matio:matio_fuzzer: Heap-buffer-overflow in strdup_vprintf

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5650719150964736 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasani386matio Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0xf50005d1...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_values_hash_test

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5638785819213824 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x62500000c100 Crash...

grpc:client_fuzzer: Index-out-of-bounds in grpc_static_mdelem_for_static_strings

Project: https://github.com/grpc/grpc.git Detailed Report: https://oss-fuzz.com/testcase?key=5665813578645504 Project: grpc Fuzzing Engine: libFuzzer Fuzz Target: clientfuzzer Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

matio:matio_fuzzer: Use-of-uninitialized-value in psnip_safe_size_mul

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5701145254690816 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libssh2:ssh2_client_fuzzer: Crash in _libssh2_packet_add

Project: https://github.com/cmeister2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5670522204979200 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerasanlibssh2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61110004e7ff...

libspng:spng_read_fuzzer: Heap-buffer-overflow in spng_decode_image

Project: https://gitlab.com/randy408/libspng.git https://github.com/randy408/libspng.git Detailed Report: https://oss-fuzz.com/testcase?key=5750326069559296 Project: libspng Fuzzing Engine: libFuzzer Fuzz Target: spngreadfuzzer Job Type: libfuzzerasanlibspng Platform Id: linux Crash Type:...

libssh2:ssh2_client_fuzzer: Heap-buffer-overflow in kex_agree_methods

Project: https://github.com/cmeister2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5129964331991040 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerasanlibssh2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libssh2:ssh2_client_fuzzer: Heap-buffer-overflow in _libssh2_ntohu32

Project: https://github.com/cmeister2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5651535966502912 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerasanlibssh2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libvips:jpegsave_file_fuzzer: Index-out-of-bounds in make_hI

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5651968818675712 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavefilefuzzer Job Type: libfuzzerubsanlibvips Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

libhevc:hevc_dec_fuzzer: Heap-buffer-overflow in ihevcd_parse_slice_data

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5703261012623360 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Heap-buffer-overflow READ...

file:magic_fuzzer: Heap-buffer-overflow in cdf_read_property_info

Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=5743444592427008 Project: file Fuzzing Engine: libFuzzer Fuzz Target: magicfuzzer Job Type: libfuzzerasani386file Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0xf23fcf18 Cras...

Stable Channel Update for Desktop

The stable channel has been updated to 76.0.3809.132 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain...

graphicsmagick:coder_MNG_fuzzer: Unknown signal in MagickMallocAligned

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5126582330458112 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMNGfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type: Unknown signal Crash Address...

curl:curl_fuzzer_smb: Heap-buffer-overflow in to_u32

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5714596706385920 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzersmb Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf5902f48 Cra...

curl:curl_fuzzer_smtp: Negative-size-param in fuzz_tlv_to_string

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6288244651589632 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzersmtp Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_PNG_fuzzer: Crash in av_freep

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5768418552184832 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDPNGfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00000045dfd0...

curl:curl_fuzzer_pop3: Use-of-uninitialized-value in dprintf_formatf

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5716063639044096 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerpop3 Job Type: libfuzzermsancurl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

curl:curl_fuzzer_pop3: Use-of-uninitialized-value in Curl_rand_hex

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5707860721270784 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerpop3 Job Type: libfuzzermsancurl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

curl:curl_fuzzer_rtmp: Negative-size-param in fuzz_tlv_to_string

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5639027763445760 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerrtmp Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in strncpy

Detailed Report: https://oss-fuzz.com/testcase?key=5633780185825280 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f89f7151530 Crash State: strncpy...