OSV-2020-257 Heap-use-after-free in ihevcd_jobq_lock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17553 Crash type: Heap-use-after-free READ 4 Crash state: ihevcdjobqlock ihevcdjobqyield ihevcdjobqdequeue...

c-blosc:compress_fuzzer: Heap-buffer-overflow in blosclz_compress

Project: https://github.com/Blosc/c-blosc.git Detailed Report: https://oss-fuzz.com/testcase?key=5869677174849536 Project: c-blosc Fuzzing Engine: libFuzzer Fuzz Target: compressfuzzer Job Type: libfuzzerasanc-blosc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

opensc:fuzz_pkcs15_reader: Memcpy-param-overlap in authentic_set_current_files

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5161383229652992 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

llvm:clang-objc-fuzzer: Segv on unknown address in clang::Parser::parseObjCTypeArgsAndProtocolQualifiers

Detailed Report: https://oss-fuzz.com/testcase?key=5708079416213504 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

augeas:augeas_api_fuzzer: Crash in eval_expr

Detailed Report: https://oss-fuzz.com/testcase?key=5971328632094720 Project: augeas Fuzzing Engine: libFuzzer Fuzz Target: augeasapifuzzer Job Type: libfuzzerasanaugeas Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60340000aa1c Crash State: evalexpr evalbinary evalexpr Sanitizer:...

imagemagick:ping_dng_fuzzer: Global-buffer-overflow in LibRaw::parseCanonMakernotes

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5655361509130240 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Cra...

imagemagick:encoder_dng_fuzzer: Global-buffer-overflow in LibRaw::parseSigmaMakernote

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5693021307011072 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderdngfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Global-buffer-overflow READ 4...

libxml2:html: Heap-use-after-free in xmlParserPrintFileContextInternal

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4858748979118080 Project: libxml2 Fuzzing Engine: honggfuzz Fuzz Target: html Job Type: honggfuzzasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6210000079...

hoextdown:hoedown_fuzzer: Heap-buffer-overflow in is_codefence

Project: https://github.com/kjdev/hoextdown.git Detailed Report: https://oss-fuzz.com/testcase?key=4826354641272832 Project: hoextdown Fuzzing Engine: afl Fuzz Target: hoedownfuzzer Job Type: aflasanhoextdown Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6060000003c0...

jbig2dec:jbig2_fuzzer: Use-of-uninitialized-value in jbig2_arith_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5970349664763904 Project: jbig2dec Fuzzing Engine: libFuzzer Fuzz Target: jbig2fuzzer Job Type: libfuzzermsanjbig2dec Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jbig2arithdecode jbig2decoderefinementTPGR...

leptonica:dewarp_fuzzer: Heap-buffer-overflow in rasteropGeneralLow

Detailed Report: https://oss-fuzz.com/testcase?key=5081162166042624 Project: leptonica Fuzzing Engine: afl Fuzz Target: dewarpfuzzer Job Type: aflasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000002c0 Crash State: rasteropGeneralLow rasteropLow...

imagemagick:ping_mvg_fuzzer: Heap-buffer-overflow in DrawPrimitive

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5681725698211840 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

binutils:fuzz_readelf: Heap-use-after-free in make_qualified_name

Detailed Report: https://oss-fuzz.com/testcase?key=5750482235817984 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzreadelf Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x6020000000b0 Crash State: makequalifiedname...

OSV-2020-256 Global-buffer-overflow in dissect_wassp_sub_tlv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20004 Crash type: Global-buffer-overflow READ 8 Crash state: dissectwasspsubtlv dissectwasspsubtlv dissectwassptlv...

kubernetes:json_FuzzStrictDecode: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5729550645592064 Project: kubernetes Fuzzing Engine: libFuzzer Fuzz Target: jsonFuzzStrictDecode Job Type: libfuzzerasankubernetes Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000037e3e637 Crash State: NULL Sanitizer: address ASAN...

c-blosc2:decompress_fuzzer: Use-of-uninitialized-value in ZSTD_createDDict_advanced

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5557894660751360 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

OSV-2020-255 Heap-buffer-overflow in dname_pkt_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20093 Crash type: Heap-buffer-overflow READ 1 Crash state: dnamepktcopy pktstrictsub scrubnormalize...

OSV-2020-253 Stack-buffer-overflow in mrb_str_len_to_dbl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19902 Crash type: Stack-buffer-overflow WRITE 1 Crash state: mrbstrlentodbl mrbstrlentoinum mrbstrtoi...

OSV-2020-254 Heap-buffer-overflow in pixReadFromTiffStream

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23654 Crash type: Heap-buffer-overflow READ 1 Crash state: pixReadFromTiffStream pixReadMemTiff pixReadMem...

OSV-2020-247 Use-of-uninitialized-value in WavpackDeleteTagItem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20060 Crash type: Use-of-uninitialized-value Crash state: WavpackDeleteTagItem WavpackAppendTagItem fuzzer.cc...