yara:macho_fuzzer: Heap-buffer-overflow in macho_is_32

Detailed Report: https://oss-fuzz.com/testcase?key=5708023786635264 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: machofuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x622000002e03 Crash State: machois32 machoparsefile...

OSV-2020-1645 Use-of-uninitialized-value in std::__1::char_traits<char>::length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25076 Crash type: Use-of-uninitialized-value Crash state: std::1::chartraits::length std::1::basicstring, std::1::allocatorch Magick::formatExceptionMessage...

OSV-2020-1644 Segv on unknown address in clang::Sema::PushDeclContext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25059 Crash type: Segv on unknown address Crash state: clang::Sema::PushDeclContext clang::Sema::ActOnStartDelayedMemberDeclarations clang::Parser::ParseLexedPragmas...

OSV-2020-1643 Heap-use-after-free in UA_NodeMap_delete

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25068 Crash type: Heap-use-after-free READ 4 Crash state: UANodeMapdelete UAServernew fuzzbinarymessage.cc...

leptonica:pix4_fuzzer: Use-of-uninitialized-value in pixGetCmapHistogramInRect

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=4713657823657984 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: pix4fuzzer Job Type: libfuzzermsanleptonica Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

c-blosc2:decompress_fuzzer: Heap-buffer-overflow in tinfl_decompress

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5120916286341120 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

llvm:clang-fuzzer: Use-of-uninitialized-value in clang::Parser::ParseCastExpression

Detailed Report: https://oss-fuzz.com/testcase?key=5079246079524864 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::Parser::ParseCastExpression...

libxml2:xml: Use-of-uninitialized-value in xmlXIncludeIncludeNode

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=6544709487689728 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

assimp:assimp_fuzzer: Crash in aiTexture::~aiTexture

Detailed Report: https://oss-fuzz.com/testcase?key=4875566380220416 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff7 Crash State: aiTexture::aiTexture...

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in RDKit::SubstanceGroup::includesAtom

Detailed Report: https://oss-fuzz.com/testcase?key=6204566230794240 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: RDKit::SubstanceGroup::includesAtom...

OSV-2020-1641 Use-of-uninitialized-value in us_internal_dispatch_ready_poll

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25057 Crash type: Use-of-uninitialized-value Crash state: usinternaldispatchreadypoll uslooprun uWS::TemplatedApp::run...

imagemagick:ping_ptif_fuzzer: Use-of-uninitialized-value in std::__1::char_traits<char>::length

Detailed Report: https://oss-fuzz.com/testcase?key=6584683486511104 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingptiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::chartraits::length...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::PushDeclContext

Detailed Report: https://oss-fuzz.com/testcase?key=5760004104388608 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::PushDeclContext...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : QEMU vulnerabilities (USN-4467-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4467-1 advisory. Ziming Zhang and VictorV discovered that the QEMU SLiRP networking implementation incorrectly handled replying to certain ICMP ec...

libarchive:libarchive_fuzzer: Crash in lzma_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5182080345178112 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x632000030000 Crash State: lzmadecode decodebuffer...

open62541:fuzz_binary_decode: Use-of-uninitialized-value in removeFromMap

Detailed Report: https://oss-fuzz.com/testcase?key=5748529321213952 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzbinarydecode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: removeFromMap UAmemoryManagerfree...

open62541:fuzz_json_decode_encode: Use-of-uninitialized-value in jsmn_parse

Detailed Report: https://oss-fuzz.com/testcase?key=4893066453057536 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecodeencode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jsmnparse UAdecodeJson...

open62541:fuzz_binary_decode: Use-of-uninitialized-value in UA_encodeBinary

Detailed Report: https://oss-fuzz.com/testcase?key=6325617770102784 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzbinarydecode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: UAencodeBinary fuzzbinarydecode.cc...

fasthttp:fuzz_request: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5640952463753216 Project: fasthttp Fuzzing Engine: libFuzzer Fuzz Target: fuzzrequest Job Type: libfuzzerasanfasthttp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000268b78c Crash State: NULL Sanitizer: address ASAN Recommended...

sleuthkit:sleuthkit_fls_ext_fuzzer: Index-out-of-bounds in tsk_img_read

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5693864252538880 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsextfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: Index-out-of-bounds Crash Addres...