libreoffice/htmlfuzzer: Heap-buffer-overflow in SvNumberformat::ImpGetDateTimeOutput

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5111115676123136 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

mupdf/pdf_fuzzer: Stack-buffer-underflow in ps_index

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=6241403096006656 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Stack-buffer-underflow READ 8 Crash Address: 0x7fde52864418...

libreoffice/ww6fuzzer: Bad-cast to SwIndexReg from invalid vptr in SwIndex::Remove

Detailed report: https://oss-fuzz.com/testcase?key=6290151587184640 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000012e6bed8 Crash State: Bad-cast to SwIndexRe...

libwebp/fuzz_advanced_api: Heap-use-after-free in ShiftBytes

Project: https://chromium.googlesource.com/webm/libwebp Detailed report: https://oss-fuzz.com/testcase?key=5638028289638400 Project: libwebp Fuzzer: libFuzzerlibwebpfuzzadvancedapi Fuzz target binary: fuzzadvancedapi Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type: Heap-use-after-fre...

imagemagick/ping_mvg_fuzzer: Heap-use-after-free in TracePath

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5762940320874496 Project: imagemagick Fuzzer: aflimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: Heap-use-after-free...

poppler/pdf_fuzzer: Use-of-uninitialized-value in JBIG2Bitmap::getPixelPtr

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4544550004588544 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

icu/number_format_fuzzer: Crash in __msan_memset

Detailed report: https://oss-fuzz.com/testcase?key=6252124296970240 Project: icu Fuzzer: libFuzzericunumberformatfuzzer Fuzz target binary: numberformatfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x72f000010000 Crash State: msanmemset...

libreoffice/pptfuzzer: Bad-cast to SdrObjectSdrEdgeObj::Notify in SfxBroadcaster::Broadcast

Detailed report: https://oss-fuzz.com/testcase?key=5146943924731904 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000010fd2e70 Crash State: Bad-cast to...

libreoffice/pptfuzzer: Bad-cast to SdrObject from invalid vptr in SdrEdgeObj::Notify

Detailed report: https://oss-fuzz.com/testcase?key=5651645263249408 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000103c9cb0 Crash State: Bad-cast to SdrObject...

imagemagick/encoder_mpc_fuzzer: Use-of-uninitialized-value in GetEXIFProperty

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5736450319450112 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermpcfuzzer Fuzz target binary: encodermpcfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_xpm_fuzzer: Use-of-uninitialized-value in ParseCommandOption

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5459937892237312 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderxpmfuzzer Fuzz target binary: encoderxpmfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

llvm/clang-fuzzer: Heap-use-after-free in clang::APValue::swap

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6538719558369280 Project: llvm Fuzzer: libFuzzerllvmclang-fuzzer Fuzz target binary: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Addres...

tor/oss-fuzz-vrs: Use-of-uninitialized-value in tor_vsscanf

Project: https://git.torproject.org/tor.git Detailed report: https://oss-fuzz.com/testcase?key=5851887808020480 Project: tor Fuzzer: libFuzzertoross-fuzz-vrs Fuzz target binary: oss-fuzz-vrs Job Type: libfuzzermsantor Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

llvm: Heap-buffer-overflow in checkDylibCommand

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6218604343197696 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

libxml2: Use-of-uninitialized-value in xmlDictLookup

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=6260038165331968 Project: libxml2 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Fuzz target binary: libxml2xmlreadmemoryfuzzer Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type:...

libreoffice: Heap-use-after-free in SvxMSDffManager::SolveSolver

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4611189466202112 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

libplist: Memcpy-param-overlap in parse_data_node

Project: https://github.com/libimobiledevice/libplist.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4930725262393344 Project: libplist Fuzzer: libFuzzerlibplistbplistfuzzer Fuzz target binary: bplistfuzzer Job Type: libfuzzerasanlibplist Platform Id: linux Crash Type:...

libyal:libfsfat_volume_fuzzer: Heap-buffer-overflow in libbfio_memory_range_io_handle_read_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=4716871736426496 Project: libyal Fuzzing Engine: afl Fuzz Target: libfsfatvolumefuzzer Job Type: aflasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 7 Crash Address: 0x7b7f1f7e0b83 Crash State:...

jflex:JflexFuzzer: Security exception in jflex.core.NFA.insertNFA

Project: https://github.com/jflex-de/jflex.git Detailed Report: https://oss-fuzz.com/testcase?key=5613996171132928 Project: jflex Fuzzing Engine: libFuzzer Fuzz Target: JflexFuzzer Job Type: libfuzzerasanjflex Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

tcpreplay:fuzz_fragroute: Heap-buffer-overflow in ip_add_option

Project: https://github.com/appneta/tcpreplay.git Detailed Report: https://oss-fuzz.com/testcase?key=5090327015522304 Project: tcpreplay Fuzzing Engine: libFuzzer Fuzz Target: fuzzfragroute Job Type: libfuzzerasantcpreplay Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

libyal:libvsgpt_partition_fuzzer: Crash in libvsgpt_partition_entry_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=4850812543893504 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libvsgptpartitionfuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x264405c0 Crash State: libvsgptpartitionentryreaddata...

jsoncons:fuzz_cbor_parser_max: Heap-buffer-overflow in jsoncons::cbor::basic_cbor_parser<jsoncons::stream_source<unsigned char, std::__

Project: https://github.com/danielaparker/jsoncons.git Detailed Report: https://oss-fuzz.com/testcase?key=5246852585553920 Project: jsoncons Fuzzing Engine: honggfuzz Fuzz Target: fuzzcborparsermax Job Type: honggfuzzasanjsoncons Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

freerdp:TestFuzzChannelRail: Heap-buffer-overflow in _wcsnlen

Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=5268164724981760 Project: freerdp Fuzzing Engine: libFuzzer Fuzz Target: TestFuzzChannelRail Job Type: libfuzzerasanfreerdp Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

llvm:llvm-opt-fuzzer--x86_64-dse: New-delete-type-mismatch in std::__1::vector<std::__1::unique_ptr<llvm::detail::PassConcept<llvm::Function,

Detailed Report: https://oss-fuzz.com/testcase?key=5365654174367744 Project: llvm Fuzzing Engine: honggfuzz Fuzz Target: llvm-opt-fuzzer--x8664-dse Job Type: honggfuzzasanllvm Platform Id: linux Crash Type: New-delete-type-mismatch Crash Address: 0x7c7ff70f0c40 Crash State:...

freerdp:TestFuzzCommonAssistanceParseFileBuffer: Heap-buffer-overflow in TestFuzzCommonAssistanceParseFileBuffer.c

Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=4743123461537792 Project: freerdp Fuzzing Engine: honggfuzz Fuzz Target: TestFuzzCommonAssistanceParseFileBuffer Job Type: honggfuzzasanfreerdp Platform Id: linux Crash Type: Heap-buffer-overflow RE...

binutils:fuzz_addr2line: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5374725044633600 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzaddr2line Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7c8f9f3e08e1 Crash State: bfdgetl16...

curl:curl_fuzzer_gopher: Heap-buffer-overflow in tuple_cb

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5857778623905792 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzergopher Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x7c5ae1deae7e...

janet:fuzz_dobytes: Heap-use-after-free in os_exit

Project: https://github.com/janet-lang/janet.git Detailed Report: https://oss-fuzz.com/testcase?key=4675752218656768 Project: janet Fuzzing Engine: honggfuzz Fuzz Target: fuzzdobytes Job Type: honggfuzzasanjanet Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x78914caeb2...

php:php-fuzz-execute: Heap-use-after-free in zend_std_read_property

Detailed Report: https://oss-fuzz.com/testcase?key=5998358339321856 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x76dd0af09d8c Crash State: zendstdreadproperty...

libiec61850:fuzz_acse_parse: Heap-buffer-overflow in BerDecoder_decodeInt32

Project: https://github.com/mz-automation/libiec61850.git Detailed Report: https://oss-fuzz.com/testcase?key=5473465822674944 Project: libiec61850 Fuzzing Engine: afl Fuzz Target: fuzzacseparse Job Type: aflasanlibiec61850 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libredwg:llvmfuzz: Heap-buffer-overflow in encode_preR13_entities

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5142147379822592 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

imagemagick:encoder_mvg_fuzzer: Heap-buffer-overflow in RenderMVGContent

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6242201047465984 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encodermvgfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 8...

gdal:gdal_filesystem_fuzzer: Heap-buffer-overflow in gdal::LERCBand::IReadBlock

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6483345073307648 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

cairo:script_interpreter_fuzzer: Crash in _csi_stack_roll

Detailed Report: https://oss-fuzz.com/testcase?key=6235405201244160 Project: cairo Fuzzing Engine: libFuzzer Fuzz Target: scriptinterpreterfuzzer Job Type: libfuzzerubsancairo Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x56775c987880 Crash State: csistackroll roll csiobjectexecute...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.analysis.sr.SerbianNormalizationFilter.incrementToken

Detailed Report: https://oss-fuzz.com/testcase?key=4689210398015488 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

cmake:cmArchiveExtractFuzzer: Use-of-uninitialized-value in cab_read_ahead_cfdata

Project: https://gitlab.kitware.com/cmake/cmake.git Detailed Report: https://oss-fuzz.com/testcase?key=5912907245486080 Project: cmake Fuzzing Engine: libFuzzer Fuzz Target: cmArchiveExtractFuzzer Job Type: libfuzzermsancmake Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

libvpx:vpx_enc_fuzzer_vp8_nalloc: Use-of-uninitialized-value in vp8_regular_quantize_b_sse4_1

Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=4581817557778432 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxencfuzzervp8nalloc Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

binutils:fuzz_as: Use-of-uninitialized-value in demand_empty_rest_of_line

Detailed Report: https://oss-fuzz.com/testcase?key=5905500238839808 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: demandemptyrestofline scomminternal...

gpac:fuzz_scene: Heap-use-after-free in gf_node_get_attribute_by_tag

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5045588495499264 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzscene Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x79d1706e02c0 Crash...

openbabel:fuzz_empty_write: Crash in OpenBabel::GhemicalFormat::WriteMolecule

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=6046070861004800 Project: openbabel Fuzzing Engine: afl Fuzz Target: fuzzemptywrite Job Type: aflasanopenbabel Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000008902 Crash...

openbabel:fuzz_convert: Stack-buffer-overflow in OpenBabel::MCDLFormat::getMCDL

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4918021742460928 Project: openbabel Fuzzing Engine: afl Fuzz Target: fuzzconvert Job Type: aflasanopenbabel Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address:...

gpsd:FuzzDriversStructured: Crash in processXDR

Project: https://gitlab.com/gpsd/gpsd.git Detailed Report: https://oss-fuzz.com/testcase?key=6198953963225088 Project: gpsd Fuzzing Engine: libFuzzer Fuzz Target: FuzzDriversStructured Job Type: libfuzzerasangpsd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x524458435024 Crash Stat...

llvm:llvm-opt-fuzzer--x86_64-loop_vectorize: Use-of-uninitialized-value in llvm::VPMultiDefValue::~VPMultiDefValue

Detailed Report: https://oss-fuzz.com/testcase?key=5688862138761216 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-opt-fuzzer--x8664-loopvectorize Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

gpsd:FuzzDriversStructured: Segv on unknown address in ___interceptor_strtol

Project: https://gitlab.com/gpsd/gpsd.git Detailed Report: https://oss-fuzz.com/testcase?key=5128567548870656 Project: gpsd Fuzzing Engine: libFuzzer Fuzz Target: FuzzDriversStructured Job Type: libfuzzerasangpsd Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

freeradius:fuzzer_xlat: Global-buffer-overflow in tokenize_field

Detailed Report: https://oss-fuzz.com/testcase?key=5900948294926336 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerxlat Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x7bce01f17a48 Crash State: tokenizefield...

md4c:fuzz-mdhtml: Global-buffer-overflow in md_start_new_block

Project: https://github.com/mity/md4c.git Detailed Report: https://oss-fuzz.com/testcase?key=5606808533401600 Project: md4c Fuzzing Engine: libFuzzer Fuzz Target: fuzz-mdhtml Job Type: libfuzzerasanmd4c Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x5a35b1115da0 Cra...

radare2:ia_fuzz: Heap-buffer-overflow in mach0_free_64

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5437797275336704 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

libvips:vips_fuzzer: Heap-buffer-overflow in vips_hist_local_generate

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=6121452385665024 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: vipsfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

wolftpm:fuzz_asn_cert: Null-dereference READ in ubsan_GetStackTrace

Project: https://github.com/wolfSSL/wolfTPM.git Detailed Report: https://oss-fuzz.com/testcase?key=6447765076115456 Project: wolftpm Fuzzing Engine: libFuzzer Fuzz Target: fuzzasncert Job Type: libfuzzerubsanwolftpm Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x00000000000...

graphicsmagick:coder_HEIF_fuzzer: Heap-buffer-overflow in vvdec_push_data2

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5932941304987648 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderHEIFfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...