unicorn:fuzz_emu_arm64_armbe: Use-of-uninitialized-value in helper_wfi_aarch64eb

Detailed Report: https://oss-fuzz.com/testcase?key=5962797644251136 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarm64armbe Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: helperwfiaarch64eb Sanitizer: memory...

php:php-fuzz-parser: Memcpy-param-overlap in zend_lex_tstring

Detailed Report: https://oss-fuzz.com/testcase?key=5680375123935232 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-parser Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x62b000015218,0x62b00001b4e8 and 0x62b000015350, 0x62b00001b620...

ndpi:fuzz_process_packet: Use-of-uninitialized-value in ndpi_check_dga_name

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4846815202770944 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Denial of service in Apache Xerces2

XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service infinite loop and application hang via malformed XML input, as...

rdkit:mol_data_stream_to_mol_fuzzer: Invalid-free in RDKit::labelRecursivePatterns

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6194859978522624 Project: rdkit Fuzzing Engine: afl Fuzz Target: moldatastreamtomolfuzzer Job Type: aflasanrdkit Platform Id: linux Crash Type: Invalid-free Crash Address: 0x7fff2370fb00 Crash State:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_parse_packet_line_info

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5731163196096512 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6100000001fa...

rdkit:mol_data_stream_to_mol_fuzzer: Stack-buffer-overflow in RDKit::ParseMolBlockProperties

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5731326002200576 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerasani386rdkit Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address...

php:php-fuzz-unserialize: Heap-use-after-free in gc_mark_grey

Detailed Report: https://oss-fuzz.com/testcase?key=4872319490326528 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-unserialize Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x604000022810 Crash State: gcmarkgrey gcmarkroots...

libraw:libraw_fuzzer: Use-of-uninitialized-value in LibRaw::parse_sinar_ia

Detailed Report: https://oss-fuzz.com/testcase?key=5629646313095168 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::parsesinaria LibRaw::identify...

matio:matio_fuzzer: Crash in H5O_dtype_decode_helper

Detailed Report: https://oss-fuzz.com/testcase?key=5198181276319744 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x618000010fb0 Crash State: H5Odtypedecodehelper H5Odtypeshareddecode H5Oattrshareddeco...

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in RDKit::SubstanceGroup::getBondType

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5672153432457216 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_string_prototype_split

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5118228753022976 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

h1-ctf: @shakedko H1-2006 CTF writeup

TL;DR Flag is: ^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$. Thank you for this awesome challenge! Introduction I have participated in this CTF as I wanted to see how far I'd be able to get considering the fact that I'm doing bug bounty for a relatively short time. Coming from the software...

stb:stbi_read_fuzzer: Heap-buffer-overflow in load_jpeg_image

Detailed Report: https://oss-fuzz.com/testcase?key=5726154781884416 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62b000006e0f Crash State: loadjpegimage stbijpegload stbiloadmain...

ndpi:fuzz_ndpi_reader: Heap-use-after-free in ndpi_http_check_content

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5716128734380032 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-use-after-free READ 3 Crash Address: 0x62b000012b9a Cra...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_kerberos

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4791365602115584 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60e00000029d Crash State...

Fuzzing Left4Dead 2 with CERT’s Basic Fuzzing Framework

The post Fuzzing Left4Dead 2 with CERT’s Basic Fuzzing Framework appeared first on Rhino Security Labs...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_check_spotify

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5644310457614336 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 7 Crash Address: 0x60300000011f...

skia:image_filter_deserialize_width: Heap-buffer-overflow in SkVertices::Attribute::Attribute

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6326655659540480 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: imagefilterdeserializewidth Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 13 Crash Addres...

leptonica:enhance_fuzzer: Use-of-uninitialized-value in blockconvLow

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5685982795137024 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzermsanleptonica Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...