radare2/ia_fuzz: Crash in r_read_le16

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5759528075788288 Project: radare2 Fuzzer: aflradare2iafuzz Fuzz target binary: iafuzz Job Type: aflasanradare2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60cf80000a20 Crash State:...

graphicsmagick/coder_WPG_fuzzer: Use-of-uninitialized-value in BlendCompositePixel

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5736103441596416 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderWPGfuzzer Fuzz target binary: coderWPGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

harfbuzz/hb-subset-fuzzer: Stack-use-after-return in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5669437462544384 Project: harfbuzz Fuzzer: aflharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Stack-use-after-return READ 1...

harfbuzz/hb-subset-fuzzer: Heap-buffer-overflow in OT::LigatureSubstFormat1::closure

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5651059347816448 Project: harfbuzz Fuzzer: aflharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Cra...

imagemagick/encoder_label_fuzzer: Use-of-uninitialized-value in GetNextUTFCode

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5653291170529280 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

graphicsmagick/coder_MVG_fuzzer: Stack-buffer-overflow in TranslateTextEx

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5158172004712448 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

radare2/ia_fuzz: Crash in r_bin_mdmp_init_directory_entry

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5730103170957312 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61910000fbff...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in jbig2_decode_generic_template3

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5645021143891968 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

poppler/pdf_fuzzer: Use-of-uninitialized-value in clip01

Detailed report: https://oss-fuzz.com/testcase?key=5647387350532096 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clip01...

envoy/header_map_impl_fuzz_test: Heap-buffer-overflow in Envoy::StringUtil::itoa

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5689833624698880 Project: envoy Fuzzer: libFuzzerenvoyheadermapimplfuzztest Fuzz target binary: headermapimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-buffer-overflo...

zlib-ng/compress_fuzzer: Crash in quick_send_bits

Project: https://github.com/sebpop/zlib-ng.git https://github.com/zlib-ng/zlib-ng.git Detailed report: https://oss-fuzz.com/testcase?key=5694515942785024 Project: zlib-ng Fuzzer: libFuzzerzlib-ngcompressfuzzer Fuzz target binary: compressfuzzer Job Type: libfuzzermsanzlib-ng Platform Id: linux...

ecc-diff-fuzzer/fuzz_ec: Unknown signal in __gmpn_sqr_basecase

Detailed report: https://oss-fuzz.com/testcase?key=5661474291187712 Project: ecc-diff-fuzzer Fuzzer: libFuzzerecc-diff-fuzzerfuzzec Fuzz target binary: fuzzec Job Type: libfuzzerubsanecc-diff-fuzzer Platform Id: linux Crash Type: Unknown signal Crash Address: 0x000000b0bc50 Crash State:...

skia/animated_image_decode: Heap-buffer-overflow in swizzle_rgba16_to_bgra_premul

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5728303109898240 Project: skia Fuzzer: aflskiaanimatedimagedecode Fuzz target binary: animatedimagedecode Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

poppler/pdf_fuzzer: Use-of-uninitialized-value in SplashOutputDev::alphaImageSrc

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5769842689835008 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

zlib-ng/compress_fuzzer: Negative-size-param in compress_fuzzer.c

Project: https://github.com/sebpop/zlib-ng.git https://github.com/zlib-ng/zlib-ng.git Detailed report: https://oss-fuzz.com/testcase?key=4634639783165952 Project: zlib-ng Fuzzer: libFuzzerzlib-ngcompressfuzzer Fuzz target binary: compressfuzzer Job Type: libfuzzerasanzlib-ng Platform Id: linux...

Fedora 27 : libgit2 (2018-ca483ae3e0)

This is a security release fixing out-of-bounds reads when processing smart-protocol 'ng' packets. When parsing an 'ng' packet, we keep track of both the current position as well as the remaining length of the packet itself. But instead of taking care not to exceed the length, we pass the current...

openvswitch/ofp_print_fuzzer: Heap-use-after-free in ofpact_finish_CLONE

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5722747668791296 Project: openvswitch Fuzzer: libFuzzeropenvswitchofpprintfuzzer Fuzz target binary: ofpprintfuzzer Job Type: libfuzzerasanopenvswitch Platform Id: linux Crash Type:...

mupdf/pdf_fuzzer: Heap-use-after-free in pdf_copy_pattern_gstate

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5748743025459200 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address: 0x62d0000136c8 Cras...

mupdf/pdf_fuzzer: Stack-buffer-underflow in ps_index

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=6241403096006656 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Stack-buffer-underflow READ 8 Crash Address: 0x7fde52864418...

openvswitch/ofp_print_fuzzer: Heap-double-free in ofputil_pull_ofp15_group_mod

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5677588436484096 Project: openvswitch Fuzzer: aflopenvswitchofpprintfuzzer Fuzz target binary: ofpprintfuzzer Job Type: aflasanopenvswitch Platform Id: linux Crash Type: Heap-double-free Crash...