openssl/client: Stack-use-after-return in OSSL_PARAM_get_int32

Project: https://github.com/openssl/openssl.git Detailed report: https://oss-fuzz.com/testcase?key=5648601105039360 Project: openssl Fuzzer: aflopensslclient Fuzz target binary: client Job Type: aflasanopenssl Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address:...

njs/njs_process_script_fuzzer: Use-of-uninitialized-value in nxt_random_add

Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5655066641432576 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

karchive/karchive_fuzzer: Heap-buffer-overflow in inflate_fast

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5726433327972352 Project: karchive Fuzzer: aflkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: aflasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

gdal/gtiff_mmap: Crash in LogL16Decode

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5636224519241728 Project: gdal Fuzzer: libFuzzergdalgtiffmmap Fuzz target binary: gtiffmmap Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x621001003d08 Crash...

karchive/karchive_fuzzer: Use-of-uninitialized-value in qstrlen

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5717776674586624 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

sqlite3/ossfuzz: Use-of-uninitialized-value in accessPayload

Detailed report: https://oss-fuzz.com/testcase?key=5638835947438080 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: accessPayload vdbeMemFromBtreeResiz...

unicorn/fuzz_emu_arm64_arm: Use-of-uninitialized-value in float64_squash_input_denormal_aarch64

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5681075289849856 Project: unicorn Fuzzer: libFuzzerunicornfuzzemuarm64arm Fuzz target binary: fuzzemuarm64arm Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type:...

imagemagick/ping_jps_fuzzer: Use-of-uninitialized-value in LocaleNCompare

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5767189224751104 Project: imagemagick Fuzzer: libFuzzerimagemagickpingjpsfuzzer Fuzz target binary: pingjpsfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

systemd/fuzz-netdev-parser: Use-of-uninitialized-value in explicit_bzero_safe

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5189307683307520 Project: systemd Fuzzer: libFuzzersystemdfuzz-netdev-parser Fuzz target binary: fuzz-netdev-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type:...

imagemagick/encoder_heic_fuzzer: Heap-buffer-overflow in derive_collocated_motion_vectors

Detailed report: https://oss-fuzz.com/testcase?key=5664200942157824 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61b000034e25...

lame/fuzzer-encoder: Heap-buffer-overflow in do_copy_buffer

Project: https://svn.code.sf.net/p/lame/svn/trunk/lame Detailed report: https://oss-fuzz.com/testcase?key=5717291922096128 Project: lame Fuzzer: libFuzzerlamefuzzer-encoder Fuzz target binary: fuzzer-encoder Job Type: libfuzzerasanlame Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Cra...

ffmpeg/ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Crash in luma_intra_pred_mode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5650370728034304 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDHEVCfuzzer Fuzz target binary: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

picotls/fuzz-asn1: Heap-buffer-overflow in ptls_asn1_read_type

Project: https://github.com/h2o/picotls.git Detailed report: https://oss-fuzz.com/testcase?key=5687824386359296 Project: picotls Fuzzer: aflpicotlsfuzz-asn1 Fuzz target binary: fuzz-asn1 Job Type: aflasanpicotls Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

gdal/gdal_fuzzer: Heap-use-after-free in GDALDataset::Reference

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5764663096115200 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6160000060...

opencv/imread_fuzzer: Use-of-uninitialized-value in inflate

Detailed report: https://oss-fuzz.com/testcase?key=5708657289854976 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: inflate uncompress2 uncompre...

pcre2/pcre2_fuzzer: Heap-buffer-overflow in _pcre2_check_escape_8

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://oss-fuzz.com/testcase?key=5659000685723648 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

graphicsmagick/coder_PTIF_fuzzer: Use-of-uninitialized-value in DisassociateAlphaRegion

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5713410539388928 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPTIFfuzzer Fuzz target binary: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

openh264/decoder_fuzzer: Heap-use-after-free in WelsDec::MapColToList0

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5746677611233280 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free READ 4...

grpc/api_fuzzer: Incorrect-function-pointer-type in grpc_core::AresDnsResolver::StartResolvingLocked

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5752853455437824 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Crash...

libreoffice/ww8fuzzer: Crash in __dynamic_cast

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5766621702914048 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Cras...

imagemagick/encoder_ept3_fuzzer: Use-of-uninitialized-value in WriteBlob

Detailed report: https://oss-fuzz.com/testcase?key=5085775568306176 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderept3fuzzer Fuzz target binary: encoderept3fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5631444412530688 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

tinyxml2/xmltest: Use-of-uninitialized-value in tinyxml2::XMLUtil::StringEqual

Project: https://github.com/leethomason/tinyxml2.git Detailed report: https://oss-fuzz.com/testcase?key=5763247731376128 Project: tinyxml2 Fuzzer: libFuzzerxmltest Fuzz target binary: xmltest Job Type: libfuzzermsantinyxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

imagemagick/enhance_fuzzer: Use-of-uninitialized-value in PerceptibleReciprocal

Detailed report: https://oss-fuzz.com/testcase?key=5764957178691584 Project: imagemagick Fuzzer: libFuzzerimagemagickenhancefuzzer Fuzz target binary: enhancefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

dav1d/dav1d_fuzzer_mt: Use-of-uninitialized-value in iclip

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5636143299690496 Project: dav1d Fuzzer: libFuzzerdav1dfuzzermt Fuzz target binary: dav1dfuzzermt Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

radare2/ia_fuzz: Heap-buffer-overflow in get_symbols_from_phdr

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5639337379627008 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in jbig2_arith_decode

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5674434795405312 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

bzip2/bzip2_decompress_target: Crash in unRLE_obuf_to_output_FAST

Detailed report: https://oss-fuzz.com/testcase?key=5660879073312768 Project: bzip2 Fuzzer: libFuzzerbzip2decompresstarget Fuzz target binary: bzip2decompresstarget Job Type: libfuzzerasanbzip2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ff82d64d2f8 Crash State:...

skia/android_codec: Heap-buffer-overflow in swizzle_index_to_n32

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5755937772535808 Project: skia Fuzzer: aflskiaandroidcodec Fuzz target binary: androidcodec Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5740171484463104 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

harfbuzz/hb-shape-fuzzer: Crash in BEInt<int, 4>::operator int

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5672261407735808 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerubsanharfbuzz Platform Id: linux Crash Type: UNKNOWN READ Crash...

keystone/fuzz_asm_hex: Use-of-uninitialized-value in llvm_ks::HexagonMCCodeEmitter::getExprOpValue

Detailed report: https://oss-fuzz.com/testcase?key=5664745516957696 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmhex Fuzz target binary: fuzzasmhex Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

open62541/fuzz_binary_message: NULL

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5654652478029824 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: UNKNOWN REA...

skia/api_raster_n32_canvas: Crash in void add_coverage_delta_segment<false, SkCoverageDeltaList>

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5768819205734400 Project: skia Fuzzer: libFuzzerskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

unicorn/fuzz_emu_m68k_be: Crash in [stack]

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5742284360908800 Project: unicorn Fuzzer: libFuzzerunicornfuzzemum68kbe Fuzz target binary: fuzzemum68kbe Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash...

harfbuzz/hb-subset-get-codepoints-fuzzer: Heap-buffer-overflow in OT::TableRecord::cmp

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5630904853069824 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-subset-get-codepoints-fuzzer Fuzz target binary: hb-subset-get-codepoints-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux...

harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5696686572175360 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

sqlite3/ossfuzz: Use-of-uninitialized-value in corruptSchema

Detailed report: https://oss-fuzz.com/testcase?key=5153397250981888 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: corruptSchema sqlite3InitCallback...

unrar/unrar_fuzzer: Negative-size-param in QuickOpen::ReadRaw

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=6239488958267392 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzerasanunrar Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

libreoffice/ww6fuzzer: Bad-cast to SwIndexReg from invalid vptr in SwIndex::Remove

Detailed report: https://oss-fuzz.com/testcase?key=6290151587184640 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000012e6bed8 Crash State: Bad-cast to SwIndexRe...

mupdf/pdf_fuzzer: Crash in jbig2_decode_mmr_init

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=6047162705117184 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x71c0000c64db Cras...

poppler/pdf_fuzzer: Use-of-uninitialized-value in SampledFunction::transform

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4888468869087232 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

libgit2/download_refs_fuzzer: Heap-buffer-overflow in ng_pkt

Project: https://github.com/libgit2/libgit2.git Detailed report: https://oss-fuzz.com/testcase?key=5105997956775936 Project: libgit2 Fuzzer: afllibgit2downloadrefsfuzzer Fuzz target binary: downloadrefsfuzzer Job Type: aflasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

poppler/pdf_fuzzer: Heap-buffer-overflow in Splash::pipeRunAAXBGR8

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5751988351401984 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzerasanpoppler Platform Id: linux Crash Type: Heap-buffer-overflow...

mupdf/mupdf_pdf_fuzzer: Stack-buffer-underflow in ps_index

Detailed report: https://oss-fuzz.com/testcase?key=5246375359938560 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Stack-buffer-underflow READ 8 Crash Address: 0x7ff1ddc79818 Crash State: psindex psrun evalpostscriptfun...

libreoffice/docxfuzzer: Global-buffer-overflow in basegfx::utils::UnoPolygonBezierCoordsToB2DPolygon

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6280654500134912 Project: libreoffice Fuzzer: libFuzzerlibreofficedocxfuzzer Fuzz target binary: docxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

poppler/pdf_fuzzer: Use-of-uninitialized-value in SplashOutputDev::updateLineDash

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5837508351885312 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

gdal/gdal_vector_translate_fuzzer: Container-overflow in std::__1::vector<double, std::__1::allocator<double> >::__append

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5198634147643392 Project: gdal Fuzzer: libFuzzergdalvectortranslatefuzzer Fuzz target binary: gdalvectortranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Container-overflow WRITE...

qcms/fuzz: Heap-buffer-overflow in qcms_transform_module_clut_only

Detailed report: https://oss-fuzz.com/testcase?key=4902996180729856 Project: qcms Fuzzer: libFuzzerqcmsfuzz Fuzz target binary: fuzz Job Type: libfuzzerasanqcms Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6030000000e0 Crash State: qcmstransformmoduleclutonly...

yara/dex_fuzzer: Heap-buffer-overflow in dex_parse

Detailed report: https://oss-fuzz.com/testcase?key=4621856041598976 Project: yara Fuzzer: libFuzzeryaradexfuzzer Fuzz target binary: dexfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6120000008c5 Crash State: dexparse dexload...