radare2/ia_fuzz: Heap-buffer-overflow in r_core_lines_initcache

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5655993335152640 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

libarchive/libarchive_fuzzer: Heap-use-after-free in Ppmd7_DecodeSymbol

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5754300750364672 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-use-after-free...

systemd/fuzz-varlink: Use-of-uninitialized-value in varlink_write

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5730863070838784 Project: systemd Fuzzer: libFuzzersystemdfuzz-varlink Fuzz target binary: fuzz-varlink Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

karchive/karchive_fuzzer: Use-of-uninitialized-value in QByteArray::endsWith

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5699436728025088 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

harfbuzz/hb-subset-fuzzer: Use-of-uninitialized-value in hb_hashmap_t<hb_serialize_context_t::object_t const*, unsigned int,

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5676773460672512 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type:...

envoy/header_map_impl_fuzz_test: Heap-buffer-overflow in Envoy::Http::HeaderString::setCopy

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5182326490791936 Project: envoy Fuzzer: libFuzzerenvoyheadermapimplfuzztest Fuzz target binary: headermapimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-buffer-overflo...

harfbuzz/hb-subset-fuzzer: Heap-buffer-overflow in OT::UnsizedArrayOf<OT::IntType<unsigned char, 1u> >::copy

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5733203291144192 Project: harfbuzz Fuzzer: aflharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

open62541/fuzz_json_decode_encode: Use-of-uninitialized-value in UA_base64

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5748564526891008 Project: open62541 Fuzzer: libFuzzeropen62541fuzzjsondecodeencode Fuzz target binary: fuzzjsondecodeencode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type:...

open62541/fuzz_json_decode_encode: Heap-buffer-overflow in UA_unbase64

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5207216900014080 Project: open62541 Fuzzer: libFuzzeropen62541fuzzjsondecodeencode Fuzz target binary: fuzzjsondecodeencode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

open62541/fuzz_json_decode: Use-of-uninitialized-value in Variant_decodeJson

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5671796885422080 Project: open62541 Fuzzer: libFuzzeropen62541fuzzjsondecode Fuzz target binary: fuzzjsondecode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type:...

open62541/fuzz_json_decode_encode: Heap-buffer-overflow in searchObjectForKeyRec

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5163330924183552 Project: open62541 Fuzzer: libFuzzeropen62541fuzzjsondecodeencode Fuzz target binary: fuzzjsondecodeencode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

lwan/request_fuzzer: Global-buffer-overflow in parse_http_request

Project: git://github.com/lpereira/lwan Detailed report: https://oss-fuzz.com/testcase?key=5729298679332864 Project: lwan Fuzzer: afllwanrequestfuzzer Fuzz target binary: requestfuzzer Job Type: aflasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x0000011aeb3f...

keystone/fuzz_asm_x86_64: Bad-cast to llvm_ks::X86OperandX86AsmParser::MatchAndEmitATTInstruction in AsmParser::parseStatement

Detailed report: https://oss-fuzz.com/testcase?key=5121855985287168 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmx8664 Fuzz target binary: fuzzasmx8664 Job Type: libfuzzerubsankeystone Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000210d120 Crash State: Bad-cast to...

open62541/fuzz_binary_message: Heap-use-after-free in String_clear

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5749297120804864 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_AGM_fuzzer: Crash in decode_huffman2

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5646451545210880 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAGMfuzzer Fuzz target binary: ffmpegAVCODECIDAGMfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash...

yara/dotnet_fuzzer: Heap-buffer-overflow in yr_object_set_string

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5105966966636544 Project: yara Fuzzer: libFuzzeryaradotnetfuzzer Fuzz target binary: dotnetfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

skia/sksl2spirv: Use-of-uninitialized-value in std::__1::__constrain_hash

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5680592508682240 Project: skia Fuzzer: libFuzzerskiasksl2spirv Fuzz target binary: sksl2spirv Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

tinyxml2/xmltest: Use-of-uninitialized-value in tinyxml2::StrPair::ParseText

Detailed report: https://oss-fuzz.com/testcase?key=5752728054136832 Project: tinyxml2 Fuzzer: libFuzzertinyxml2xmltest Fuzz target binary: xmltest Job Type: libfuzzermsantinyxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: tinyxml2::StrPair::ParseText...

libexif/exif_loader_fuzzer: Heap-buffer-overflow in exif_entry_get_value

Project: https://github.com/libexif/libexif.git Detailed report: https://oss-fuzz.com/testcase?key=5741716067319808 Project: libexif Fuzzer: libFuzzerlibexifexifloaderfuzzer Fuzz target binary: exifloaderfuzzer Job Type: libfuzzerasanlibexif Platform Id: linux Crash Type: Heap-buffer-overflow REA...

Fedora 30 : python-urllib3 (2019-6afaa38e7b)

Fix an issue similar to CVE-2018-20060 where the authorization header was removed only when the case matched. - Fix an issue where the system CA bundle was loaded even when an alternate bundle was explicitly specified https://www.openwall.com/lists/oss-security/2019/04/17/ 3 Full changelog at:...