arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::arrow::ApplyOriginalStorageMetadata

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5076612654301184 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x607000000460 Crash...

libzmq:socket_connect_fuzzer: Heap-buffer-overflow in zmq::tcp_read

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=4686903000170496 Project: libzmq Fuzzing Engine: afl Fuzz Target: socketconnectfuzzer Job Type: aflasanlibzmq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x625000013900...

OPENSUSE-SU-2020:1564-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2020-17507: Fixed a buffer overflow in XBM parser bsc1176315 - Fixed various issues discovered by fuzzing: - Made handling of XDGRUNTIMEDIR more secure bsc1172515: This update was imported from the SUSE:SLE-15-SP2:Update update proje...

Security update for libqt5-qtbase (important)

openSUSE Security Update: Security update for libqt5-qtbase Announcement ID: openSUSE-SU-2020:1564-1 Rating: important References: 1172515 1176315 Cross-References: CVE-2020-17507 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has one errata is now available...

arrow:parquet-arrow-fuzz: Negative-size-param in parquet::SerializedPageReader::DecompressPage

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5657332229603328 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

libreoffice:ww8fuzzer: Heap-use-after-free in SfxItemSet::Count

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5666529566523392 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: ww8fuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash...

fluent-bit:flb-it-fuzz-msgpack_to_gelf_fuzzer_OSSFUZZ: Crash in flb_sds_cat

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5676844333137920 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-msgpacktogelffuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: UNKNOWN READ...

grok:grk_decompress_fuzzer: Heap-use-after-free in grk::t1_part1::T1Part1::postDecode

Detailed Report: https://oss-fuzz.com/testcase?key=4658002672746496 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6150009f8798 Crash State: grk::t1part1::T1Part1::postDecode...

libressl:client: Heap-buffer-overflow in x509_constraints_uri_host

Project: https://github.com/libressl-portable/portable.git Detailed Report: https://oss-fuzz.com/testcase?key=5703967370379264 Project: libressl Fuzzing Engine: afl Fuzz Target: client Job Type: aflasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000005...

opencv:imdecode_fuzzer: Heap-buffer-overflow in void cv::copyToMat<int>

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=5171310492385280 Project: opencv Fuzzing Engine: afl Fuzz Target: imdecodefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6060000008f0 Crash...

cryptofuzz:cryptofuzz-boringssl-noasm: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5151216529833984 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: memory MSA...

php:php-fuzz-execute: Heap-use-after-free in zend_gc_addref

Detailed Report: https://oss-fuzz.com/testcase?key=5636312147951616 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x612000018040 Crash State: zendgcaddref...

alembic:alembic_dump_info_fuzzer: Heap-buffer-overflow in Alembic::Ogawa::v12::MemoryMappedIStreamReader::read

Project: https://github.com/alembic/alembic.git Detailed Report: https://oss-fuzz.com/testcase?key=5783397698633728 Project: alembic Fuzzing Engine: libFuzzer Fuzz Target: alembicdumpinfofuzzer Job Type: libfuzzerasanalembic Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 9 Crash Addres...

Microsoft announces new Project OneFuzz framework, an open source developer tool to find and fix bugs at scale

Microsoft is dedicated to working with the community and our customers to continuously improve and tune our platform and products to help defend against the dynamic and sophisticated threat landscape. Earlier this year, we announced that we would replace the existing software testing experience...

php:php-fuzz-execute: Use-of-uninitialized-value in zend_generator_search_multi_children_node

Detailed Report: https://oss-fuzz.com/testcase?key=5146486399303680 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: zendgeneratorsearchmultichildrennode...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::HttpResponseFirstLine::validateStatusCode

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4829420752470016 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Heap-buffer-overflow in ntfs_make_data_run

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5114131349504000 Project: sleuthkit Fuzzing Engine: honggfuzz Fuzz Target: sleuthkitflsntfsfuzzer Job Type: honggfuzzasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

monero:cold-transaction_fuzz_tests: Heap-buffer-overflow in unpack_vartime

Project: https://github.com/monero-project/monero.git Detailed Report: https://oss-fuzz.com/testcase?key=5164790941745152 Project: monero Fuzzing Engine: libFuzzer Fuzz Target: cold-transactionfuzztests Job Type: libfuzzerasanmonero Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libucl:ucl_add_string_fuzzer: Stack-use-after-return in ucl_include_file_single

Detailed Report: https://oss-fuzz.com/testcase?key=5703828262092800 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Stack-use-after-return READ 6 Crash Address: 0x7fd1ac9fc8e6 Crash State: uclincludefilesingle...

grok:grk_decompress_fuzzer: Heap-use-after-free in grk::SOTMarker::read

Detailed Report: https://oss-fuzz.com/testcase?key=5720229752340480 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x60d000000380 Crash State: grk::SOTMarker::read grk::j2kreadsot...