fastjson2:JsonFuzzer: Out-of-memory in JsonFuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=4571054809939968 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Out-of-memory exceeds 2560 MB Crash Address: Crash State: JsonFuzzer Sanitizer: address ASAN...

fribidi:fribidi-fuzzer: Heap-use-after-free in merge_with_prev

Project: https://github.com/fribidi/fribidi.git Detailed Report: https://oss-fuzz.com/testcase?key=5372192033472512 Project: fribidi Fuzzing Engine: libFuzzer Fuzz Target: fribidi-fuzzer Job Type: libfuzzerasanfribidi Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address:...

Bug inside ABDKMathQuad library

Handle adelamo Vulnerability details Impact FairSideFormula library is using ABDKMathQuad library underneath. According to the ABDKMathQuad README, the range of values is the following: The minimum strictly positive subnormal value is 2^−16494 ≈ 10^−4965 and has a precision of only one bit. The...

fastjson2:JsonFuzzer: Uncaught exception in java.base/java.util.ArrayList.hashCodeRange

Detailed Report: https://oss-fuzz.com/testcase?key=4996067627237376 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: java.base/java.util.ArrayList.hashCodeRange...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5184643327459328 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

fluent-bit:flb-it-fuzz-config_fuzzer_OSSFUZZ: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5261711146876928 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f7e5a48cd40 Crash State: NULL Sanitizer:...

sleuthkit:sleuthkit_fls_hfs_fuzzer: Heap-buffer-overflow in hfs_cat_traverse

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5601997513424896 Project: sleuthkit Fuzzing Engine: honggfuzz Fuzz Target: sleuthkitflshfsfuzzer Job Type: honggfuzzasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

wasm3:fuzzer: Index-out-of-bounds in Pop

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6211848046247936 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerubsanwasm3 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: Pop...

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in DrawPolygonPrimitive

Detailed Report: https://oss-fuzz.com/testcase?key=4669418245324800 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: DrawPolygonPrimitive...

Segfault in `tf.raw_ops.SparseCountSparseOutput`

Impact Passing invalid arguments e.g., discovered via fuzzing to tf.rawops.SparseCountSparseOutput results in segfault. Patches We have patched the issue in GitHub commit 82e6203221865de4008445b13c69b6826d2b28d9. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on...

vlc:vlc-demux-dec-libfuzzer: Heap-buffer-overflow in SVCDSubRenderImage

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5226142677204992 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x621000007500 Cra...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in _blosc_getitem

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=6208488536670208 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

unicorn:fuzz_emu_arm_armbe: Crash in helper_uc_tracecode

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5828197838094336 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarmarmbe Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000ffff80...

Fuzzing HTTP Proxies: Privoxy, Part 1

Research Fuzzing HTTP Proxies: Privoxy, Part 1 Share May 17th, 2021 Here at Opera, we’re always looking for ways to improve the browsing experience of our users with speed and usability. Perhaps more importantly though, we also look for ways to improve users’ privacy and security. While we...

pcl:ply_reader_fuzzer: Container-overflow in std::__1::__function::__func<std::__1::tuple<std::__1::function<void

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=6568762640826368 Project: pcl Fuzzing Engine: afl Fuzz Target: plyreaderfuzzer Job Type: aflasanpcl Platform Id: linux Crash Type: Container-overflow WRITE 4 Crash Address: 0x616000000c80 Cras...

apache-commons:CompressSevenZFuzzer: Uncaught exception in java.base/java.util.BitSet.initWords

Detailed Report: https://oss-fuzz.com/testcase?key=6399828323074048 Project: apache-commons Fuzzing Engine: libFuzzer Fuzz Target: CompressSevenZFuzzer Job Type: libfuzzerasanapache-commons Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

CVE-2021-29619 Segfault in `tf.raw_ops.SparseCountSparseOutput`

TensorFlow is an end-to-end open source platform for machine learning. Passing invalid arguments e.g., discovered via fuzzing to tf.rawops.SparseCountSparseOutput results in segfault. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow...

CVE-2021-29619

TensorFlow is an end-to-end open source platform for machine learning. Passing invalid arguments e.g., discovered via fuzzing to tf.rawops.SparseCountSparseOutput results in segfault. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow...

go-ethereum:fuzz_cross_g1_multiexp: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5322815411716096 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzcrossg1multiexp Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN...

libecc:cryptofuzz-libecc: Use-of-uninitialized-value in nn_check_initialized

Project: https://github.com/ANSSI-FR/libecc.git Detailed Report: https://oss-fuzz.com/testcase?key=5939103842566144 Project: libecc Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-libecc Job Type: libfuzzermsanlibecc Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...