libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_object_dtor_unref_single

Detailed Report: https://oss-fuzz.com/testcase?key=6178711182901248 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6050000008b0 Crash State: uclobjectdtorunrefsingl...

imagemagick:ping_bayer_fuzzer: Heap-buffer-overflow in ReadBlob

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5523942512656384 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingbayerfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Cra...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5389219706568704 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

gdal:gdal_translate_fuzzer: Crash in GDALRasterBand::GetHistogram

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5801425921245184 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdaltranslatefuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffc079434e0 Crash...

qemu:qemu-fuzz-i386-target-generic-fuzz-pc-i440fx: Heap-use-after-free in op_pci_write

Detailed Report: https://oss-fuzz.com/testcase?key=6490790737608704 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-pc-i440fx Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x7fa0a63978c8 Crash State:...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4651349693825024 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_bint_to_s

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6327234775875584 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x602000007b33...

lz4:round_trip_frame_uncompressed_fuzzer: Use-of-uninitialized-value in LZ4_compress_fast_extState_fastReset

Project: https://github.com/lz4/lz4.git Detailed Report: https://oss-fuzz.com/testcase?key=5810591549227008 Project: lz4 Fuzzing Engine: libFuzzer Fuzz Target: roundtripframeuncompressedfuzzer Job Type: libfuzzermsanlz4 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.ast.expr.Name.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5171561165881344 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6400484251926528 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: NULL Sanitizer: memory MSAN Recommended...

binutils:fuzz_nm: Heap-double-free in fuzz_display_file2

Detailed Report: https://oss-fuzz.com/testcase?key=5188764523167744 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzznm Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x621000010500 Crash State: fuzzdisplayfile2 adanm.h listmatchingforma...

opensc:fuzz_pkcs11: Heap-buffer-overflow in sc_pkcs15_allocate_object_content

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6478989509656576 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs11 Job Type: aflasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x603000000112 Crash Stat...

lz4:round_trip_frame_uncompressed_fuzzer: Use-of-uninitialized-value in LZ4HC_compress_generic_noDictCtx

Project: https://github.com/lz4/lz4.git Detailed Report: https://oss-fuzz.com/testcase?key=6235198659887104 Project: lz4 Fuzzing Engine: libFuzzer Fuzz Target: roundtripframeuncompressedfuzzer Job Type: libfuzzermsanlz4 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

duckdb:parse_fuzz_test: Bad-cast to duckdb::BoundParameterExpression from duckdb::BoundCastExpression in duckdb::Planner::CreatePlan

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=4800152795217920 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: parsefuzztest Job Type: libfuzzerubsanduckdb Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000004d6bfa0 Crash State:...

mruby:mruby_fuzzer: Crash in udiv

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4699215460171776 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000011dbff8 Crash State:...

Ubuntu 18.04 LTS : PHP regression (USN-5479-3)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5479-3 advisory. USN-5479-1 fixed vulnerabilities in PHP. Unfortunately that update for CVE-2022-31625 was incomplete for Ubuntu 18.04 LTS. This update fixes the problem. We...

USN-5479-3: PHP regression

USN-5479-1 fixed vulnerabilities in PHP. Unfortunately that update for CVE-2022-31625 was incomplete for Ubuntu 18.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Charles Fol discovered that PHP incorrectly handled initializing certain arrays...

ffmpeg:ffmpeg_AV_CODEC_ID_LAGARITH_fuzzer: Heap-buffer-overflow in lag_decode_arith_plane

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4764457825337344 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDLAGARITHfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 9 Crash Address:...

unicorn:fuzz_emu_sparc_32be: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6211932262105088 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemusparc32be Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN...

spirv-tools:spvtools_val_fuzzer: Use-of-uninitialized-value in spvtools::CFA<spvtools::val::BasicBlock>::CalculateDominators

Project: https://github.com/KhronosGroup/SPIRV-Tools.git Detailed Report: https://oss-fuzz.com/testcase?key=4700128469975040 Project: spirv-tools Fuzzing Engine: libFuzzer Fuzz Target: spvtoolsvalfuzzer Job Type: libfuzzermsanspirv-tools Platform Id: linux Crash Type: Use-of-uninitialized-value...