openthread: Stack-buffer-overflow in ot::MeshCoP::CommissionerSessionIdTlv::GetCommissionerSessionId

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=4750024565063680 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthreaduntrusted Platform Id: linux Crash Type:...

librawspeed: Crash in rawspeed::RawImageData::transferBadPixelsToMap

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5981560719278080 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-DngDecoder Fuzz target binary: TiffDecoderFuzzer-DngDecoder Job Type: libfuzzerasanlibrawspeeduntrusted...

tinyxml2: Use-of-uninitialized-value in tinyxml2::StrPair::SetStr

Project: https://github.com/leethomason/tinyxml2.git Detailed report: https://oss-fuzz.com/testcase?key=5185500560228352 Project: tinyxml2 Fuzzer: libFuzzertinyxml2xmltest Fuzz target binary: xmltest Job Type: libfuzzermsantinyxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

openjpeg: Heap-buffer-overflow in opj_mct_decode_real

Project: https://github.com/uclouvain/openjpeg.git https://github.com/uclouvain/openjpeg-data.git Detailed report: https://oss-fuzz.com/testcase?key=5317114783072256 Project: openjpeg Fuzzer: libFuzzeropenjpegopjdecompressfuzzer Fuzz target binary: opjdecompressfuzzer Job Type:...

libreoffice: Heap-use-after-free in SwPaM::Start

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6096852086685696 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerasanlibreofficeuntrusted Platform Id: linux Crash Type:...

gdal: Heap-buffer-overflow in rdieee

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6389879183245312 Project: gdal Fuzzer: libFuzzergdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x60300000ce60 Crash State: rdieee...

librawspeed: Use-after-poison in rawspeed::NefDecoder::DecodeNikonSNef

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6315707312635904 Project: librawspeed Fuzzer: afllibrawspeedTiffDecoderFuzzer-NefDecoder Fuzz target binary: TiffDecoderFuzzer-NefDecoder Job Type: aflasanlibrawspeed Platform Id: linux Crash...

librawspeed: Heap-buffer-overflow in rawspeed::RawImageData::transferBadPixelsToMap

Detailed report: https://oss-fuzz.com/testcase?key=4950359824924672 Project: librawspeed Fuzzer: afllibrawspeedTiffDecoderFuzzer-Rw2Decoder Fuzz target binary: TiffDecoderFuzzer-Rw2Decoder Job Type: aflasanlibrawspeeduntrusted Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

librawspeed: Use-after-poison in rawspeed::SamsungV0Decompressor::decompressStrip

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5436374968696832 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-SrwDecoder Fuzz target binary: TiffDecoderFuzzer-SrwDecoder Job Type: libfuzzerasanlibrawspeed Platform Id:...

gdal: Heap-buffer-overflow in memBitRead

Detailed report: https://oss-fuzz.com/testcase?key=4659886891728896 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdaluntrusted Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60e00001775c Crash State: memBitRead...

expat: Use-of-uninitialized-value in lookup

Project: https://github.com/libexpat/libexpat.git Detailed report: https://oss-fuzz.com/testcase?key=4629672333672448 Project: expat Fuzzer: libFuzzerexpatparseUTF8fuzzer Fuzz target binary: parseUTF8fuzzer Job Type: libfuzzermsanexpatuntrusted Platform Id: linux Crash Type:...

librawspeed: Heap-buffer-overflow in rawspeed::RawImageData::transferBadPixelsToMap

Detailed report: https://oss-fuzz.com/testcase?key=4689297217159168 Project: librawspeed Fuzzer: afllibrawspeedTiffDecoderFuzzer-Rw2Decoder Fuzz target binary: TiffDecoderFuzzer-Rw2Decoder Job Type: aflasanlibrawspeeduntrusted Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

llvm: Crash in llvm::DataExtractor::getUnsigned

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5172493117554688 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: UNKNOWN READ Crash...

llvm: Heap-buffer-overflow in checkDylibCommand

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6218604343197696 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

llvm: Heap-buffer-overflow in llvm::identify_magic

Detailed report: https://oss-fuzz.com/testcase?key=5914710174072832 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvmuntrusted Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60300000011c Cras...

llvm: Heap-buffer-overflow in llvm::StringMapImpl::LookupBucketFor

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5725600348110848 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

llvm: Heap-buffer-overflow in llvm::object::WasmObjectFile::parseCustomSection

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=4529026217541632 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

librawspeed: Use-after-poison in rawspeed::HasselbladDecompressor::decodeScan

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5764147948027904 Project: librawspeed Fuzzer: afllibrawspeedTiffDecoderFuzzer-ThreefrDecoder Fuzz target binary: TiffDecoderFuzzer-ThreefrDecoder Job Type: aflasanlibrawspeed Platform Id: lin...

libreoffice: Global-buffer-overflow in ImplUnicodeToDBCS

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6290236680175616 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

Vulnerability in OpenSSL - Malformed X.509 IPAddressFamily could cause OOB read

While parsing an IPAdressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. Found by Google OSS-Fuzz...