imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void add_residual_fallback<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=5143807169134592 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void addresidualfallback void...

libsndfile:sndfile_fuzzer: Use-of-uninitialized-value in alac_decoder_init

Detailed Report: https://oss-fuzz.com/testcase?key=5729600380076032 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: alacdecoderinit alacreaderinit...

grok:grk_decompress_fuzzer: Crash in grk::SparseBuffer<6u, 6u>::read_or_write

Detailed Report: https://oss-fuzz.com/testcase?key=6267600499376128 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000003c2c Crash State: grk::SparseBuffer::readorwrite grk::SparseBuffer::rea...

miniz:uncompress_fuzzer: Use-of-uninitialized-value in tinfl_decompress

Project: https://github.com/richgel999/miniz.git Detailed Report: https://oss-fuzz.com/testcase?key=6224532463157248 Project: miniz Fuzzing Engine: libFuzzer Fuzz Target: uncompressfuzzer Job Type: libfuzzermsanminiz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libucl:ucl_add_string_fuzzer: Crash in _mum_hash_aligned

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=6313468283846656 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002a45000...

fluent-bit:flb-it-fuzz-utils_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_utils_time_to_seconds

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5087208312406016 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-utilsfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow REA...

Ultimate Project Manager CRM PRO 2.05 SQL Injection

Exploit Title: Ultimate Project Manager CRM PRO 2.0.5 - SQLi Credentials Leakage Date: 2020-16-09 Exploit Author: nag0mez Vendor Homepage: https://ultimatepro.codexcube.com/ Version: = 2.0.5 Tested on: Kali Linux 2020.2 The SQLi injection does not allow UNION payloads. However, we can guess...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in grk::Subband::Subband

Detailed Report: https://oss-fuzz.com/testcase?key=5727693351682048 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x618000024000 Crash State: grk::Subband::Subband...

mruby:mruby_fuzzer: Crash in presym_sym2name

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5354991105343488 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyfuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0002800c734e Crash State:...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Crash in ntfs_make_data_run

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6236530802425856 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsntfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x619000013cc0...

suricata:fuzz_siginit: Use-of-uninitialized-value in pcre_compile2

Detailed Report: https://oss-fuzz.com/testcase?key=5371981735919616 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsiginit Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pcrecompile2 DetectPcreParse DetectPcreSet...

wolfssl:fuzzer-wolfssl-server: Crash in wolfCrypt_custom_free

Detailed Report: https://oss-fuzz.com/testcase?key=5171589131534336 Project: wolfssl Fuzzing Engine: afl Fuzz Target: fuzzer-wolfssl-server Job Type: aflasanwolfssl Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000788e50 Crash State: wolfCryptcustomfree wolfSSLFree GetDhPublicK...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::t1_ht::T1HT::postDecode

Detailed Report: https://oss-fuzz.com/testcase?key=5706757122555904 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::t1ht::T1HT::postDecode...

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in RDKit::FileParserUtils::finishMolProcessing

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5182941669621760 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

grok:grk_decompress_fuzzer: Heap-buffer-overflow in ojph::local::rev_fetch

Detailed Report: https://oss-fuzz.com/testcase?key=4862900302512128 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62900510e1fc Crash State: ojph::local::revfetch...

libreoffice:sftfuzzer: Stack-buffer-overflow in ParseCMAP

Detailed Report: https://oss-fuzz.com/testcase?key=4859879712620544 Project: libreoffice Fuzzing Engine: afl Fuzz Target: sftfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffc551c0ae0 Crash State: ParseCMAP...

qcms:fuzz: Heap-buffer-overflow in qcms::chain::qcms_modular_transform_create_lut::h1a73851109fbc700

Detailed Report: https://oss-fuzz.com/testcase?key=5081913385287680 Project: qcms Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanqcms Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6020000000b8 Crash State:...

suricata:fuzz_siginit: Use-of-uninitialized-value in DetectDatarepParse

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5762961148477440 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsiginit Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

Announcing the Fuzzilli Research Grant Program

Posted by Samuel Groß, Project Zero Project Zero’s mission is to make 0-day hard in order to improve end-user security. We attack this problem in different ways, including supporting other security researchers. While Google currently offers research grants, they are limited to academics and those...

arrow:parquet-arrow-fuzz: Negative-size-param in CopyUncompressedBlockToOutput

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4914963406389248 Project: arrow Fuzzing Engine: honggfuzz Fuzz Target: parquet-arrow-fuzz Job Type: honggfuzzasanarrow Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...