Detailed Report: https://oss-fuzz.com/testcase?key=6529506154774528 Project: json-java Fuzzing Engine: libFuzzer Fuzz Target: JsonJavaFuzzer Job Type: libfuzzerasanjson-java Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

CVE-2022-0618

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS or HTTP/2 PUSHPROMISE frame where the frame contains padding information...

Design/Logic Flaw

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS or HTTP/2 PUSHPROMISE frame where the frame contains padding information...

unicorn:fuzz_emu_s390x_be: Index-out-of-bounds in helper_trXX

Detailed Report: https://oss-fuzz.com/testcase?key=5797978785316864 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemus390xbe Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: helpertrXX Sanitizer: undefined UBSAN Recommend...

php:php-fuzz-execute: Heap-buffer-overflow in zend_gc_collect_cycles

Detailed Report: https://oss-fuzz.com/testcase?key=6096176166862848 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7fd1cbbfb810 Crash State: zendgccollectcycles...

skia:image_filter_deserialize_width: Heap-use-after-free in SkStrokeAndFillPE::CreateProc

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5482731490902016 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: imagefilterdeserializewidth Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address...

libxslt:xslt: Invalid-free in xmlFreeNodeList

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5480760906219520 Project: libxslt Fuzzing Engine: afl Fuzz Target: xslt Job Type: aflasanlibxslt Platform Id: linux Crash Type: Invalid-free Crash Address: 0x6190000006c0 Crash State:...

libxslt:xslt: Use-of-uninitialized-value in xmlDictLookup

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5531569748574208 Project: libxslt Fuzzing Engine: libFuzzer Fuzz Target: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libprotobuf-mutator:libxml2_example: Invalid-free in xmlFreeNode

Project: https://github.com/google/libprotobuf-mutator.git Detailed Report: https://oss-fuzz.com/testcase?key=6499714047016960 Project: libprotobuf-mutator Fuzzing Engine: libFuzzer Fuzz Target: libxml2example Job Type: libfuzzerasanlibprotobuf-mutator Platform Id: linux Crash Type: Invalid-free...

clamav:clamav_scanfile_in_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=6696920154767360 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavscanfileinfuzzer Job Type: libfuzzerubsanclamav Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace...

fio:fuzz_parseini: Stack-buffer-overflow in add_file

Detailed Report: https://oss-fuzz.com/testcase?key=4561698890055680 Project: fio Fuzzing Engine: afl Fuzz Target: fuzzparseini Job Type: aflasanfio Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f7d932b79c0 Crash State: addfile strfilenamecb handleoption Sanitizer:...

fluent-bit:flb-it-fuzz-flb_json_fuzzer_OSSFUZZ: Stack-buffer-overflow in msgpack_sbuffer_write

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4894251580784640 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-flbjsonfuzzerOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash...

libreoffice:hwpfuzzer: Heap-use-after-free in HwpReader::makeStyles

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5493915996782592 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash...

suricata:fuzz_sigpcap: Crash in SCACSearch

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=4733348558274560 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcap Job Type: libfuzzerubsansuricata Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000003bdc000 Crash...

opensips:fuzz_msg_parser: Heap-buffer-overflow in parse_msg

Project: https://github.com/OpenSIPS/opensips.git Detailed Report: https://oss-fuzz.com/testcase?key=4898289158324224 Project: opensips Fuzzing Engine: libFuzzer Fuzz Target: fuzzmsgparser Job Type: libfuzzerasanopensips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

kubernetes-cluster-api:fuzz_unmarshal_cluster_status: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5463013975523328 Project: kubernetes-cluster-api Fuzzing Engine: libFuzzer Fuzz Target: fuzzunmarshalclusterstatus Job Type: libfuzzerasankubernetes-cluster-api Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NU...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in pdfi_dict_get_no_store_R_inner

Detailed Report: https://oss-fuzz.com/testcase?key=5759193200590848 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x631000a9c830 Crash State:...

bitcoin-core:rpc: Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=6001319565983744 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: rpc Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...