radare2:ia_fuzz: Heap-buffer-overflow in buf_bytes_write

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=6312733617225728 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

freerdp:TestFuzzFastpath: Heap-buffer-overflow in rdp_read_capability_sets

Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=5149800723972096 Project: freerdp Fuzzing Engine: libFuzzer Fuzz Target: TestFuzzFastpath Job Type: libfuzzerasanfreerdp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

memcached:fuzzer_proxy: Heap-buffer-overflow in _process_request_storage

Project: https://github.com/memcached/memcached.git Detailed Report: https://oss-fuzz.com/testcase?key=5973309003988992 Project: memcached Fuzzing Engine: libFuzzer Fuzz Target: fuzzerproxy Job Type: libfuzzerasanmemcached Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address:...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5977567329845248 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

pcapplusplus:FuzzWriterNg: Use-of-uninitialized-value in light_read_record

Detailed Report: https://oss-fuzz.com/testcase?key=6577238347677696 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzWriterNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: lightreadrecord lightpcapngopenre...

matio:matio_fuzzer: Heap-use-after-free in Mat_VarFree

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5717360712417280 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Heap-use-after-free READ...

flex:fuzz-main: Stack-buffer-underflow in mkechar

Project: https://github.com/westes/flex.git Detailed Report: https://oss-fuzz.com/testcase?key=4942722591948800 Project: flex Fuzzing Engine: libFuzzer Fuzz Target: fuzz-main Job Type: libfuzzerasanflex Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7e791fa0001c Cra...

g-api-python-tasks:fuzz_cloudtask_client: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6697305483837440 Project: g-api-python-tasks Fuzzing Engine: libFuzzer Fuzz Target: fuzzcloudtaskclient Job Type: libfuzzerasang-api-python-tasks Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer:...

pcapplusplus:FuzzTarget: Segv on unknown address in pcpp::IPv6Layer::~IPv6Layer

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5591891652444160 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Segv on unknown address Crash Address:...

jsqlparser:JSqlParserFuzzer: Security exception in net.sf.jsqlparser.parser.CCJSqlParser.PrimaryExpression

Detailed Report: https://oss-fuzz.com/testcase?key=6742107240857600 Project: jsqlparser Fuzzing Engine: libFuzzer Fuzz Target: JSqlParserFuzzer Job Type: libfuzzerasanjsqlparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6152483693985792 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5O__cache_chk_serialize

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=6465395046285312 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzerasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x602000003c7...

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5F__accum_free

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=6034813090856960 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzerasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x616000000c5...

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5HL__fl_deserialize

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=5918788919820288 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzerasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

hdf5:h5_extended_fuzzer: Heap-use-after-free in H5FL__blk_gc_list

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=6022968477024256 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzerasanhdf5 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x602000003c...

fwupd:genesys-scaler_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6333088201244672 Project: fwupd Fuzzing Engine: libFuzzer Fuzz Target: genesys-scalerfuzzer Job Type: libfuzzerasanfwupd Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revisio...

matio:matio_fuzzer: Crash in H5HG_read

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=4726411475615744 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash...

jackson-databind:ObjectReaderRandomClassFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=5819542208053248 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ObjectReaderRandomClassFuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type:...

lua:luaL_loadbuffer_proto_test: Heap-use-after-free in luaV_finishget

Detailed Report: https://oss-fuzz.com/testcase?key=5350818532360192 Project: lua Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferprototest Job Type: libfuzzerasanlua Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x61b000004338 Crash State: luaVfinishget luaVexecute...

Stable Channel Update for Desktop

The Stable channel has been updated to 123.0.6312.86/.87 for Windows and Mac and 123.0.6312.86 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...