PT-2025-36657

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=423059200 Crash type: Use-of-uninitialized-value Crash state: spvtools::EmitNumericLiteral spvtools::disassemble::InstructionDisassembler::EmitOperand spvtools::disassemble::InstructionDisassembler::EmitInstructionImpl...

PT-2024-40802

Name of the Vulnerable Software and Affected Versions spvtools affected versions not specified Description The issue is related to a crash in the spvtools, specifically in the disassemble module. The crash occurs when the EmitInstruction function is called, which is part of the...

OSV-2024-574 Heap-buffer-overflow in spvtools::disassemble::InstructionDisassembler::EmitInstruction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69549 Crash type: Heap-buffer-overflow READ 1 Crash state: spvtools::disassemble::InstructionDisassembler::EmitInstruction spvtools::DisassembleInstruction Parser::parseModule...

PT-2024-40799

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the EmitInstruction function of...

OSV-2024-144 UNKNOWN READ in spvtools::val::ValidateAccessChain

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66956 Crash type: UNKNOWN READ Crash state: spvtools::val::ValidateAccessChain spvtools::val::MemoryPass spvtools::val::ValidateBinaryUsingContextAndValidationState...

PT-2024-40651 · Spvtools · Spvtools

Name of the Vulnerable Software and Affected Versions: spvtools affected versions not specified Description: The issue is related to a crash in the spvtools library, specifically in the ValidateAccessChain function within the val module. The crash occurs due to an unknown read error. Technical...

OSV-2022-1119 Container-overflow in spvtools::opt::blockmergeutil::CanMergeWithSuccessor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52863 Crash type: Container-overflow READ 8 Crash state: spvtools::opt::blockmergeutil::CanMergeWithSuccessor std::1::function::funcspvtools::opt::BlockMergePass::Process spvtools::opt::IRContext::ProcessCallTreeFromRoots...

PT-2022-36728 · Spvtools · Spvtools

Name of the Vulnerable Software and Affected Versions: spvtools affected versions not specified Description: The issue is related to a crash caused by a container-overflow read. Technical details about the crash include the CanMergeWithSuccessor function and the BlockMergePass::Process function...

OSV-2022-525 Heap-buffer-overflow in spvtools::CFA<spvtools::val::BasicBlock>::CalculateDominators

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48553 Crash type: Heap-buffer-overflow READ 8 Crash state: spvtools::CFA::CalculateDominators spvtools::val::PerformCfgChecks spvtools::val::ValidateBinaryUsingContextAndValidationState...

PT-2022-37064

Name of the Vulnerable Software and Affected Versions spvtools affected versions not specified Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the CalculateDominators function within spvtools::CFA, which is called by...

PT-2022-37044

Name of the Vulnerable Software and Affected Versions spvtools affected versions not specified Description The issue is related to a stack-buffer-overflow read crash. Technical details about the crash include the spvtools::opt::CompositeInsertToCompositeConstruct and std:: 1:: function:: funcbool...

OSV-2022-436 Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47684 Crash type: Stack-buffer-overflow READ 8 Crash state: spvtools::opt::CompositeInsertToCompositeConstruct std::1::function::funcbool spvtools::opt::InstructionFolder::FoldInstructionInternal...

PT-2022-37008

Name of the Vulnerable Software and Affected Versions spvtools affected versions not specified Description The issue is related to a stack-buffer-overflow read, which occurs in the spvtools::opt::CompositeInsertToCompositeConstruct function. This function is called by std:: 1:: function:: funcboo...

tint:tint_spv_reader_msl_writer_fuzzer: Use-of-uninitialized-value in std::__1::pair<std::__1::__hash_iterator<std::__1::__hash_node<std::__1::basic_s

Detailed Report: https://oss-fuzz.com/testcase?key=6123607495933952 Project: tint Fuzzing Engine: libFuzzer Fuzz Target: tintspvreadermslwriterfuzzer Job Type: libfuzzermsantint Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...