imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in put_weighted_pred_8_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=6684789205237760 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: putweightedpred8fallback...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void apply_sao_internal<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=5336816135307264 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void applysaointernal...

imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in CompositeOverImage

Detailed Report: https://oss-fuzz.com/testcase?key=4612663308582912 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CompositeOverImage CompositeIma...

Stable Channel Update for Desktop

The Stable channel has been updated to 105.0.5195.125 for Mac and Linux, 105.0.5195.125/126/127 which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted unt...

cyclonedds:fuzz_config_init: Segv on unknown address in ddsi_config_init

Project: https://github.com/eclipse-cyclonedds/cyclonedds.git Detailed Report: https://oss-fuzz.com/testcase?key=5320678181568512 Project: cyclonedds Fuzzing Engine: libFuzzer Fuzz Target: fuzzconfiginit Job Type: libfuzzerasancyclonedds Platform Id: linux Crash Type: Segv on unknown address Cras...

ffmpeg:ffmpeg_dem_MOV_fuzzer: Index-out-of-bounds in av_aes_init

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5968304170205184 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemMOVfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

hunspell:affdicfuzzer: Use-of-uninitialized-value in SfxEntry::add

Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=4648663883841536 Project: hunspell Fuzzing Engine: libFuzzer Fuzz Target: affdicfuzzer Job Type: libfuzzermsanhunspell Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

lcms:cms_universal_transform_fuzzer: Use-of-uninitialized-value in PackPlanarWords

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=6355667052527616 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsuniversaltransformfuzzer Job Type: libfuzzermsanlcms Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

curl:curl_fuzzer_rtsp: Heap-buffer-overflow in fuzz_write_callback

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5126419931332608 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerrtsp Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address: 0xf1a04269...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-double-free in flb_sds_destroy

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6437799227686912 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-double-free...

lcms:cms_universal_transform_fuzzer: Crash in from8to16

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=5295684290478080 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsuniversaltransformfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x62d0af50f18...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-underflow in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=5883482550697984 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7fc19708641c Crash State:...

sudoers:fuzz_logsrvd_conf: Heap-buffer-overflow in libssl.soNUMBER

Detailed Report: https://oss-fuzz.com/testcase?key=6445963740315648 Project: sudoers Fuzzing Engine: libFuzzer Fuzz Target: fuzzlogsrvdconf Job Type: libfuzzerasansudoers Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000005619 Crash State: libssl.soNUMBER...

gitea:fuzz_markdown_render_raw: Crash in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5871395673866240 Project: gitea Fuzzing Engine: libFuzzer Fuzz Target: fuzzmarkdownrenderraw Job Type: libfuzzerasangitea Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000001aeabbc Crash State: pthreadcreate cgotrypthreadcreate...

openyurt:fuzz_yurtappdaemon_controller: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4606113399570432 Project: openyurt Fuzzing Engine: libFuzzer Fuzz Target: fuzzyurtappdaemoncontroller Job Type: libfuzzerasanopenyurt Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-underflow in gs_type1_piece_codes

Detailed Report: https://oss-fuzz.com/testcase?key=6048427783356416 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7fff06cf82dc Crash State:...

fluent-bit:flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5848956248129536 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-filterstdoutfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer:...

tomcat:ConnectorSendFileFuzzer: Security exception in ConnectorSendFileFuzzer.fuzzerTestOneInput

Project: https://github.com/apache/tomcat.git Detailed Report: https://oss-fuzz.com/testcase?key=6223303768932352 Project: tomcat Fuzzing Engine: libFuzzer Fuzz Target: ConnectorSendFileFuzzer Job Type: libfuzzerasantomcat Platform Id: linux Crash Type: Security exception Crash Address: Crash...

cryptofuzz:cryptofuzz-boringssl: Stack-buffer-overflow in wc_Shake256_Final

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5623509891547136 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Stack-buffer-overflow WRITE...

ngolo-fuzzing:fuzz_ng_math_big: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6424608265338880 Project: ngolo-fuzzing Fuzzing Engine: libFuzzer Fuzz Target: fuzzngmathbig Job Type: libfuzzerasanngolo-fuzzing Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer:...