assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::ObjFileParser::getFace

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5761129826222080 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6030000007da Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Heap-buffer-overflow in sao_filter_CTB

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5424984922652672 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

radare2:ia_fuzz: Heap-buffer-overflow in get_symbols_64

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=6703177793142784 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

harfbuzz:hb-shape-fuzzer: Heap-buffer-overflow in void apply_string<GSUBProxy>

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=4919078107611136 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-shape-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6150004ab2...

ostree:fuzz-repo: Crash in _pcre2_is_newline_8

Project: https://github.com/ostreedev/ostree.git Detailed Report: https://oss-fuzz.com/testcase?key=5210475498962944 Project: ostree Fuzzing Engine: libFuzzer Fuzz Target: fuzz-repo Job Type: libfuzzerasanostree Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61c000010000 Crash State...

imagemagick:enhance_fuzzer: Heap-buffer-overflow in GetMagicInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5314106952908800 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: enhancefuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

mysql-server:fuzz_initfile: Heap-use-after-free in Segment::write

Detailed Report: https://oss-fuzz.com/testcase?key=5599629583974400 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6080000135a8 Crash State: Segment::write...

libpcap:fuzz_filter: Stack-buffer-overflow in gen_loadi_internal

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed Report: https://oss-fuzz.com/testcase?key=4965629882400768 Project: libpcap Fuzzing Engine: honggfuzz Fuzz Target: fuzzfilter Job Type: honggfuzzasanlibpcap Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address...

quickjs:fuzz_eval: Heap-buffer-overflow in emit_goto

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=4594530084585472 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzeval Job Type: libfuzzerasanquickjs Platform Id: linux Crash Type:...

libpcap:fuzz_pcap: Heap-buffer-overflow in fixup_pcap_pkthdr

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed Report: https://oss-fuzz.com/testcase?key=5363394118549504 Project: libpcap Fuzzing Engine: libFuzzer Fuzz Target: fuzzpcap Job Type: libfuzzerasanlibpcap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

kubeedge:fuz_read_message_from_tunnel: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6138296127848448 Project: kubeedge Fuzzing Engine: libFuzzer Fuzz Target: fuzreadmessagefromtunnel Job Type: libfuzzerasankubeedge Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x10c000000000 Crash State: NULL Sanitizer: address ASAN...

tint:tint_spirv_tools_spv_writer_fuzzer: Heap-buffer-overflow in spvtools::CFA<spvtools::val::BasicBlock>::CalculateDominators

Detailed Report: https://oss-fuzz.com/testcase?key=6211951092432896 Project: tint Fuzzing Engine: libFuzzer Fuzz Target: tintspirvtoolsspvwriterfuzzer Job Type: libfuzzerasantint Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x606000007260 Crash State:...

ruby:fuzz_ruby_gems: Use-after-poison in /mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_ruby_e5a0a396033f4deba21

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4976436064157696 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzrubygems Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x7faed42c7ba0 Crash...

Uninitialized local variables

Lines of code Vulnerability details Impact Configuration -Check: uninitialized-local -Severity: Medium -Confidence: Medium -Description:Lender.approveaddress,address.i Lender.sol114 is a local variable never initialized.A smart contract with uninitialized local variables may lead to intentional...

libcoap:pdu_parse_fuzzer: Heap-buffer-overflow in coap_split_uri_sub

Project: https://github.com/obgm/libcoap.git Detailed Report: https://oss-fuzz.com/testcase?key=4521572637999104 Project: libcoap Fuzzing Engine: afl Fuzz Target: pduparsefuzzer Job Type: aflasanlibcoap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x612000000a46 Crash...

leptonica:finditalic_fuzzer: Use-of-uninitialized-value in fill_window

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5084378994180096 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: finditalicfuzzer Job Type: libfuzzermsanleptonica Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

imagemagick:encoder_tiff_fuzzer: Heap-buffer-overflow in ImportQuantumPixels

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4948253692526592 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encodertifffuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

AssetLogic's _swapAssetOut can fail on the one step approval

Lines of code Vulnerability details swapAssetOut performs one step approval for an arbitrary assetIn before calling pool's swapExactOut. As ERC20 that do not allow approval race condition prohibit setting approval to a new positive value when allowance is positive already, this call will fail if...

radare2:ia_fuzz: Heap-buffer-overflow in r_str_utf8_codepoint

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5602210791161856 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

binutils:fuzz_as: Use-of-uninitialized-value in input_file_open

Detailed Report: https://oss-fuzz.com/testcase?key=6322888519581696 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: inputfileopen inputscrubnewfile readasourcefile...