glib:fuzz_uri_parse: Heap-buffer-overflow in g_string_insert_len

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=4902921962782720 Project: glib Fuzzing Engine: afl Fuzz Target: fuzzuriparse Job Type: aflasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address: 0x602000000134 Crash...

glib:fuzz_uri_parse_params: Heap-buffer-overflow in uri_decoder

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=4815738421641216 Project: glib Fuzzing Engine: afl Fuzz Target: fuzzuriparseparams Job Type: aflasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000d2 Cra...

libfdk-aac:aacDecoder_DecodeFrame: Stack-buffer-overflow in Pred_lt4

Detailed Report: https://oss-fuzz.com/testcase?key=5697795251240960 Project: libfdk-aac Fuzzing Engine: libFuzzer Fuzz Target: aacDecoderDecodeFrame Job Type: libfuzzerasani386libfdk-aac Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0xfffcb3d4 Crash State: Predlt4...

opensc:fuzz_pkcs15_reader: Memcpy-param-overlap in authentic_set_current_files

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5161383229652992 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

augeas:augeas_api_fuzzer: Crash in eval_expr

Detailed Report: https://oss-fuzz.com/testcase?key=5971328632094720 Project: augeas Fuzzing Engine: libFuzzer Fuzz Target: augeasapifuzzer Job Type: libfuzzerasanaugeas Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60340000aa1c Crash State: evalexpr evalbinary evalexpr Sanitizer:...

binutils:fuzz_bfd: Use-of-uninitialized-value in _bfd_pei_slurp_codeview_record

Detailed Report: https://oss-fuzz.com/testcase?key=5941009199661056 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzbfd Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bfdpeislurpcodeviewrecord pebfdreadbuildid...

jbig2dec:jbig2_fuzzer: Use-of-uninitialized-value in jbig2_arith_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5970349664763904 Project: jbig2dec Fuzzing Engine: libFuzzer Fuzz Target: jbig2fuzzer Job Type: libfuzzermsanjbig2dec Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jbig2arithdecode jbig2decoderefinementTPGR...

leptonica:dewarp_fuzzer: Heap-buffer-overflow in rasteropGeneralLow

Detailed Report: https://oss-fuzz.com/testcase?key=5081162166042624 Project: leptonica Fuzzing Engine: afl Fuzz Target: dewarpfuzzer Job Type: aflasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000002c0 Crash State: rasteropGeneralLow rasteropLow...

imagemagick:ping_mvg_fuzzer: Heap-buffer-overflow in DrawPrimitive

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5681725698211840 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

kubernetes:json_FuzzStrictDecode: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5729550645592064 Project: kubernetes Fuzzing Engine: libFuzzer Fuzz Target: jsonFuzzStrictDecode Job Type: libfuzzerasankubernetes Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000037e3e637 Crash State: NULL Sanitizer: address ASAN...

c-blosc2:decompress_fuzzer: Use-of-uninitialized-value in ZSTD_createDDict_advanced

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5557894660751360 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

hermes:fuzzer-jsi-entry: Heap-buffer-overflow in hermes::parser::JSLexer::consumeBracedCodePoint

Project: https://github.com/facebook/hermes.git Detailed Report: https://oss-fuzz.com/testcase?key=5068829519773696 Project: hermes Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-jsi-entry Job Type: libfuzzerasanhermes Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

haproxy:fuzz_cfg_parser: Heap-buffer-overflow in memvprintf

Project: https://github.com/haproxy/haproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=4899181834797056 Project: haproxy Fuzzing Engine: afl Fuzz Target: fuzzcfgparser Job Type: aflasanhaproxy Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x619000000510 Cra...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::copy_bayer

Detailed Report: https://oss-fuzz.com/testcase?key=5679559776403456 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::copybayer...

gdal:lvbag_fuzzer: Heap-buffer-overflow in OGR_RawField_IsUnset

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5186645136769024 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: lvbagfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000038b0 Cras...

skia:image_filter_deserialize_width: Use-of-uninitialized-value in SkVerticesPriv::Decode

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5193804545261568 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: imagefilterdeserializewidth Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

rdkit:mol_deserialization_fuzzer: Crash in RDKit::RingInfo::addRing

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4573206878093312 Project: rdkit Fuzzing Engine: afl Fuzz Target: moldeserializationfuzzer Job Type: aflasanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fbdce7bfd70 Crash State:...

ipfs:ipfs_ds_badger2: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4913800225751040 Project: ipfs Fuzzing Engine: libFuzzer Fuzz Target: ipfsdsbadger2 Job Type: libfuzzerasanipfs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000201320 Crash State: NULL Sanitizer: address ASAN Recommended Securi...

USN-4360-1: json-c vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that json-c incorrectly handled certain JSON files. An attacker could possibly use this issue to execute arbitrary code. CVEs contained in...

USN-4360-2: json-c regression | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a memory leak in some scenarios. This update reverts the security fix pending further investigation. We...