libreoffice:htmlfuzzer: Heap-use-after-free in SfxItemSet::Count

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5699610401832960 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: htmlfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash...

libvips:smartcrop_fuzzer: Heap-buffer-overflow in exif_data_load_data

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5175690342957056 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: smartcropfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Crash Address:...

openh264:decoder_fuzzer: Crash in WelsDec::WelsMarkAsRef

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5731532414910464 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f0ac8de0c30 Crash...

wolfssl:fuzzer-wolfssl-server-randomize: Heap-buffer-overflow in fp_to_unsigned_bin_at_pos

Detailed Report: https://oss-fuzz.com/testcase?key=5123165615030272 Project: wolfssl Fuzzing Engine: afl Fuzz Target: fuzzer-wolfssl-server-randomize Job Type: aflasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x602000001040 Crash State: fptounsignedbinatpo...

php:php-fuzz-execute: Crash in zend_gc_delref

Detailed Report: https://oss-fuzz.com/testcase?key=5700128755941376 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f67427c7800 Crash State: zendgcdelref izvalptrdtor zenduncleanzvalptrdt...

libxml2:xml: Heap-use-after-free in xmlNodeDumpOutputInternal

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4837552128000000 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60400000036...

harfbuzz:hb-shape-fuzzer: Crash in hb_realloc_impl

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5675987258572800 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

libspng:spng_read_fuzzer: Heap-double-free in spng__free

Project: https://gitlab.com/randy408/libspng.git https://github.com/randy408/libspng.git Detailed Report: https://oss-fuzz.com/testcase?key=6554438277005312 Project: libspng Fuzzing Engine: libFuzzer Fuzz Target: spngreadfuzzer Job Type: libfuzzerasanlibspng Platform Id: linux Crash Type:...

arrow:arrow-ipc-stream-fuzz: Global-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5661776796712960 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000002b252b8...

llvm:clang-fuzzer: Segv on unknown address in clang::LookupResult::sanity

Detailed Report: https://oss-fuzz.com/testcase?key=4872329519955968 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::LookupResult::sanity...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_memcached

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5113237544894464 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 13 Crash Address: 0x60500000e05c Crash Stat...

cryptofuzz:cryptofuzz-openssl-noasm: Use-of-uninitialized-value in EVP_DecryptUpdate

Detailed Report: https://oss-fuzz.com/testcase?key=5736062923571200 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: EVPDecryptUpdate...

lwan:template_fuzzer: Heap-buffer-overflow in post_process_template

Project: git://github.com/lpereira/lwan Detailed Report: https://oss-fuzz.com/testcase?key=5745678005567488 Project: lwan Fuzzing Engine: libFuzzer Fuzz Target: templatefuzzer Job Type: libfuzzerasanlwan Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6130000001c0 Cras...

binutils:fuzz_disassemble: Stack-buffer-overflow in get_indirect_operand

Detailed Report: https://oss-fuzz.com/testcase?key=5663912053178368 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzdisassemble Job Type: aflasanbinutils Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7f4f3e03ae5a Crash State: getindirectoperand printtwoopera...

imagemagick:encoder_xpm_fuzzer: Use-of-uninitialized-value in ParseXPMColor

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5736863532318720 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderxpmfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

lz4/compress_fuzzer: Heap-buffer-overflow in LZ4_write32

Project: https://github.com/lz4/lz4.git Detailed report: https://oss-fuzz.com/testcase?key=5726918013353984 Project: lz4 Fuzzer: afllz4compressfuzzer Fuzz target binary: compressfuzzer Job Type: aflasanlz4 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x61c00000075b...

njs/njs_process_script_fuzzer: Use-of-uninitialized-value in njs_regexp_exec_result

Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5127028405174272 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

unicorn/fuzz_emu_mips_32be: Heap-buffer-overflow in tlb_set_page_mips

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5645992751267840 Project: unicorn Fuzzer: aflunicornfuzzemumips32be Fuzz target binary: fuzzemumips32be Job Type: aflasanunicorn Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Cra...

kimageformats/kimgio_kra_fuzzer: Use-of-uninitialized-value in QString::vasprintf

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5763219051773952 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiokrafuzzer Fuzz target binary: kimgiokrafuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

open62541/fuzz_json_decode_encode: Heap-buffer-overflow in UA_unbase64

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5207216900014080 Project: open62541 Fuzzer: libFuzzeropen62541fuzzjsondecodeencode Fuzz target binary: fuzzjsondecodeencode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

systemd/fuzz-netdev-parser: Use-of-uninitialized-value in explicit_bzero_safe

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5189307683307520 Project: systemd Fuzzer: libFuzzersystemdfuzz-netdev-parser Fuzz target binary: fuzz-netdev-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type:...

openh264/decoder_fuzzer: Heap-use-after-free in WelsDec::WelsReorderRefList

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5190290674024448 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free READ 4...

perfetto/trace_processor_fuzzer: Crash in perfetto::trace_processor::ProtoTraceParser::ParseTypedFtraceToRaw

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed report: https://oss-fuzz.com/testcase?key=5740416861732864 Project: perfetto Fuzzer: libFuzzerperfettotraceprocessorfuzzer Fuzz target binary: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Cra...

openthread/cli-uart-received-fuzzer: Stack-buffer-overflow in ot::MeshCoP::Leader::HandlePetition

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5769727228510208 Project: openthread Fuzzer: libFuzzeropenthreadcli-uart-received-fuzzer Fuzz target binary: cli-uart-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash...

opencv/imdecode_fuzzer: Crash in jp2_box_get

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5665823442599936 Project: opencv Fuzzer: libFuzzeropencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

grpc/api_fuzzer: Incorrect-function-pointer-type in grpc_core::AresDnsResolver::StartResolvingLocked

Detailed report: https://oss-fuzz.com/testcase?key=5129478546653184 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Crash State:...

harfbuzz/hb-subset-fuzzer: Global-buffer-overflow in CFF::BlendArg::set_blends

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5710107829075968 Project: harfbuzz Fuzzer: aflharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Global-buffer-overflow READ 8...

librawspeed/VC5DecompressorFuzzer: Heap-buffer-overflow in rawspeed::VC5Decompressor::Wavelet::HighPassBand::decode

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5735870561255424 Project: librawspeed Fuzzer: libFuzzerlibrawspeedVC5DecompressorFuzzer Fuzz target binary: VC5DecompressorFuzzer Job Type: libfuzzerasanlibrawspeed Platform Id: linux Crash...

libreoffice/ww6fuzzer: Stack-use-after-return in SwIndex::Init

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5465364275134464 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

net-snmp/snmp_pdu_parse_fuzzer: Heap-buffer-overflow in asn_parse_signed_int64

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed report: https://oss-fuzz.com/testcase?key=6302021029199872 Project: net-snmp Fuzzer: aflnet-snmpsnmppduparsefuzzer Fuzz target binary: snmppduparsefuzzer Job Type: aflasannet-snmp Platform Id: linux...

imagemagick/encoder_ptif_fuzzer: Crash in put1bitbwtile

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4777363809239040 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderptiffuzzer Fuzz target binary: encoderptiffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip: Stack-buffer-overflow in dissect_ieeeNUMBER_common

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=6062904672518144 Project: wireshark Fuzzer: aflwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: aflasanwireshark Platform Id: linux Cras...

libreoffice/pptfuzzer: Bad-cast to SdrObjectSvxMSDffManager::SolveSolver in SdrPowerPointImport::ImportPage

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6233996204703744 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

skia/animated_image_decode: Use-of-uninitialized-value in SkAnimatedImage::decodeNextFrame

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5526593989509120 Project: skia Fuzzer: libFuzzerskiaanimatedimagedecode Fuzz target binary: animatedimagedecode Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick/encoder_xc_fuzzer: Heap-buffer-overflow in string

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5399651365683200 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderxcfuzzer Fuzz target binary: encoderxcfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

skia/image_filter_deserialize: Use-of-uninitialized-value in sk_store_bgra

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=4728953316048896 Project: skia Fuzzer: libFuzzerskiaimagefilterdeserialize Fuzz target binary: imagefilterdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type:...

curl/curl_fuzzer_http: Index-out-of-bounds in fuzz_handle_transfer

Detailed report: https://oss-fuzz.com/testcase?key=5049873339514880 Project: curl Fuzzer: libFuzzercurlfuzzerhttp Fuzz target binary: curlfuzzerhttp Job Type: libfuzzerubsancurl Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: fuzzhandletransfer curlfuzzer.cc...

yara/macho_fuzzer: Heap-buffer-overflow in macho_handle_segment_64_be

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5917108346028032 Project: yara Fuzzer: libFuzzeryaramachofuzzer Fuzz target binary: machofuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

unrar/unrar_fuzzer: Heap-buffer-overflow in Unpack::CopyString

Detailed report: https://oss-fuzz.com/testcase?key=6224876978307072 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzerasanunrar Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7f0e45e76800 Crash State: Unpack::CopyString...

librawspeed: Bad-cast to rawspeed::RawDecoder from invalid vptr;rawspeed::RawDecoderDecodeThread;rawspeed::RawDecoder::startTasks

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4612305675354112 Project: librawspeed Fuzzer: libFuzzerlibrawspeedX3fParserFuzzer-GetDecoder-Decode Fuzz target binary: X3fParserFuzzer-GetDecoder-Decode Job Type: libfuzzerubsanlibrawspeed...

gdal: Heap-buffer-overflow in BigByteCpy

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6320672118669312 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

json: Heap-buffer-overflow in nlohmann::basic_json<std::__1::map, std::__1::vector, std::__1::basic_string<cha

Project: https://github.com/nlohmann/json.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5229771923390464 Project: json Fuzzer: libFuzzerjsonparsecborfuzzer Fuzz target binary: parsecborfuzzer Job Type: libfuzzerasanjson Platform Id: linux Crash Type:...

libtsm: Heap-buffer-overflow in tsm_screen_tab_left

Project: git://people.freedesktop.org/dvdhrm/libtsm Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5633680093478912 Project: libtsm Fuzzer: libFuzzerlibtsmfuzzer Fuzz target binary: libtsmfuzzer Job Type: libfuzzerasanlibtsm Platform Id: linux Crash Type:...

xstream:XmlFuzzer: Security exception in java.base/java.lang.AbstractStringBuilder.<init>

Project: https://github.com/x-stream/xstream.git Detailed Report: https://oss-fuzz.com/testcase?key=5595632715497472 Project: xstream Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanxstream Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

cairo:font_fuzzer: Heap-buffer-overflow in _cairo_type1_subset_init

Detailed Report: https://oss-fuzz.com/testcase?key=5193220372627456 Project: cairo Fuzzing Engine: afl Fuzz Target: fontfuzzer Job Type: aflasancairo Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7506d87e0834 Crash State: cairotype1subsetinit...

libhevc:hevc_dec_fuzzer: Heap-buffer-overflow in ihevcd_cabac_decode_bins_tunary

Project: https://android.googlesource.com/platform/external/libhevc https://github.com/ittiam-systems/libhevc.git Detailed Report: https://oss-fuzz.com/testcase?key=4634909378150400 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasanlibhevc Platform Id:...

assimp:assimp_fuzzer: Use-of-uninitialized-value in Assimp::LWOImporter::CopyFaceIndicesLWO2

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5264547070672896 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

tdengine:sql-fuzzer: Stack-buffer-overflow in MurmurHash3_32

Detailed Report: https://oss-fuzz.com/testcase?key=6521509010276352 Project: tdengine Fuzzing Engine: libFuzzer Fuzz Target: sql-fuzzer Job Type: libfuzzerasantdengine Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x75e590dd032c Crash State: MurmurHash332 taosHashPut...

freeradius:fuzzer_xlat: Use-after-poison in fr_sbuff_terminal_search

Detailed Report: https://oss-fuzz.com/testcase?key=5964617292775424 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerxlat Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x7ad3e4fe238d Crash State: frsbuffterminalsearch...

freeradius:fuzzer_json: Heap-buffer-overflow in fr_utf8_char

Detailed Report: https://oss-fuzz.com/testcase?key=6558953457909760 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerjson Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x750350ce0153 Crash State: frutf8char frjpathparse...