file: Use-of-uninitialized-value in cdf_file_property_info

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=6035205854855168 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzermsanfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libreoffice: Heap-use-after-free in SvxMSDffManager::SolveSolver

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4611189466202112 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

freetype2: Heap-buffer-overflow in ft_var_to_normalized

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://oss-fuzz.com/testcase?key=6377448260239360 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow...

pcre2: Stack-buffer-overflow in parse_regex

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4804894724718592 Target: pcre2 Fuzzer: libFuzzerpcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7fe78b19ded0...

ffmpeg:ffmpeg_AV_CODEC_ID_MOBICLIP_fuzzer: Heap-buffer-overflow in predict_motion

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5688995402743808 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDMOBICLIPfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

libxml2:xml: Heap-use-after-free in xmlXPathNodeSetAdd

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4766294854074368 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60c00000124...

kubernetes:yaml_FuzzSigYaml: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4894792369307648 Project: kubernetes Fuzzing Engine: libFuzzer Fuzz Target: yamlFuzzSigYaml Job Type: libfuzzerasankubernetes Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::RangeEqualsVisitor::Visit

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6310318291288064 Project: arrow Fuzzing Engine: honggfuzz Fuzz Target: arrow-ipc-stream-fuzz Job Type: honggfuzzasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

envoy:network_readfilter_fuzz_test: Heap-use-after-free in absl::container_internal::raw_hash_set<absl::container_internal::FlatHashMapPoli

Detailed Report: https://oss-fuzz.com/testcase?key=5658880747765760 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: networkreadfilterfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6130000f34f0 Crash State:...

sleuthkit:sleuthkit_fls_ext_fuzzer: Heap-buffer-overflow in ext2fs_inode_walk

Detailed Report: https://oss-fuzz.com/testcase?key=5200092827746304 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsextfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x619000000980 Crash State: ext2fsinodewal...

php:php-fuzz-parser: Crash in zend_ast_export_ex

Detailed Report: https://oss-fuzz.com/testcase?key=6291599739584512 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzerasanphp Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x7fff0697ef00 Crash State: zendastexportex zendastexportex zendastexportex...

immer:set-gc: Crash in auto LLVMFuzzerTestOneInput::$_1::operator

Project: https://github.com/arximboldi/immer.git Detailed Report: https://oss-fuzz.com/testcase?key=5128215832821760 Project: immer Fuzzing Engine: libFuzzer Fuzz Target: set-gc Job Type: libfuzzerasanimmer Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x001cb02fb030 Crash State: aut...

binutils:fuzz_disassemble: Global-buffer-overflow in print_insn_arc

Detailed Report: https://oss-fuzz.com/testcase?key=6258025384640512 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x000001427320 Crash State: printinsnarc...

hermes:fuzzer-jsi-entry: Heap-buffer-overflow in hermes::parser::JSLexer::consumeBracedCodePoint

Project: https://github.com/facebook/hermes.git Detailed Report: https://oss-fuzz.com/testcase?key=5068829519773696 Project: hermes Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-jsi-entry Job Type: libfuzzerasanhermes Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

skia:svg_dom: Stack-buffer-overflow in SkParse::FindNamedColor

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5132315302035456 Project: skia Fuzzing Engine: honggfuzz Fuzz Target: svgdom Job Type: honggfuzzasanskia Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7fad59a57330...

matio:matio_fuzzer: Crash in Mat_H5ReadFieldNames

Detailed Report: https://oss-fuzz.com/testcase?key=6249571570417664 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fa1ef9ce0f8 Crash State: MatH5ReadFieldNames MatH5ReadGroupInfo...

muparser:set_eval_fuzzer: Heap-buffer-overflow in mu::Parser::Sum

Project: https://github.com/beltoforion/muparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5670338645196800 Project: muparser Fuzzing Engine: libFuzzer Fuzz Target: setevalfuzzer Job Type: libfuzzerasanmuparser Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

leptonica:barcode_fuzzer: Heap-use-after-free in pixAverageRasterScans

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5643281198481408 Project: leptonica Fuzzing Engine: afl Fuzz Target: barcodefuzzer Job Type: aflasanleptonica Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

rdkit:mol_data_stream_to_mol_fuzzer: Heap-use-after-free in RDKit::SGroupParsing::ParseSGroupV2000SAPLine

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5976509373480960 Project: rdkit Fuzzing Engine: afl Fuzz Target: moldatastreamtomolfuzzer Job Type: aflasanrdkit Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x607000002194...

fluent-bit:parse_logfmt_fuzzer: Heap-buffer-overflow in logfmt_parser

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5659446845112320 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: parselogfmtfuzzer Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in gs_scan_token

Detailed Report: https://oss-fuzz.com/testcase?key=5109631614713856 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gsscantoken tokenexeccontinue...

mysql-server:fuzz_real_query: Heap-buffer-overflow in mysql_store_result

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=5731063664214016 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzrealquery Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash...

pcre2:pcre2_fuzzer: Crash in match

Detailed Report: https://oss-fuzz.com/testcase?key=6290883744104448 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzermsanpcre2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fff9416d140 Crash State: match pcre2match8 pcre2fuzzsupport.c Sanitizer...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in int arrow::util::RleDecoder::GetBatchWithDictSpaced<double>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5201887160958976 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x61f0001a4200 Crash...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_oscar

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5077550909095936 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x608000331572 Crash State...

dav1d:dav1d_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5685403669757952 Project: dav1d Fuzzing Engine: libFuzzer Fuzz Target: dav1dfuzzer Job Type: libfuzzerasandav1d Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

php:php-fuzz-mbstring: Heap-use-after-free in optimize_nodes

Detailed Report: https://oss-fuzz.com/testcase?key=5688240959127552 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf52376a0 Crash State: optimizenodes optimizenodes...

samba:fuzz_ndr_drsuapi_TYPE_OUT: Heap-buffer-overflow in lzxpress_decompress

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5724999789051904 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrdrsuapiTYPEOUT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libreoffice:ww8fuzzer: Heap-use-after-free in SvxMSDffImportData::NotifyFreeObj

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5662761686401024 Project: libreoffice Fuzzing Engine: afl Fuzz Target: ww8fuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address:...

llvm:llvm-isel-fuzzer--wasm32-O2: Heap-use-after-free in llvm::BasicBlock::getTerminator

Detailed Report: https://oss-fuzz.com/testcase?key=5716633024987136 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-isel-fuzzer--wasm32-O2 Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6060000074e8 Crash State:...

binutils:fuzz_disassemble: Index-out-of-bounds in z8k_lookup_instr

Detailed Report: https://oss-fuzz.com/testcase?key=5730446512226304 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzerubsanbinutils Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: z8klookupinstr printinsnz8k fuzzdisassemble....

njs:njs_process_script_fuzzer: Memcpy-param-overlap in njs_chb_join_to

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5742835815153664 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x62500008b700,0x62500008b8...

xerces-c:parse_target: Use-of-uninitialized-value in xercesc_3_2::XMLString::compareNString

Detailed Report: https://oss-fuzz.com/testcase?key=5643481133613056 Project: xerces-c Fuzzing Engine: libFuzzer Fuzz Target: parsetarget Job Type: libfuzzermsanxerces-c Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: xercesc32::XMLString::compareNString...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_string_prototype_split

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5712452738351104 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libreoffice:ww8fuzzer: Heap-use-after-free in SwIndex::Remove

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5743758083883008 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

wireshark:fuzzshark_ip: Heap-buffer-overflow in tvb_memcpy

Project: https://code.wireshark.org/review/wireshark Detailed Report: https://oss-fuzz.com/testcase?key=5661536303710208 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkip Job Type: aflasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x6310001788...

envoy:config_fuzz_test: Heap-use-after-free in Envoy::Upstream::ZoneAwareLoadBalancerBase::~ZoneAwareLoadBalancerBase

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=6136135336329216 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: configfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

opensc:fuzz_pkcs15_reader: Crash in parse_sec_attr_44

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5681169970757632 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerubsanopensc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000013a1000 Crash...

radare2:ia_fuzz: Heap-buffer-overflow in read_uleb128

Detailed Report: https://oss-fuzz.com/testcase?key=6048106239492096 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000365f8 Crash State: readuleb128 walkexports getsymbol...

envoy:compressor_fuzz_test: Index-out-of-bounds in compress_block

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5149986500640768 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: compressorfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State...

mysql-server:fuzz_stmt_fetch: Heap-buffer-overflow in net_field_length_size

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=5693050621263872 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzstmtfetch Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

graphicsmagick:coder_SFW_fuzzer: Heap-buffer-overflow in GenerateEXIFAttribute

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5711632855990272 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderSFWfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ...

ibmswtpm2:fuzz_tpm_server: Crash in sha1_block_data_order

Detailed Report: https://oss-fuzz.com/testcase?key=5712522249764864 Project: ibmswtpm2 Fuzzing Engine: libFuzzer Fuzz Target: fuzztpmserver Job Type: libfuzzermsanibmswtpm2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002e77000 Crash State: sha1blockdataorder SHA1Update...

libvips:jpegsave_file_fuzzer: Crash in vips__foreign_convert_saveable

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5688033944272896 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavefilefuzzer Job Type: libfuzzerubsanlibvips Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

zstd:simple_decompress: Crash in ZSTD_decodeLiteralsBlock

Project: https://github.com/facebook/zstd.git Detailed Report: https://oss-fuzz.com/testcase?key=5755077486182400 Project: zstd Fuzzing Engine: libFuzzer Fuzz Target: simpledecompress Job Type: libfuzzerubsanzstd Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7ffcdeddc000 Crash...

gdal/ogr_fuzzer: Heap-double-free in poolDestroy

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5695005741547520 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x7fbd5886e800 Crash...

ffmpeg/ffmpeg_DEMUXER_fuzzer: Crash in avio_read

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5649290914955264 Project: ffmpeg Fuzzer: libFuzzerffmpegDEMUXERfuzzer Fuzz target binary: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

cryptofuzz/cryptofuzz-openssl: Crash in aesni_ecb_encrypt

Project: https://github.com/guidovranken/cryptofuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5638960371466240 Project: cryptofuzz Fuzzer: libFuzzercryptofuzzcryptofuzz-openssl Fuzz target binary: cryptofuzz-openssl Job Type: libfuzzerubsancryptofuzz Platform Id: linux Crash Type:...

imagemagick/ping_ept2_fuzzer: Stack-buffer-overflow in GetNextUTFCode

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5695814195740672 Project: imagemagick Fuzzer: libFuzzerimagemagickpingept2fuzzer Fuzz target binary: pingept2fuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

c-ares/ares_parse_reply_fuzzer: Null-dereference READ with empty stacktrace

Project: https://github.com/c-ares/c-ares.git Detailed report: https://oss-fuzz.com/testcase?key=5674462260756480 Project: c-ares Fuzzer: libFuzzerc-aresaresparsereplyfuzzer Fuzz target binary: aresparsereplyfuzzer Job Type: libfuzzerubsanc-ares Platform Id: linux Crash Type: Null-dereference REA...