libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_hash_search

Detailed Report: https://oss-fuzz.com/testcase?key=5632983978082304 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000002560 Crash State: uclhashsearch...

net-snmp:snmp_api_fuzzer: Crash in snmp_add_var

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5402726234718208 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpapifuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

clickhouse:compressed_buffer_fuzzer: Heap-buffer-overflow in DB::CompressionCodecNone::doDecompressData

Project: https://github.com/ClickHouse/ClickHouse.git Detailed Report: https://oss-fuzz.com/testcase?key=5433699089383424 Project: clickhouse Fuzzing Engine: libFuzzer Fuzz Target: compressedbufferfuzzer Job Type: libfuzzerasanclickhouse Platform Id: linux Crash Type: Heap-buffer-overflow READ...

libexif:exif_from_data_fuzzer: Heap-buffer-overflow in exif_get_slong

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=6227140945772544 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exiffromdatafuzzer Job Type: libfuzzerasanlibexif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

matio:matio_fuzzer: Use-of-uninitialized-value in H5F_addr_decode_len

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5918615659479040 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-val...

assimp:assimp_fuzzer: Index-out-of-bounds in bool ODDLParser::isNumeric<char const>

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6294242528460800 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: bool...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.jj_3R_363

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5575300470145024 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Statements

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5834375112032256 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.InclusiveOrExpression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5521089995341824 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

pcl:ply_reader_fuzzer: Container-overflow in void pcl::PLYReader::vertexListPropertyContentCallback<float>

Detailed Report: https://oss-fuzz.com/testcase?key=5889798175326208 Project: pcl Fuzzing Engine: afl Fuzz Target: plyreaderfuzzer Job Type: aflasanpcl Platform Id: linux Crash Type: Container-overflow WRITE 4 Crash Address: 0x619000007380 Crash State: void...

spice-usbredir:usbredirparserfuzz: Use-of-uninitialized-value in usbredirfilter_string_to_rules

Detailed Report: https://oss-fuzz.com/testcase?key=6641045097021440 Project: spice-usbredir Fuzzing Engine: libFuzzer Fuzz Target: usbredirparserfuzz Job Type: libfuzzermsanspice-usbredir Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libexif:exif_loader_fuzzer: Crash in exif_mnote_data_apple_load

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=4900628550778880 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exifloaderfuzzer Job Type: libfuzzerasanlibexif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6311000007ff Cra...

spice-usbredir:usbredirparserfuzz: Use-of-uninitialized-value in usbredirparser_caps_get_cap

Detailed Report: https://oss-fuzz.com/testcase?key=5932102628540416 Project: spice-usbredir Fuzzing Engine: libFuzzer Fuzz Target: usbredirparserfuzz Job Type: libfuzzermsanspice-usbredir Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: usbredirparsercapsgetca...

probench_aflnet

It is an offensive tool for network protocols. The primary CVE ID is not explicitly mentioned in the provided context; however, the tool is designed to fuzz network protocols, which may lead to the discovery of vulnerabilities. The target product/service or framework is network protocols, and the...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.parser.DefaultJSONParser.parseObject

Detailed Report: https://oss-fuzz.com/testcase?key=4921638826147840 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.parser.DefaultJSONParser.parseObject

Detailed Report: https://oss-fuzz.com/testcase?key=4574925947011072 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

libsndfile:sndfile_alt_fuzzer: Use-of-uninitialized-value in endswap_short_array

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=4565103457468416 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilealtfuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libexif:exif_loader_fuzzer: Heap-buffer-overflow in exif_mnote_data_apple_identify

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=4532703432146944 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exifloaderfuzzer Job Type: libfuzzerasanlibexif Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address:...

PYSEC-2021-344

OneFuzz is an open source self-hosted Fuzzing-As-A-Service platform. Starting with OneFuzz 2.12.0 or greater, an incomplete authorization check allows an authenticated user from any Azure Active Directory tenant to make authorized API calls to a vulnerable OneFuzz instance. To be vulnerable, a...

CVE-2021-37705

Affected software : OneFuzz self-hosted fuzzing platform. Vulnerability : Starting with OneFuzz 2.12.0 or greater, an incomplete authorization check allows an authenticated user from any Azure AD tenant to make authorized API calls on a vulnerable OneFuzz instance when deployed with the non-defau...