radare2:ia_fuzz: Stack-buffer-overflow in io_memory_read

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=6642114892791808 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=4553116972089344 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

qt:qtbase_gui_image_qimage_loadfromdata: Heap-use-after-free in QString::QString

Detailed Report: https://oss-fuzz.com/testcase?key=5050369662910464 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguiimageqimageloadfromdata Job Type: libfuzzerasanqt Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address: 0x607000003c20 Crash State: QString::QString...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::MplsLayer::toString

Detailed Report: https://oss-fuzz.com/testcase?key=6148419743514624 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pcpp::MplsLayer::toString...

libavc:svc_dec_fuzzer: Heap-buffer-overflow in isvcd_populate_res_prms

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=4627953069457408 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: svcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux...

pcapplusplus:FuzzTarget: Negative-size-param in pcpp::RawPacket::insertData

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5466382258798592 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Negative-size-param Crash Address: Cra...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::SomeIpSdEntry::SomeIpSdEntry

Detailed Report: https://oss-fuzz.com/testcase?key=5785322721771520 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pcpp::SomeIpSdEntry::SomeIpSdEntry...

envoy:ext_proc_unit_test_fuzz: Container-overflow in std::__1::vector<antlr4::tree::ParseTree*, std::__1::allocator<antlr4::tree::Par

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5368312854609920 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: extprocunittestfuzz Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Container-overflow READ Crash Address:...

graphql-java:GraphqlFuzzer: Security exception in java.base/sun.nio.cs.CESU_8.newEncoder

Detailed Report: https://oss-fuzz.com/testcase?key=5111413412331520 Project: graphql-java Fuzzing Engine: libFuzzer Fuzz Target: GraphqlFuzzer Job Type: libfuzzerasangraphql-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/sun.nio.cs.CESU8.newEncoder...

pcre2:pcre2_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5792151736549376 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzerubsanpcre2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ffddd1a9ffc Crash State: NULL Sanitizer: undefined UBSAN Recommended...

javaparser:parseFuzzer: Security exception in com.github.javaparser.CommentsInserter.insertComments

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6091363586015232 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

libredwg:llvmfuzz: Heap-use-after-free in dxf_tables_read

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5713483572051968 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

pigweed:detokenize_fuzzer: Use-of-uninitialized-value in pw::tokenizer::Detokenizer::Detokenize

Detailed Report: https://oss-fuzz.com/testcase?key=4827947886051328 Project: pigweed Fuzzing Engine: libFuzzer Fuzz Target: detokenizefuzzer Job Type: libfuzzermsanpigweed Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pw::tokenizer::Detokenizer::Detokenize...

pcapplusplus:FuzzTarget: Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5076010634444800 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Stack-buffer-overflow READ 5 Crash...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::TLVRecordReader<pcpp::TcpOption>::getTLVRecord

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=6211679872221184 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::PPP_PPTPLayer::computeCalculateFields

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5020087903715328 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::SomeIpSdLayer::SomeIpSdLayer

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=6113785130385408 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

libredwg:llvmfuzz: Segv on unknown address in in_postprocess_SEQEND

Detailed Report: https://oss-fuzz.com/testcase?key=4672739111469056 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: inpostprocessSEQEND dxfpostprocessSEQEND...

Stable Channel Update for Desktop

The Stable channel has been updated to 119.0.6045.159 for Mac and Linux and 119.0.6045.159/.160 for Windows, which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

qemu:qemu-fuzz-i386-target-generic-fuzz-e1000: Stack-buffer-overflow in eNUMBER_receive_iov

Detailed Report: https://oss-fuzz.com/testcase?key=5025462753296384 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-e1000 Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7bc1f741c6b8 Crash State:...