jbig2dec:jbig2_fuzzer: Use-of-uninitialized-value in jbig2_arith_decode

Project: git://git.ghostscript.com/jbig2dec.git Detailed Report: https://oss-fuzz.com/testcase?key=5658335175245824 Project: jbig2dec Fuzzing Engine: libFuzzer Fuzz Target: jbig2fuzzer Job Type: libfuzzermsanjbig2dec Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

CVE-2019-20446

In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows exponentially...

php:php-fuzz-mbstring: Heap-use-after-free in optimize_nodes

Detailed Report: https://oss-fuzz.com/testcase?key=5167491347382272 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60700000c0a0 Crash State: optimizenodes optimizenodes...

libarchive:libarchive_fuzzer: Heap-buffer-overflow in read_bits_16

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=5135343248736256 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

wabt:wasm2wat_fuzzer: Segv on unknown address in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=5707618381463552 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wasm2watfuzzer Job Type: libfuzzermsanwabt Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

qt:setMarkdown: Heap-use-after-free in QScopedPointer<QObjectData, QScopedPointerDeleter<QObjectData> >::operator->

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5728348359884800 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: setMarkdown Job Type: libfuzzerasanqt Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6020000006d8 Crash State:...

wavpack:fuzzer: Crash in decode_fast

Project: https://github.com/dbry/WavPack.git Detailed Report: https://oss-fuzz.com/testcase?key=5176778677288960 Project: wavpack Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanwavpack Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x72d0001f0000 Crash State:...

USN-4234-2 firefox regressions

USN-4234-1 fixed vulnerabilities in Firefox. The update introduced various minor regressions. This update fixes the problems. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafte...

imagemagick:encoder_dxt1_fuzzer: Use-of-uninitialized-value in PerceptibleReciprocal

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5070329724796928 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdxt1fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

open62541:fuzz_json_decode: Heap-use-after-free in String_clear

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6215715764043776 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address...

imagemagick:encoder_palm_fuzzer: Use-of-uninitialized-value in IsFuzzyEquivalencePixelInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6264774524665856 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpalmfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::ActOnCapScopeReturnStmt

Detailed Report: https://oss-fuzz.com/testcase?key=5675708116631552 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::ActOnCapScopeReturnStmt...

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in void mc_chroma<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=5764648198733824 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x62b00001b63c Crash State: void mcchroma...

imagemagick:encoder_plasma_fuzzer: Use-of-uninitialized-value in RoundToUnity

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5734463269240832 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderplasmafuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

gnutls:gnutls_pkcs12_key_parser_fuzzer: Global-buffer-overflow in _nettle_sec_tabselect

Project: https://gitlab.com/gnutls/gnutls.git Detailed Report: https://oss-fuzz.com/testcase?key=5143428189126656 Project: gnutls Fuzzing Engine: libFuzzer Fuzz Target: gnutlspkcs12keyparserfuzzer Job Type: libfuzzerasangnutls Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash...

qpdf:qpdf_fuzzer: Use-of-uninitialized-value in QPDFTokenizer::isSpace

Detailed Report: https://oss-fuzz.com/testcase?key=5684680336867328 Project: qpdf Fuzzing Engine: libFuzzer Fuzz Target: qpdffuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: QPDFTokenizer::isSpace...

hostap:x509: Heap-buffer-overflow in asn1_get_next

Project: git://w1.fi/srv/git/hostap.git Detailed Report: https://oss-fuzz.com/testcase?key=5629679052783616 Project: hostap Fuzzing Engine: libFuzzer Fuzz Target: x509 Job Type: libfuzzerasani386hostap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf2b03ddd Crash Stat...

wabt:wasm2wat_fuzzer: Object-size in std::__1::vector<wabt::DataSegment*, std::__1::allocator<wabt::DataSegment*> >::

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=6001483432853504 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wasm2watfuzzer Job Type: libfuzzerubsanwabt Platform Id: linux Crash Type: Object-size Crash Address: Crash State: std::1::vect...

wabt:wasm2wat_fuzzer: Crash in wabt::BinaryReaderIR::OnFunctionSymbol

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=5204783407562752 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wasm2watfuzzer Job Type: libfuzzerasani386wabt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x017f0dfc Crash Stat...

hostap:x509: Heap-buffer-overflow in asn1_parse_oid

Project: git://w1.fi/srv/git/hostap.git Detailed Report: https://oss-fuzz.com/testcase?key=5687143836155904 Project: hostap Fuzzing Engine: libFuzzer Fuzz Target: x509 Job Type: libfuzzerasani386hostap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf2b03ddd Crash Stat...