libreoffice/ww8fuzzer: Heap-buffer-overflow in SetWW8_BRC

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4584538773651456 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

librawspeed/LJpegDecompressorFuzzer: Crash in rawspeed::unroll_loop_t<void rawspeed::LJpegDecompressor::decodeN<4>

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5353239269605376 Project: librawspeed Fuzzer: afllibrawspeedLJpegDecompressorFuzzer Fuzz target binary: LJpegDecompressorFuzzer Job Type: aflasanlibrawspeed Platform Id: linux Crash Type:...

libreoffice/pptfuzzer: Bad-cast to SdrObjGroup from SdrEdgeObj in SvxMSDffManager::ImportGroup

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6243010330230784 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

Linux - mincore() Uninitialized Kernel Heap Page Disclosure Exploit

Linux mincore discloses uninitialized kernel heap pages. When walkpagerange is used on a VMHUGETLB VMA, callbacks from the mmwalk structure are only invoked for present pages. However, domincore assumes that it will always get callbacks for all pages in the range passed to walkpagerange, and when...

libreoffice/xlsfuzzer: Heap-buffer-overflow in ScCompressedArray<short, unsigned short>::Iterator::operator++

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6716895815270400 Project: libreoffice Fuzzer: libFuzzerlibreofficexlsfuzzer Fuzz target binary: xlsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

librawspeed/RawParserFuzzer-GetDecoder-Decode: Heap-buffer-overflow in rawspeed::DngOpcodes::OffsetPerRowOrCol<rawspeed::DngOpcodes::DeltaRowOrColBase:

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4708787345686528 Project: librawspeed Fuzzer: afllibrawspeedRawParserFuzzer-GetDecoder-Decode Fuzz target binary: RawParserFuzzer-GetDecoder-Decode Job Type: aflasanlibrawspeed Platform Id:...

file/magic_fuzzer: Crash in __msan_memcpy.part.49

Detailed report: https://oss-fuzz.com/testcase?key=5553220060446720 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzermsanfile Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x70210000000a Crash State: msanmemcpy.part.49 filegetbuffer...

wpantund/wpantund-fuzz: Heap-use-after-free in in6_addr_to_string

Detailed report: https://oss-fuzz.com/testcase?key=5971366667878400 Project: wpantund Fuzzer: libFuzzerwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: libfuzzerasanwpantund Platform Id: linux Crash Type: Heap-use-after-free READ 16 Crash Address: 0x63100019f7f5 Crash State:...

open62541/fuzz_binary_message: Heap-double-free in ExtensionObject_deleteMembers

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=6162245819039744 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

libreoffice/ww6fuzzer: Heap-buffer-overflow in SVBT16ToShort

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5715253003288576 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

chakra: Dynamic-stack-buffer-overflow in js_memcpy_s

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=4738279476822016 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 16 Crash Address: 0x7fffa66f0a98 Crash State: jsmemcpys...

chakra: Stack-buffer-overflow in Output::PrintBuffer

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=4523451923562496 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ffda41e6be0 Crash State: Output::PrintBuffer...

unrar/unrar_fuzzer: Heap-buffer-overflow in File::Write

Detailed report: https://oss-fuzz.com/testcase?key=5319346072059904 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzerasanunrar Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7fe3fc376800 Crash State: File::Write...

librawspeed/RawParserFuzzer-GetDecoder-Decode: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6696296816574464 Project: librawspeed Fuzzer: libFuzzerlibrawspeedRawParserFuzzer-GetDecoder-Decode Fuzz target binary: RawParserFuzzer-GetDecoder-Decode Job Type: libfuzzermsanlibrawspeed...

file/magic_fuzzer: Crash in __msan_memcpy.part.49

Detailed report: https://oss-fuzz.com/testcase?key=6579978767433728 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzermsanfile Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7031000000f9 Crash State: msanmemcpy.part.49 filegetbuffer...

librawspeed/SonyArw2DecompressorFuzzer: Crash in rawspeed::RawImage::create

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5956588557828096 Project: librawspeed Fuzzer: libFuzzerlibrawspeedSonyArw2DecompressorFuzzer Fuzz target binary: SonyArw2DecompressorFuzzer Job Type: libfuzzerasanlibrawspeed Platform Id: lin...

chakra: Crash in Js::JavascriptArray::EntryConcat

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=4810702423326720 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000086a9 Crash State: Js::JavascriptArray::EntryConcat...

librawspeed/TiffDecoderFuzzer-NefDecoder: Heap-buffer-overflow in rawspeed::NefDecoder::decodeMetaDataInternal

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5659211817025536 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-NefDecoder Fuzz target binary: TiffDecoderFuzzer-NefDecoder Job Type: libfuzzerasanlibrawspeed Platform Id:...

dlplibs/pdbfuzzer: Heap-buffer-overflow in ucnv_UTF8FromUTF8

Detailed report: https://oss-fuzz.com/testcase?key=4652788958101504 Project: dlplibs Fuzzer: libFuzzerdlplibspdbfuzzer Fuzz target binary: pdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x6040000000f3 Crash State: ucnvUTF8FromUT...

libreoffice/scrtffuzzer: Heap-buffer-overflow in ScCompiler::NextSymbol

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5665914566475776 Project: libreoffice Fuzzer: libFuzzerlibreofficescrtffuzzer Fuzz target binary: scrtffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...