rdkit:mol_data_stream_to_mol_fuzzer: Crash in __dynamic_cast

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6033801128706048 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffff0000000...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::TileProcessor::prepare_sod_decoding

Detailed Report: https://oss-fuzz.com/testcase?key=5154931768819712 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::TileProcessor::preparesoddecoding...

fluent-bit:flb-it-fuzz-msgpack_parse_fuzzer_OSSFUZZ: Heap-buffer-overflow in encoded_to_buf

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5654071359569920 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-msgpackparsefuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type:...

opencv:imdecode_fuzzer: Heap-buffer-overflow in void cv::copyToMat<int>

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=5171310492385280 Project: opencv Fuzzing Engine: afl Fuzz Target: imdecodefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6060000008f0 Crash...

openexr:openexr_scanlines_fuzzer: Crash in Imf_2_5::copyIntoFrameBuffer

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5099738956038144 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrscanlinesfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

fasthttp:fuzz_request: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5745696710590464 Project: fasthttp Fuzzing Engine: libFuzzer Fuzz Target: fuzzrequest Job Type: libfuzzerasanfasthttp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000555d7b8 Crash State: NULL Sanitizer: address ASAN Recommended...

c-blosc2:decompress_fuzzer: Crash in blosc_d

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=6044542246322176 Project: c-blosc2 Fuzzing Engine: honggfuzz Fuzz Target: decompressfuzzer Job Type: honggfuzzasanc-blosc2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x604ffffff8c1...

php:php-fuzz-execute: Heap-use-after-free in zend_gc_addref

Detailed Report: https://oss-fuzz.com/testcase?key=5636312147951616 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x612000018040 Crash State: zendgcaddref...

php:php-fuzz-execute: Use-of-uninitialized-value in zend_generator_search_multi_children_node

Detailed Report: https://oss-fuzz.com/testcase?key=5146486399303680 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: zendgeneratorsearchmultichildrennode...

monero:cold-transaction_fuzz_tests: Heap-buffer-overflow in unpack_vartime

Project: https://github.com/monero-project/monero.git Detailed Report: https://oss-fuzz.com/testcase?key=5164790941745152 Project: monero Fuzzing Engine: libFuzzer Fuzz Target: cold-transactionfuzztests Job Type: libfuzzerasanmonero Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in transform_4x4_luma_add_8_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=5691391462866944 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: transform4x4lumaadd8fallback...

cryptofuzz:cryptofuzz-boringssl: Heap-buffer-overflow in mp_toradix

Detailed Report: https://oss-fuzz.com/testcase?key=5692555180900352 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x608000039d80 Crash State: mptoradix...

Remote Code Execution

activemq-broker is vulnerable to remote code execution. A regression that prevents JMX re-bind allows an attacker to execute arbitrary code by passing an empty environment map to MIConnectorServer instead of the map that contains the authentication credentials...

rdkit:mol_data_stream_to_mol_fuzzer: Bad-cast to RDKit::Atom

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5703990850093056 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000003742600 Crash...

ndpi:fuzz_process_packet: Use-of-uninitialized-value in ndpi_check_dga_name

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5641543770439680 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

htslib:hts_open_fuzzer: Heap-buffer-overflow in le_to_u32

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6318532219109376 Project: htslib Fuzzing Engine: afl Fuzz Target: htsopenfuzzer Job Type: aflasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x609000018801 Crash...

PT-2020-5485

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ versions prior to 5.15.13 Description The issue is related to a regression introduced in a commit that prevents JMX re-bind, allowing a remote client to create a javax.management.loading.MLet MBean and use it to create new MBea...

php:php-fuzz-execute: Heap-use-after-free in zend_gc_delref

Detailed Report: https://oss-fuzz.com/testcase?key=5725932898484224 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6120000145c0 Crash State: zendgcdelref izvalptrdtor...

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in RenderMVGContent

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5700912264511488 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

openexr:openexr_scanlines_fuzzer: Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5647879652507648 Project: openexr Fuzzing Engine: honggfuzz Fuzz Target: openexrscanlinesfuzzer Job Type: honggfuzzasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow...