boringssl:ssl_ctx_api: Use-of-uninitialized-value in bssl::ssl_cipher_process_rulestr

Project: https://boringssl.googlesource.com/boringssl Detailed Report: https://oss-fuzz.com/testcase?key=5138390601826304 Project: boringssl Fuzzing Engine: libFuzzer Fuzz Target: sslctxapi Job Type: libfuzzermsanboringssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

guetzli:guetzli_fuzzer: Use-of-uninitialized-value in guetzli::JPEGData::~JPEGData

Project: https://github.com/google/guetzli.git Detailed Report: https://oss-fuzz.com/testcase?key=5125356793757696 Project: guetzli Fuzzing Engine: libFuzzer Fuzz Target: guetzlifuzzer Job Type: libfuzzermsanguetzli Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

s2geometry:s2_fuzzer: Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha

Project: https://github.com/google/s2geometry.git Detailed Report: https://oss-fuzz.com/testcase?key=4828691851509760 Project: s2geometry Fuzzing Engine: libFuzzer Fuzz Target: s2fuzzer Job Type: libfuzzermsans2geometry Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

boringssl:ssl_ctx_api: Use-of-uninitialized-value in parse_sigalgs_list

Project: https://boringssl.googlesource.com/boringssl Detailed Report: https://oss-fuzz.com/testcase?key=4721759413207040 Project: boringssl Fuzzing Engine: libFuzzer Fuzz Target: sslctxapi Job Type: libfuzzermsanboringssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

poco:json_parser_fuzzer: Use-of-uninitialized-value in Poco::Dynamic::VarHolderImpl<std::__1::basic_string<char, std::__1::char_traits<

Project: https://github.com/pocoproject/poco.git Detailed Report: https://oss-fuzz.com/testcase?key=4536019031031808 Project: poco Fuzzing Engine: libFuzzer Fuzz Target: jsonparserfuzzer Job Type: libfuzzermsanpoco Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

Finding 0-days with Jackalope

ARCHIVED STORY Finding 0-days with Jackalope By Douglas McKee · September 16, 2021 Overview On March 21st, 2021, the McAfee Enterprise Advanced Threat Research ATR team released several vulnerabilities it discovered in the Netop Vision Pro Education software, a popular schooling software used by...

Finding 0-days with Jackalope

ARCHIVED STORY Finding 0-days with Jackalope By Douglas McKee · September 16, 2021 Overview On March 21st, 2021, the McAfee Enterprise Advanced Threat Research ATR team released several vulnerabilities it discovered in the Netop Vision Pro Education software, a popular schooling software used by...

zxing:MultiFormatDecodeFuzzer: Uncaught exception with empty stacktrace

Project: https://github.com/zxing/zxing.git Detailed Report: https://oss-fuzz.com/testcase?key=6530044529344512 Project: zxing Fuzzing Engine: libFuzzer Fuzz Target: MultiFormatDecodeFuzzer Job Type: libfuzzerasanzxing Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

matio:matio_fuzzer: Heap-buffer-overflow in H5O__chunk_deserialize

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6214089823617024 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

Fuzzing Closed-Source JavaScript Engines with Coverage Feedback

Posted by Ivan Fratric, Project Zero tl;dr I combined Fuzzilli an open-source JavaScript engine fuzzer, with TinyInst an open-source dynamic instrumentation library for fuzzing. I also added grammar-based mutation support to Jackalope my black-box binary fuzzer. So far, these two approaches...

Stable Channel Update for Desktop

The Stable channel has been updated to 93.0.4577.82 for Windows, Mac and Linux which will roll out over the coming days/weeks A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by...

unicorn:fuzz_emu_arm_thumb: Segv on unknown address in helper_uc_tracecode

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=4927968686768128 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarmthumb Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: Segv on unknown address Crash Address:...

samba:fuzz_ndr_nbt_TYPE_STRUCT: Heap-buffer-overflow in ndr_push_array_uint8

Detailed Report: https://oss-fuzz.com/testcase?key=5361280983105536 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrnbtTYPESTRUCT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x608000000180 Crash State: ndrpusharrayuint8...

unicorn:fuzz_emu_arm_armbe: Crash in resume_all_vcpus_armeb

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=4858044975022080 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarmarmbe Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Crash in APFSSuperblock::volume_blocks

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6396856091934720 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsapfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

wolfmqtt:wolfmqtt-fuzzer: Index-out-of-bounds in MqttEncode_Props

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=6008660036288512 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerubsanwolfmqtt Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

icu:uloc_canonicalize_fuzzer: Stack-use-after-scope in uprv_stricmp_70

Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=4509226890821632 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: uloccanonicalizefuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Stack-use-after-scope READ 1 Crash Address:...

wolfmqtt:wolfmqtt-fuzzer: Crash in Topics::Generate

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=5376382868258816 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerubsanwolfmqtt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00200766dc38...

ffmpeg:ffmpeg_AV_CODEC_ID_XMA2_fuzzer: Heap-buffer-overflow in xma_decode_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6150890663313408 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDXMA2fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

pidgin:pidgin_utils_fuzzer: Heap-buffer-overflow in _g_utf8_normalize_wc

Detailed Report: https://oss-fuzz.com/testcase?key=5399474273386496 Project: pidgin Fuzzing Engine: afl Fuzz Target: pidginutilsfuzzer Job Type: aflasanpidgin Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x606000000de0 Crash State: gutf8normalizewc gutf8collate...