qemu:qemu-fuzz-i386-target-generic-fuzz-sdhci-v3: Heap-buffer-overflow in ldl_he_p

Detailed Report: https://oss-fuzz.com/testcase?key=5076646380044288 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-sdhci-v3 Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x61500001ec80 Crash State:...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in DHT::make_rbdiag

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6308396152258560 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

matio:matio_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6313522246057984 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000001800 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in Imf_2_5::FastHufDecoder::decode

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=4868768916439040 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

skia:skruntimeeffect: Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Detailed Report: https://oss-fuzz.com/testcase?key=5137902589837312 Project: skia Fuzzing Engine: afl Fuzz Target: skruntimeeffect Job Type: aflasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x6310000009d8 Crash State: std::1::uniqueptrSkSL::Expression,...

serenity:FuzzPNGLoader: Heap-buffer-overflow in decode

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5715645215932416 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzPNGLoader Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Crash in _fini

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5087662285389824 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ Crash...

h1-ctf: Complete destruction of the Grinch server

Hackyholidays flag 1 First flag is just a matter of reading /robots.txt file: User-agent: Disallow: /s3cr3t-ar3a Flag: flag48104912-28b0-494a-9995-a203d1e261e7 flag 2 Visiting /s3cr3t-ar3a and opening it with developer tools gets the second flag: flagb7ebcb75-9100-4f91-8454-cfb9574459f7 It is...

h1-ctf: Invading Grinch Network and Saving Christmas

How we saved Christmas As usual with H1 CTF challenges we are provided with a target URL. In our case it is the following: https://hackyholidays.h1ctf.com/ We started by visiting the URL and see what is going on. All we could see is a page with an image with a warning message. F1125722 We quickly...

pygments:pygments_fuzzer: Uncaught exception in get_tokens_unprocessed

Project: https://github.com/pygments/pygments.git Detailed Report: https://oss-fuzz.com/testcase?key=5434047438389248 Project: pygments Fuzzing Engine: libFuzzer Fuzz Target: pygmentsfuzzer Job Type: libfuzzerasanpygments Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash Stat...

cryptofuzz:cryptofuzz-nss: Use-of-uninitialized-value in CryptoPP::AllocatorWithCleanup<unsigned char, false>::pointer CryptoPP::Standard

Detailed Report: https://oss-fuzz.com/testcase?key=5768923286994944 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-nss Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

llvm:llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::object::WasmObjectFile::parseCodeSection

Detailed Report: https://oss-fuzz.com/testcase?key=4801840666640384 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60700000047c Crash State:...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in sc_path_print

Detailed Report: https://oss-fuzz.com/testcase?key=5766033038245888 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f624040b380 Crash State: scpathprint scprintpath...

mdbtools:fuzz_mdb: Stack-buffer-overflow in mdb_crack_row

Project: https://github.com/mdbtools/mdbtools.git Detailed Report: https://oss-fuzz.com/testcase?key=4934294778806272 Project: mdbtools Fuzzing Engine: libFuzzer Fuzz Target: fuzzmdb Job Type: libfuzzerasanmdbtools Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address:...

opensc:fuzz_pkcs15_reader: Negative-size-param in tcos_decipher

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6280582086656000 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

kimageformats:kimgio_xcf_fuzzer: Segv on unknown address in QPainterPrivate::attachPainterPrivate

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5665698529542144 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioxcffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State...

wireshark:fuzzshark_ip_proto-udp: Heap-buffer-overflow in dissect_idn

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=6331066742865920 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type:...

kimageformats:kimgio_avif_fuzzer: Use-of-uninitialized-value in av1_predict_intra_block

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5198064491036672 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioaviffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

curl:curl_fuzzer: Use-of-uninitialized-value in mqtt_doing

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6311688408268800 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzer Job Type: libfuzzermsancurl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: mqttdoing...

selinux:secilc-fuzzer: Stack-use-after-return in cil_copy_expr

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5316920295424000 Project: selinux Fuzzing Engine: afl Fuzz Target: secilc-fuzzer Job Type: aflasanselinux Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address:...