libxml2:xml: Heap-use-after-free in xmlNodeDumpOutputInternal

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4837552128000000 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60400000036...

libheif:file-fuzzer: Heap-buffer-overflow in Op_RGB_to_YCbCr<unsigned char>::convert_colorspace

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5134590779064320 Project: libheif Fuzzing Engine: afl Fuzz Target: file-fuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x62100001b50f Cras...

envoy:network_writefilter_fuzz_test: Heap-buffer-overflow in std::__1::char_traits<char>::length

Detailed Report: https://oss-fuzz.com/testcase?key=4685640437071872 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: networkwritefilterfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x621000b0c900 Crash State:...

golang:fuzzer-gzip: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5709295661088768 Project: golang Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-gzip Job Type: libfuzzerasangolang Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in asepcos_parse_sec_attr

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5179173686214656 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

sleuthkit:sleuthkit_fls_iso9660_fuzzer: Stack-buffer-overflow in parse_susp

Detailed Report: https://oss-fuzz.com/testcase?key=5740954167017472 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsiso9660fuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ffc279b0520 Crash State: parsesusp...

libxml2:xml: Heap-use-after-free in xmlXIncludeIncludeNode

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=6261568594247680 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60c000000a0...

OSV-2020-1613 Segv on unknown address in std::__1::deque<std::__1::deque<boost::variant<libetonyek::MoveTo, libetonyek::L

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24858 Crash type: Segv on unknown address Crash state: std::1::dequestd::1::dequeboost::variantlibetonyek::MoveTo, libetonyek::L libetonyek::IWORKPath::appendCCurveTo libetonyek::IWAParser::parsePath...

sleuthkit:sleuthkit_mmls_gpt_fuzzer: Index-out-of-bounds in tsk_img_read

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6482187290148864 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitmmlsgptfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: Index-out-of-bounds Crash...

ffmpeg:ffmpeg_BSF_HEVC_METADATA_fuzzer: Index-out-of-bounds in cbs_h265_read_slice_segment_header

Detailed Report: https://oss-fuzz.com/testcase?key=6261760693370880 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFHEVCMETADATAfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: cbsh265readslicesegmentheader...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Heap-buffer-overflow in ntfs_dinode_lookup

Detailed Report: https://oss-fuzz.com/testcase?key=6289649593745408 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsntfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x615000000a00 Crash State:...

sleuthkit:sleuthkit_fls_hfs_fuzzer: Heap-buffer-overflow in hfs_cat_traverse

Detailed Report: https://oss-fuzz.com/testcase?key=6261381394071552 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflshfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61e000000a8a Crash State: hfscattraverse...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Heap-buffer-overflow in ntfs_make_data_run

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6254140750299136 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsntfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

sleuthkit:sleuthkit_fls_fat_fuzzer: Strncpy-param-overlap in tsk_fs_name_copy

Detailed Report: https://oss-fuzz.com/testcase?key=5764896327991296 Project: sleuthkit Fuzzing Engine: honggfuzz Fuzz Target: sleuthkitflsfatfuzzer Job Type: honggfuzzasansleuthkit Platform Id: linux Crash Type: Strncpy-param-overlap Crash Address: Crash State: tskfsnamecopy tskfsdirfindorphans...

minify:minify-number-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5100256682049536 Project: minify Fuzzing Engine: libFuzzer Fuzz Target: minify-number-fuzzer Job Type: libfuzzerasanminify Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000406ed0c Crash State: NULL Sanitizer: address ASAN...

skia:sksl2pipeline: Use-of-uninitialized-value in std::__1::__hash_iterator<std::__1::__hash_node<int, void*>*> std::__1::__hash_t

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=4803439729836032 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2pipeline Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

arrow:arrow-ipc-stream-fuzz: Negative-size-param in arrow::IsEqualPrimitive

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6201516059525120 Project: arrow Fuzzing Engine: honggfuzz Fuzz Target: arrow-ipc-stream-fuzz Job Type: honggfuzzasanarrow Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

OSV-2020-1611 Heap-buffer-overflow in yaml_emitter_emit_flow_mapping_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24869 Crash type: Heap-buffer-overflow READ 4 Crash state: yamlemitteremitflowmappingkey yamlemitterstatemachine yamlemitteremit...

OSV-2020-1610 Segv on unknown address in Imf_2_5::hufUncompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24854 Crash type: Segv on unknown address Crash state: Imf25::hufUncompress Imf25::DwaCompressor::uncompress Imf25::DwaCompressor::uncompress...

OSV-2020-1606 UNKNOWN READ in hb_set_digest_lowest_bits_t<unsigned long, 4u>::may_have

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24842 Crash type: UNKNOWN READ Crash state: hbsetdigestlowestbitst::mayhave hbsetdigestcombinert, hbset OT::hbotlayoutlookupacceleratort::mayhave...