lxml:fuzz_xml_parse: Heap-use-after-free in xmlParseInternalSubset

Project: https://github.com/lxml/lxml.git Detailed Report: https://oss-fuzz.com/testcase?key=6029030962626560 Project: lxml Fuzzing Engine: libFuzzer Fuzz Target: fuzzxmlparse Job Type: libfuzzerasanlxml Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60b000001438 Crash...

apache-poi:POIHDGFFuzzer: Security exception in org.apache.poi.hdgf.streams.CompressedStreamStore.decompress

Detailed Report: https://oss-fuzz.com/testcase?key=4686451901857792 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHDGFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

matio:matio_fuzzer: Heap-buffer-overflow in H5D__scatter_mem

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=4705756127297536 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow WRI...

libredwg:llvmfuzz: Heap-buffer-overflow in decode_preR13_entities

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5572405776744448 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

arrow-java:FuzzIpcStream: Security exception in java.base/java.nio.Bits.reserveMemory

Detailed Report: https://oss-fuzz.com/testcase?key=4803541568716800 Project: arrow-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzIpcStream Job Type: libfuzzerasanarrow-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.nio.Bits.reserveMemory...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in transform_4x4_luma_add_16_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=5708690734579712 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: transform4x4lumaadd16fallback...

joni:AddrListFixFuzzer: Security exception in org.joni.Parser.parseCharClass

Detailed Report: https://oss-fuzz.com/testcase?key=5077053273407488 Project: joni Fuzzing Engine: libFuzzer Fuzz Target: AddrListFixFuzzer Job Type: libfuzzerasanjoni Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.joni.Parser.parseCharClass...

graphql-java:GraphqlFuzzer: Security exception in graphql.org.antlr.v4.runtime.atn.SingletonPredictionContext.equals

Detailed Report: https://oss-fuzz.com/testcase?key=6102482599936000 Project: graphql-java Fuzzing Engine: libFuzzer Fuzz Target: GraphqlFuzzer Job Type: libfuzzerasangraphql-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_hash_destroy

Detailed Report: https://oss-fuzz.com/testcase?key=6560205917519872 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x603000008930 Crash State: uclhashdestroy...

git:fuzz-commit-graph: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5911481507774464 Project: git Fuzzing Engine: libFuzzer Fuzz Target: fuzz-commit-graph Job Type: libfuzzerasangit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61d000002000 Crash State: NULL Sanitizer: address ASAN Recommended...

llvm:clangd-fuzzer: Heap-buffer-overflow in llvm::raw_ostream::copy_to_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=6365487988342784 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clangd-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x625000004900 Crash State: llvm::rawostream::copytobuffer...

envoy:h1_capture_persistent_fuzz_test: Heap-use-after-free in Envoy::IntegrationTestServerImpl::~IntegrationTestServerImpl

Detailed Report: https://oss-fuzz.com/testcase?key=5240250433404928 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: h1capturepersistentfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x7c0f752cfcd0 Crash State:...

joni:AddrListFixFuzzer: Security exception in org.joni.Analyser.getMinMatchLength

Project: https://github.com/jruby/joni.git Detailed Report: https://oss-fuzz.com/testcase?key=6136864580698112 Project: joni Fuzzing Engine: libFuzzer Fuzz Target: AddrListFixFuzzer Job Type: libfuzzerasanjoni Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

libredwg:llvmfuzz: Heap-buffer-overflow in dxf_fixup_string

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4940101958107136 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

mysql-server:fuzz_mysqld: Heap-use-after-free in Batch_segment::write

Detailed Report: https://oss-fuzz.com/testcase?key=4504694106750976 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzmysqld Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6120001bb688 Crash State: Batchsegment::write...

mongoose:fuzz: Crash in skip_chunk

Project: https://github.com/cesanta/mongoose.git Detailed Report: https://oss-fuzz.com/testcase?key=6141376225738752 Project: mongoose Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanmongoose Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7e76ebdf881f Crash State:...

njs:njs_process_script_fuzzer: Segv on unknown address in njs_chb_append0

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=4938686485364736 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: njschbappen...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Detailed Report: https://oss-fuzz.com/testcase?key=4744502121988096 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

jsqlparser:JSqlParserFuzzer: Security exception in net.sf.jsqlparser.parser.CCJSqlParser.jj_3_52

Detailed Report: https://oss-fuzz.com/testcase?key=6539391621005312 Project: jsqlparser Fuzzing Engine: libFuzzer Fuzz Target: JSqlParserFuzzer Job Type: libfuzzerasanjsqlparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State: net.sf.jsqlparser.parser.CCJSqlParser.jj3...

Stable Channel Update for Desktop

The Stable channel has been updated to 117.0.5938.149 for Mac and Linux and 117.0.5938.149/.150 for Windows, which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept...