llvm:clang-fuzzer: Segv on unknown address in llvm::llvm_unreachable_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5639537548328960 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: llvm::llvmunreachableinternal...

python3-libraries:fuzzer-decode: Heap-buffer-overflow in PyState_AddModule

Detailed Report: https://oss-fuzz.com/testcase?key=5723360180305920 Project: python3-libraries Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decode Job Type: libfuzzerasanpython3-libraries Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60c000002880 Crash State:...

libvips:pngsave_buffer_fuzzer: Heap-buffer-overflow in IsHTML

Project: https://github.com/libvips/libvips.git Detailed report: https://oss-fuzz.com/testcase?key=5157921138147328 Project: libvips Fuzzing engine: libFuzzer Fuzz target: pngsavebufferfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

njs/njs_process_script_fuzzer: Use-of-uninitialized-value in njs_regexp_exec_result

Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5127028405174272 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

icu/collator_rulebased_fuzzer: Use-of-uninitialized-value in isMatchAtCPBoundary

Detailed report: https://oss-fuzz.com/testcase?key=5644492876546048 Project: icu Fuzzer: libFuzzericucollatorrulebasedfuzzer Fuzz target binary: collatorrulebasedfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

openh264/decoder_fuzzer: Heap-use-after-free in WelsDec::WelsReorderRefList

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5190290674024448 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free READ 4...

openthread/cli-uart-received-fuzzer: Stack-buffer-overflow in ot::MeshCoP::Leader::HandlePetition

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5769727228510208 Project: openthread Fuzzer: libFuzzeropenthreadcli-uart-received-fuzzer Fuzz target binary: cli-uart-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash...

harfbuzz/hb-subset-fuzzer: Global-buffer-overflow in CFF::BlendArg::set_blends

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5710107829075968 Project: harfbuzz Fuzzer: aflharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Global-buffer-overflow READ 8...

minizip/unzip_fuzzer: Index-out-of-bounds in BZ2_decompress

Project: https://github.com/nmoinvaz/minizip.git Detailed report: https://oss-fuzz.com/testcase?key=5714988497371136 Project: minizip Fuzzer: libFuzzerminizipunzipfuzzer Fuzz target binary: unzipfuzzer Job Type: libfuzzerubsanminizip Platform Id: linux Crash Type: Index-out-of-bounds Crash Addres...

zlib-ng/compress_fuzzer: Use-of-uninitialized-value in deflate_medium

Project: https://github.com/sebpop/zlib-ng.git https://github.com/zlib-ng/zlib-ng.git Detailed report: https://oss-fuzz.com/testcase?key=6268121894617088 Project: zlib-ng Fuzzer: libFuzzerzlib-ngcompressfuzzer Fuzz target binary: compressfuzzer Job Type: libfuzzermsanzlib-ng Platform Id: linux...

graphicsmagick/coder_GIF_fuzzer: Heap-buffer-overflow in DecodeImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6043228022243328 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderGIFfuzzer Fuzz target binary: coderGIFfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

imagemagick/encoder_mvg_fuzzer: Heap-buffer-overflow in TracePoint

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5655158907207680 Project: imagemagick Fuzzer: aflimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

botan/tls_client: Heap-buffer-overflow in void Botan::copy_mem<unsigned char>

Project: https://github.com/randombit/botan.git Detailed report: https://oss-fuzz.com/testcase?key=4905819050082304 Project: botan Fuzzer: libFuzzerbotantlsclient Fuzz target binary: tlsclient Job Type: libfuzzerasanbotan Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

net-snmp/snmp_pdu_parse_fuzzer: Heap-buffer-overflow in asn_parse_signed_int64

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed report: https://oss-fuzz.com/testcase?key=6302021029199872 Project: net-snmp Fuzzer: aflnet-snmpsnmppduparsefuzzer Fuzz target binary: snmppduparsefuzzer Job Type: aflasannet-snmp Platform Id: linux...

libreoffice/pptfuzzer: Bad-cast to SdrObjectSvxMSDffManager::SolveSolver in SdrPowerPointImport::ImportPage

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6233996204703744 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

imagemagick/encoder_xc_fuzzer: Heap-buffer-overflow in string

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5399651365683200 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderxcfuzzer Fuzz target binary: encoderxcfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

libreoffice/wmffuzzer: Heap-buffer-overflow in tools::Polygon emfio::EmfReader::ReadPolygon<short>

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6236945156931584 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

yara/macho_fuzzer: Use-of-uninitialized-value in macho_parse_file_32_be

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5168348309487616 Project: yara Fuzzer: libFuzzeryaramachofuzzer Fuzz target binary: machofuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

unrar/unrar_fuzzer: Heap-buffer-overflow in Unpack::CopyString

Detailed report: https://oss-fuzz.com/testcase?key=6224876978307072 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzerasanunrar Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7f0e45e76800 Crash State: Unpack::CopyString...

llvm/llvm-special-case-list-fuzzer: Heap-buffer-overflow in p_ere

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5450169182060544 Project: llvm Fuzzer: libFuzzerllvmllvm-special-case-list-fuzzer Fuzz target binary: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type:...

gdal: Heap-buffer-overflow in XYZRasterBand::IReadBlock

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6536746705616896 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

ffmpeg: Heap-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6117573403869184 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDFMVCfuzzer Fuzz target binary: ffmpegAVCODECIDFMVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

libyaml: Use-of-uninitialized-value in yaml_parser_scan_flow_scalar

Project: https://github.com/yaml/libyaml.git Detailed report: https://oss-fuzz.com/testcase?key=5607885063061504 Project: libyaml Fuzzer: libFuzzerlibyamlfuzzer Fuzz target binary: libyamlfuzzer Job Type: libfuzzermsanlibyaml Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

libxml2: Use-of-uninitialized-value in xmlParserPrintFileContextInternal

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=4707734979084288 Project: libxml2 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Fuzz target binary: libxml2xmlreadmemoryfuzzer Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type:...

wolftpm:fuzz_asn_cert: Heap-buffer-overflow in TPM2_ASN_DecodeRsaPubKey

Project: https://github.com/wolfSSL/wolfTPM.git Detailed Report: https://oss-fuzz.com/testcase?key=6202677062336512 Project: wolftpm Fuzzing Engine: libFuzzer Fuzz Target: fuzzasncert Job Type: libfuzzerasanwolftpm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

netcdf:fuzz_open: Crash in nclistfreeall

Detailed Report: https://oss-fuzz.com/testcase?key=5604962138914816 Project: netcdf Fuzzing Engine: libFuzzer Fuzz Target: fuzzopen Job Type: libfuzzerubsannetcdf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State: nclistfreeall ncpluginpathfinalize...

binutils:fuzz_as: Use-of-uninitialized-value in macro_del_f

Detailed Report: https://oss-fuzz.com/testcase?key=6754255549038592 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: macrodelf htabdelete macroend Sanitizer: memory...

dropbear:fuzzer-kexsntrup-cli: Crash in mp_count_bits

Project: https://secure.ucc.asn.au/hg/dropbear https://github.com/mkj/dropbear.git Detailed Report: https://oss-fuzz.com/testcase?key=4592162058076160 Project: dropbear Fuzzing Engine: afl Fuzz Target: fuzzer-kexsntrup-cli Job Type: aflasandropbear Platform Id: linux Crash Type: UNKNOWN READ Cras...

ndpi:fuzz_ndpi_reader_pl7m_simplest_internal: Heap-buffer-overflow in ndpi_search_mikrotik

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5767884694945792 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireaderpl7msimplestinternal Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address:...

keycloak:SamlMetadataParserFuzzer: Security exception in com.ctc.wstx.util.WordResolver$Builder.constructBranch

Detailed Report: https://oss-fuzz.com/testcase?key=6071792907649024 Project: keycloak Fuzzing Engine: libFuzzer Fuzz Target: SamlMetadataParserFuzzer Job Type: libfuzzerasankeycloak Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

libjpeg-turbo:compress12_fuzzer: Use-of-uninitialized-value in encode_mcu_AC_first

Detailed Report: https://oss-fuzz.com/testcase?key=5071676943958016 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: compress12fuzzer Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: encodemcuACfirst...

ffmpeg:ffmpeg_AV_CODEC_ID_AIC_fuzzer: Use-of-uninitialized-value in idct_row

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4874102695854080 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAICfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

libheif:file_fuzzer: Heap-buffer-overflow in BitReader::BitReader

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5125411395141632 Project: libheif Fuzzing Engine: afl Fuzz Target: filefuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x502000000814 Cra...

jflex:JflexFuzzer: Security exception in jflex.core.NFA.insertNFA

Project: https://github.com/jflex-de/jflex.git Detailed Report: https://oss-fuzz.com/testcase?key=5438119263404032 Project: jflex Fuzzing Engine: libFuzzer Fuzz Target: JflexFuzzer Job Type: libfuzzerasanjflex Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

ghostscript:gstoraster_pdf_fuzzer: Segv on unknown address in gs_gc_reclaim

Detailed Report: https://oss-fuzz.com/testcase?key=5144492507201536 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterpdffuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gsgcreclaim ireclaim...

wireshark:fuzzshark_ip_proto-udp: Heap-buffer-overflow in dissect_btle

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=4653303358095360 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux...

ffmpeg:ffmpeg_AV_CODEC_ID_CFHD_fuzzer: Heap-buffer-overflow in vert_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5990952685600768 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDCFHDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

ffmpeg:ffmpeg_dem_IAMF_fuzzer: Heap-buffer-overflow in ff_mpeg4audio_get_config_gb

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4833546039525376 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemIAMFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x612000000703 Cras...

mpv:fuzzer_protocol_lavf: Heap-buffer-overflow in av_base64_decode

Project: https://github.com/mpv-player/mpv.git Detailed Report: https://oss-fuzz.com/testcase?key=6036928263684096 Project: mpv Fuzzing Engine: libFuzzer Fuzz Target: fuzzerprotocollavf Job Type: libfuzzerasani386mpv Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

tailscale:stun_parser_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6297746184142848 Project: tailscale Fuzzing Engine: libFuzzer Fuzz Target: stunparserfuzzer Job Type: libfuzzerasantailscale Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN...

go-ldap:fuzz_parse_dn: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5123564268224512 Project: go-ldap Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsedn Job Type: libfuzzerasango-ldap Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommende...

valijson:fuzzer: Use-of-uninitialized-value in void std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocat

Project: https://github.com/tristanpenman/valijson.git Detailed Report: https://oss-fuzz.com/testcase?key=4815257255084032 Project: valijson Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanvalijson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

cras:cras_hfp_slc: Heap-double-free in supported_features

Detailed Report: https://oss-fuzz.com/testcase?key=5038376050819072 Project: cras Fuzzing Engine: afl Fuzz Target: crashfpslc Job Type: aflasancras Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x6020000001f0 Crash State: supportedfeatures handleatcommand handleatcommandfortest...

zeek:zeek-smtp-fuzzer: Segv on unknown address in zeek::analyzer::smtp::SMTP_Analyzer::DeliverStream

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=4789219251781632 Project: zeek Fuzzing Engine: honggfuzz Fuzz Target: zeek-smtp-fuzzer Job Type: honggfuzzasanzeek Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

serenity:FuzzWAVLoader: Stack-use-after-scope in Audio::WavLoaderPlugin::load_wav_info_block

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5817297356783616 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzWAVLoader Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Stack-use-after-scope READ 4 Crash Address:...

gpac:fuzz_probe_analyze: Stack-buffer-overflow in gf_sk_connect

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4946758404734976 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7fff413933ce...

simd:simd_load_fuzzer: Global-buffer-overflow in Simd::Base::jpeg__jpeg_decode_block_prog_dc

Detailed Report: https://oss-fuzz.com/testcase?key=5377312904249344 Project: simd Fuzzing Engine: libFuzzer Fuzz Target: simdloadfuzzer Job Type: libfuzzerasansimd Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000010dc0d40 Crash State:...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in ff_jpegxl_parse_codestream_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6151006496620544 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

apache-poi:POIHDGFFuzzer: Security exception in org.apache.poi.hdgf.chunks.Chunk.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5324112693952512 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHDGFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.poi.hdgf.chunks.Chunk...

igraph:read_pajek: Crash in igraph_strvector_set_len

Project: https://github.com/igraph/igraph.git Detailed Report: https://oss-fuzz.com/testcase?key=4810244435607552 Project: igraph Fuzzing Engine: libFuzzer Fuzz Target: readpajek Job Type: libfuzzerasani386igraph Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x010100f1 Crash State:...