yara/dotnet_fuzzer: Heap-buffer-overflow in yr_object_set_string

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5077612772196352 Project: yara Fuzzer: libFuzzeryaradotnetfuzzer Fuzz target binary: dotnetfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 11 Crash Addres...

karchive/karchive_fuzzer: Use-of-uninitialized-value in QByteArray::operator=

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5725791050006528 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

harfbuzz/hb-subset-fuzzer: Stack-use-after-return in bool OT::Coverage::serialize<hb_map_iter_t<hb_map_iter_t<hb_filter_iter_t<OT::Co

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5634197349203968 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type:...

sqlite3/ossfuzz: Use-of-uninitialized-value in sqlite3VdbeMemValidStrRep

Detailed report: https://oss-fuzz.com/testcase?key=5678870243573760 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sqlite3VdbeMemValidStrRep...

gdal/mrf_fuzzer: Heap-buffer-overflow in ExpandPacked8ToByte1

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5645695916179456 Project: gdal Fuzzer: aflgdalmrffuzzer Fuzz target binary: mrffuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7f4b21b43800 Crash...

radare2/ia_fuzz: Negative-size-param in r_buf_read

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5669094898008064 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash Stat...

perfetto/trace_processor_fuzzer: Crash in perfetto::trace_processor::fuchsia_trace_utils::ReadTimestamp

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed report: https://oss-fuzz.com/testcase?key=5197616339484672 Project: perfetto Fuzzer: libFuzzerperfettotraceprocessorfuzzer Fuzz target binary: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Cra...

libical/libical_fuzzer: Use-of-uninitialized-value in icalcomponent_free

Detailed report: https://oss-fuzz.com/testcase?key=5758289456922624 Project: libical Fuzzer: libFuzzerlibicalfuzzer Fuzz target binary: libicalfuzzer Job Type: libfuzzermsanlibical Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: icalcomponentfree icalparserfr...

libical/libical_fuzzer: Use-of-uninitialized-value in pvl_pop

Detailed report: https://oss-fuzz.com/testcase?key=5739308486492160 Project: libical Fuzzer: libFuzzerlibicalfuzzer Fuzz target binary: libicalfuzzer Job Type: libfuzzermsanlibical Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pvlpop icalcomponentfree...

perfetto/trace_processor_fuzzer: Heap-buffer-overflow in perfetto::trace_processor::FuchsiaTraceParser::ParseTracePacket

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed report: https://oss-fuzz.com/testcase?key=5653558021586944 Project: perfetto Fuzzer: libFuzzerperfettotraceprocessorfuzzer Fuzz target binary: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Cra...

mruby/mruby_fuzzer: Use-of-uninitialized-value in time_update_datetime

Project: https://github.com/mruby/mruby.git Detailed report: https://oss-fuzz.com/testcase?key=5642873585795072 Project: mruby Fuzzer: libFuzzermrubyfuzzer Fuzz target binary: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

CVE-2019-3787: UAA defaults email address to an insecure domain | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions UAA Release OSS All versions prior to v73.0.0 Description Cloud Foundry UAA, versions prior to 73.0.0, falls back to appending “unknown.org” to a user’s email address when one is not provided and the user...

libical/libical_fuzzer: Use-of-uninitialized-value in parser_get_next_char

Project: https://github.com/libical/libical.git Detailed report: https://oss-fuzz.com/testcase?key=5695048311635968 Project: libical Fuzzer: libFuzzerlibicalfuzzer Fuzz target binary: libicalfuzzer Job Type: libfuzzermsanlibical Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libical/libical_fuzzer: Use-of-uninitialized-value in icalcomponent_remove_component

Project: https://github.com/libical/libical.git Detailed report: https://oss-fuzz.com/testcase?key=5677236176289792 Project: libical Fuzzer: libFuzzerlibicalfuzzer Fuzz target binary: libicalfuzzer Job Type: libfuzzermsanlibical Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

keystone/fuzz_asm_sparc64be: Crash in llvm_ks::SmallVectorBase::grow_pod

Detailed report: https://oss-fuzz.com/testcase?key=5688354168897536 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmsparc64be Fuzz target binary: fuzzasmsparc64be Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7180004447e0 Crash State:...

imagemagick/encoder_ttf_fuzzer: Use-of-uninitialized-value in TT_Process_Simple_Glyph

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5769270614556672 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderttffuzzer Fuzz target binary: encoderttffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

systemd/fuzz-varlink: Heap-buffer-overflow in varlink_enqueue_json

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5692571826782208 Project: systemd Fuzzer: libFuzzersystemdfuzz-varlink Fuzz target binary: fuzz-varlink Job Type: libfuzzerasansystemd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

karchive/karchive_fuzzer: Heap-buffer-overflow in KAr::openArchive

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5721807937601536 Project: karchive Fuzzer: aflkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: aflasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in TT_Process_Simple_Glyph

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5689090034368512 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

freetype2/ftfuzzer: Crash in TT_Process_Simple_Glyph

Detailed report: https://oss-fuzz.com/testcase?key=5666646934421504 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerubsanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fff00000009 Crash State: TTProcessSimpleGlyph...