libgit2/objects_fuzzer: Heap-buffer-overflow in git__strntol64

Project: https://github.com/libgit2/libgit2.git Detailed report: https://oss-fuzz.com/testcase?key=5743628379488256 Project: libgit2 Fuzzer: afllibgit2objectsfuzzer Fuzz target binary: objectsfuzzer Job Type: aflasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5750379279548416 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

harfbuzz/hb-shape-fuzzer: Crash in BEInt<int, 4>::operator int

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5695615258853376 Project: harfbuzz Fuzzer: aflharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5652019562414080 Project: harfbuzz Fuzzer: aflharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

openvswitch/odp_target: Use-of-uninitialized-value in ds_put_hex

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5646356010500096 Project: openvswitch Fuzzer: libFuzzeropenvswitchodptarget Fuzz target binary: odptarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick/encoder_pict_fuzzer: Crash in EncodeImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5729407323340800 Project: imagemagick Fuzzer: aflimagemagickencoderpictfuzzer Fuzz target binary: encoderpictfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: UNKNOWN READ...

libwebp/fuzz_demux_api: Heap-buffer-overflow in PutLE16

Project: https://chromium.googlesource.com/webm/libwebp Detailed report: https://oss-fuzz.com/testcase?key=6323357770317824 Project: libwebp Fuzzer: libFuzzerlibwebpfuzzdemuxapi Fuzz target binary: fuzzdemuxapi Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type: Heap-buffer-overflow WRI...

capstone/fuzz_disasmmaster: Use-of-uninitialized-value in isPrefixAtLocation

Detailed report: https://oss-fuzz.com/testcase?key=5004316824829952 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmmaster Fuzz target binary: fuzzdisasmmaster Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in FT_Set_Transform

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=6193455704309760 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

tor/oss-fuzz-iptsv2: Use-of-uninitialized-value in DES_set_key_unchecked

Project: https://git.torproject.org/tor.git Detailed report: https://oss-fuzz.com/testcase?key=6036313756139520 Project: tor Fuzzer: libFuzzertoross-fuzz-iptsv2 Fuzz target binary: oss-fuzz-iptsv2 Job Type: libfuzzermsantor Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

icu/number_format_fuzzer: Crash in __msan_memset

Project: https://github.com/unicode-org/icu.git Detailed report: https://oss-fuzz.com/testcase?key=6252124296970240 Project: icu Fuzzer: libFuzzericunumberformatfuzzer Fuzz target binary: numberformatfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

botan/tls_client: Crash in unsigned long Botan::load_be<unsigned long>

Project: https://github.com/randombit/botan.git Detailed report: https://oss-fuzz.com/testcase?key=5945229455654912 Project: botan Fuzzer: libFuzzerbotantlsclient Fuzz target binary: tlsclient Job Type: libfuzzermsanbotan Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x703000010000...

net-snmp/snmp_pdu_parse_fuzzer: Heap-buffer-overflow in asn_parse_signed_int64

Project: git://git.code.sf.net/p/net-snmp/code Detailed report: https://oss-fuzz.com/testcase?key=5102970128564224 Project: net-snmp Fuzzer: libFuzzernet-snmpsnmppduparsefuzzer Fuzz target binary: snmppduparsefuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type: Heap-buffer-overfl...

libreoffice/pptfuzzer: Bad-cast to SdrObjectSvxMSDffManager::SolveSolver in SdrPowerPointImport::ImportPage

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6233996204703744 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

yara/dex_fuzzer: Heap-buffer-overflow in yr_object_set_string

Detailed report: https://oss-fuzz.com/testcase?key=5648916683948032 Project: yara Fuzzer: libFuzzeryaradexfuzzer Fuzz target binary: dexfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 12 Crash Address: 0x61b000000d8e Crash State: yrobjectsetstring...

imagemagick/encoder_gif_fuzzer: Use-of-uninitialized-value in Sync8BimProfile

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5273543509016576 Project: imagemagick Fuzzer: libFuzzerimagemagickencodergiffuzzer Fuzz target binary: encodergiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

libreoffice/scrtffuzzer: Heap-buffer-overflow in ScCompiler::NextSymbol

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5665914566475776 Project: libreoffice Fuzzer: libFuzzerlibreofficescrtffuzzer Fuzz target binary: scrtffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

spidermonkey: Heap-buffer-overflow in _ZN2js13DispatchTypedINS_17PreBarrierFunctorIN2JS5ValueEEEJEEEDTclfp_scP8JSObjec

Detailed report: https://oss-fuzz.com/testcase?key=4564957816422400 Project: spidermonkey Fuzzer: jsfuzzer Job Type: asanspidermonkey Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x61100032bcc0 Crash State:...

chakra: Crash in Memory::RecyclerWriteBarrierManager::WriteBarrier

Detailed report: https://oss-fuzz.com/testcase?key=5093056878477312 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fb3cdfa601e Crash State: Memory::RecyclerWriteBarrierManager::WriteBarrier...

openthread: Stack-buffer-overflow in ot::Tlv::GetNext

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=6361422072119296 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthreaduntrusted Platform Id: linux Crash Type:...

strongswan: Index-out-of-bounds in traffic_selector_create_from_rfcNUMBER_format

Project: https://github.com/strongswan/strongswan.git Detailed report: https://oss-fuzz.com/testcase?key=6094496901103616 Project: strongswan Fuzzer: libFuzzerstrongswanfuzzcerts Fuzz target binary: fuzzcerts Job Type: libfuzzerubsanstrongswan Platform Id: linux Crash Type: Index-out-of-bounds...

boringssl: Incorrect-function-pointer-type in bssl::ssl_negotiate_alpn

Project: https://boringssl.googlesource.com/boringssl Detailed report: https://oss-fuzz.com/testcase?key=6088352019251200 Project: boringssl Fuzzer: libFuzzerboringsslserver Fuzz target binary: server Job Type: libfuzzerubsanboringssl Platform Id: linux Crash Type: Incorrect-function-pointer-type...

gdal: Heap-buffer-overflow in XYZRasterBand::IReadBlock

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6536746705616896 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

gdal: in NTFFileReader::ReadRasterColumn

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5417520355868672 Project: gdal Fuzzer: aflgdalogrfilesystemfuzzer Fuzz target binary: ogrfilesystemfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: WRITE 4 Crash Address: 0x6020001127b4 Crash...

libxml2: Stack-buffer-overflow in xmlSnprintfElementContent

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=4931910683852800 Project: libxml2 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Fuzz target binary: libxml2xmlreadmemoryfuzzer Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type:...

gdal: Index-out-of-bounds in DGNProcessElement

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5673081030836224 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

gdal: Incorrect-function-pointer-type in OGRCurve::CastToLineString

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5600546717171712 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Cras...

grpc: Heap-buffer-overflow in internal_add_error

Detailed report: https://oss-fuzz.com/testcase?key=6312731374256128 Project: grpc Fuzzer: aflgrpcserverfuzzer Fuzz target binary: serverfuzzer Job Type: aflasangrpc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x616000000a48 Crash State: internaladderror...

libreoffice: Heap-use-after-free in SvxMSDffManager::SolveSolver

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4611189466202112 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

harfbuzz: Use-of-uninitialized-value in OT::RangeRecord::cmp

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=6595199411159040 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libtsm: Global-buffer-overflow in vte_write_debug

Project: git://people.freedesktop.org/dvdhrm/libtsm Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5588673684832256 Project: libtsm Fuzzer: libFuzzerlibtsmfuzzer Fuzz target binary: libtsmfuzzer Job Type: libfuzzerasanlibtsm Platform Id: linux Crash Type:...

simdjson:fuzz_ondemand: Crash in numberparsing.h

Project: https://github.com/simdjson/simdjson.git https://github.com/lemire/simdjson.git Detailed Report: https://oss-fuzz.com/testcase?key=5632701446750208 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzondemand Job Type: libfuzzerasansimdjson Platform Id: linux Crash Type: UNKNOWN...

grok:grk_decompress_fuzzer: Crash in grk::SparseBuffer<6u, 6u>::read_or_write

Detailed Report: https://oss-fuzz.com/testcase?key=6267600499376128 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000003c2c Crash State: grk::SparseBuffer::readorwrite grk::SparseBuffer::rea...

openh264:decoder_fuzzer: Use-of-uninitialized-value in WelsDec::GetColocatedMb

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5736147944472576 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzermsanopenh264 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_MOBICLIP_fuzzer: Heap-buffer-overflow in predict_motion

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5688995402743808 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDMOBICLIPfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

php:php-fuzz-execute: Heap-use-after-free in zend_gc_addref

Detailed Report: https://oss-fuzz.com/testcase?key=5636312147951616 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x612000018040 Crash State: zendgcaddref...

libxml2:xml: Heap-use-after-free in xmlXPathNodeSetAdd

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4766294854074368 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60c00000124...

php:php-fuzz-execute: Heap-use-after-free in zend_gc_delref

Detailed Report: https://oss-fuzz.com/testcase?key=5725932898484224 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6120000145c0 Crash State: zendgcdelref izvalptrdtor...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::RangeEqualsVisitor::Visit

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6310318291288064 Project: arrow Fuzzing Engine: honggfuzz Fuzz Target: arrow-ipc-stream-fuzz Job Type: honggfuzzasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

sleuthkit:sleuthkit_fls_ext_fuzzer: Heap-buffer-overflow in ext2fs_inode_walk

Detailed Report: https://oss-fuzz.com/testcase?key=5200092827746304 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsextfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x619000000980 Crash State: ext2fsinodewal...

cryptofuzz:cryptofuzz-boringssl-noasm: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5726830049624064 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type:...

binutils:fuzz_bfd: Stack-buffer-overflow in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=5389726430003200 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzbfd Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fffa22fd740 Crash State: bfdgetl32 vmstraverseindex...

php:php-fuzz-parser: Crash in _fini

Detailed Report: https://oss-fuzz.com/testcase?key=5701022811684864 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzerasanphp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00000131117c Crash State: fini Sanitizer: address ASAN Recommended...

rdkit:mol_data_stream_to_mol_fuzzer: Crash in RDKit::labelRecursivePatterns

Detailed Report: https://oss-fuzz.com/testcase?key=5694552007245824 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fff14000000 Crash State: RDKit::labelRecursivePatterns...

immer:flex-vector-gc: Crash in immer::detail::rbts::node<int, immer::memory_policy<immer::heap_policy<immer::gc

Project: https://github.com/arximboldi/immer.git Detailed Report: https://oss-fuzz.com/testcase?key=5660697665732608 Project: immer Fuzzing Engine: libFuzzer Fuzz Target: flex-vector-gc Job Type: libfuzzerasanimmer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7083eb04e907 Crash...

qt:qtbase_gui_text_qtextdocument_sethtml: Index-out-of-bounds in QUnicodeTables::qGetProp

Detailed Report: https://oss-fuzz.com/testcase?key=5673564766994432 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguitextqtextdocumentsethtml Job Type: libfuzzerubsanqt Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: QUnicodeTables::qGetProp QString...

postgresql:simple_query_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4884251691188224 Project: postgresql Fuzzing Engine: libFuzzer Fuzz Target: simplequeryfuzzer Job Type: libfuzzerasanpostgresql Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000010000 Crash State: NULL Sanitizer: address ASAN...

binutils:fuzz_disassemble: Global-buffer-overflow in print_insn_arc

Detailed Report: https://oss-fuzz.com/testcase?key=6258025384640512 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x000001427320 Crash State: printinsnarc...

libxml2:xml: Use-of-uninitialized-value in xmlStrdup

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=6227265896841216 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

open62541:fuzz_binary_message: Crash in UA_Server_initNS0

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5751655076462592 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...