firestore:serializer_fuzzer: Crash in pb_release_single_field

Detailed Report: https://oss-fuzz.com/testcase?key=5650431242141696 Project: firestore Fuzzing Engine: libFuzzer Fuzz Target: serializerfuzzer Job Type: libfuzzerasanfirestore Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000000187eef Crash State: pbreleasesinglefield pbrelease...

neomutt:address-fuzz: Heap-use-after-free in mutt_str_strdup

Project: https://github.com/neomutt/neomutt.git Detailed Report: https://oss-fuzz.com/testcase?key=5918370260320256 Project: neomutt Fuzzing Engine: libFuzzer Fuzz Target: address-fuzz Job Type: libfuzzerasanneomutt Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

libheif:file-fuzzer: Heap-use-after-free in void apply_sao_internal<unsigned short>

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5649801827319808 Project: libheif Fuzzing Engine: afl Fuzz Target: file-fuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x613000010a7d Cra...

libheif:file-fuzzer: Heap-buffer-overflow in ff_hevc_put_hevc_epel_pixels_8_sse

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=4818096369434624 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

mysql-server:fuzz_real_query: Crash in cli_read_rows

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=5723949975732224 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzrealquery Job Type: libfuzzerubsanmysql-server Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

wireshark:fuzzshark_ip: Global-buffer-overflow in dissect_snmp_PDUs

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=5694793825124352 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkip Job Type: aflasanwireshark Platform Id: linux Crash Type:...

imagemagick:encoder_webp_fuzzer: Heap-buffer-overflow in IsWEBPImageLossless

Detailed Report: https://oss-fuzz.com/testcase?key=5717908701577216 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderwebpfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0xf5001b4e Crash State:...

matio:matio_fuzzer: Heap-buffer-overflow in H5O_fill_new_shared_decode

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5672244609286144 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61500004fac8 Crash State:...

matio:matio_fuzzer: Heap-buffer-overflow in H5O_attr_shared_decode

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5690540230443008 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x615000000c60 Crash State:...

FreeBSD : nexus2-oss -- Multiple vulerabilities (b2f9573a-008c-11ea-9801-10c37b4ac2ea)

Sonatype reports : Several RCE vulnerabilities have been found and corrected in 2.14.15 : CVE-2019-16530: An attacker with elevated privileges can upload a specially crafted file. That file can contain commands that will be executed on the system, with the same privileges as the user running the...

poppler:pdf_fuzzer: Use-of-uninitialized-value in JBIG2HuffmanDecoder::buildTable

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5671762633424896 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

xvid:fuzzer-decoder: Use-of-uninitialized-value in BitstreamReadHeaders

Detailed Report: https://oss-fuzz.com/testcase?key=5670159510929408 Project: xvid Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decoder Job Type: libfuzzermsanxvid Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: BitstreamReadHeaders decoderdecode xviddecore...

ffmpeg:ffmpeg_AV_CODEC_ID_DVVIDEO_fuzzer: Global-buffer-overflow in dv100_idct_put_last_row_field_luma

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6254863113781248 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDDVVIDEOfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash...

xvid:fuzzer-decoder: Stack-buffer-overflow in BitstreamReadHeaders

Detailed Report: https://oss-fuzz.com/testcase?key=5747834934001664 Project: xvid Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decoder Job Type: libfuzzerasanxvid Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ffc9e066120 Crash State: BitstreamReadHeaders decoderdeco...

imagemagick:rotate_fuzzer: Index-out-of-bounds in LibRaw::scale_colors_loop

Detailed Report: https://oss-fuzz.com/testcase?key=5131755925536768 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: rotatefuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: LibRaw::scalecolorsloop LibRaw::scalecolo...

ndpi:fuzz_process_packet: Heap-buffer-overflow in getNameLength

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5650190824636416 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60700000051e...

mruby:mruby_fuzzer: Crash in str_decref

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6321459584827392 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000002a86 Crash State:...

openh264:decoder_fuzzer: Heap-use-after-free in WelsDec::CWelsDecoder::SetOption

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5693903391162368 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasani386openh264 Platform Id: linux Crash Type: Heap-use-after-free WRITE 1 Crash Address:...

openh264:decoder_fuzzer: Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReleaseBufferedReadyPicture

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5169716859764736 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzermsanopenh264 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

openh264:decoder_fuzzer: Heap-use-after-free in WelsDec::SetUnRef

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5746521706594304 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free WRITE 1 Crash Address:...