openh264:decoder_fuzzer: Heap-buffer-overflow in McChromaWithFragMv_c

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5401862628704256 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libreoffice:sftfuzzer: Stack-buffer-overflow in ParseCMAP

Detailed Report: https://oss-fuzz.com/testcase?key=4859879712620544 Project: libreoffice Fuzzing Engine: afl Fuzz Target: sftfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffc551c0ae0 Crash State: ParseCMAP...

ffmpeg:ffmpeg_AV_CODEC_ID_MOBICLIP_fuzzer: Heap-buffer-overflow in predict_motion

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5688995402743808 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDMOBICLIPfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

libavif:avif_decode_fuzzer: Heap-buffer-overflow in avifROStreamRead

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=5075525020942336 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: avifdecodefuzzer Job Type: libfuzzerasanlibavif Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::TileProcessor::prepare_sod_decoding

Detailed Report: https://oss-fuzz.com/testcase?key=5154931768819712 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::TileProcessor::preparesoddecoding...

grok:grk_decompress_fuzzer: Heap-use-after-free in grk::SOTMarker::read

Detailed Report: https://oss-fuzz.com/testcase?key=5720229752340480 Project: grok Fuzzing Engine: afl Fuzz Target: grkdecompressfuzzer Job Type: aflasangrok Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x60d000000380 Crash State: grk::SOTMarker::read grk::j2kreadsot...

php:php-fuzz-execute: Crash in zend_gc_delref

Detailed Report: https://oss-fuzz.com/testcase?key=5758025133195264 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerasani386php Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xbebebebe Crash State: zendgcdelref zvaldelrefp zvalptrdtornogc...

c-blosc2:decompress_fuzzer: Nested bug in the same thread, aborting. with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6211547465252864 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Nested bug in the same thread, aborting. Crash Address: Crash State: NULL Sanitizer: memory...

open62541:fuzz_binary_decode: Use-of-uninitialized-value in UA_encodeBinary

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6325617770102784 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzbinarydecode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libvips:smartcrop_fuzzer: Segv on unknown address in vips_XYZ2Lab_line

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=4829562723368960 Project: libvips Fuzzing Engine: honggfuzz Fuzz Target: smartcropfuzzer Job Type: honggfuzzasanlibvips Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::init_fuji_block

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4762894621999104 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libspng:spng_read_fuzzer: Use-of-uninitialized-value in spng_read_fuzzer.c

Detailed Report: https://oss-fuzz.com/testcase?key=4859937025687552 Project: libspng Fuzzing Engine: libFuzzer Fuzz Target: spngreadfuzzer Job Type: libfuzzermsanlibspng Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: spngreadfuzzer.c spngreadfuzzer.c...

binutils:fuzz_readelf: Stack-buffer-overflow in print_dynamic_symbol

Detailed Report: https://oss-fuzz.com/testcase?key=5953247323095040 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzreadelf Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f67ff9a3340 Crash State: printdynamicsymbol...

xpdf:fuzz_pdfload: Segv on unknown address in GList::getLength

Detailed Report: https://oss-fuzz.com/testcase?key=5670951261044736 Project: xpdf Fuzzing Engine: honggfuzz Fuzz Target: fuzzpdfload Job Type: honggfuzzasanxpdf Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: GList::getLength Catalog::Catalog PDFDoc::setup2...

monero:load-from-json_fuzz_tests: Global-buffer-overflow in epee::misc_utils::parse::match_string2

Project: https://github.com/monero-project/monero.git Detailed Report: https://oss-fuzz.com/testcase?key=5096090558005248 Project: monero Fuzzing Engine: libFuzzer Fuzz Target: load-from-jsonfuzztests Job Type: libfuzzerasanmonero Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash...

njs:njs_process_script_fuzzer: Heap-use-after-free in njs_parser_property

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=5727429946769408 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x6250000408c0 Crash...

cryptofuzz:cryptofuzz-openssl-noasm: Use-of-uninitialized-value in fuzzing::memory::memory_test_msan

Detailed Report: https://oss-fuzz.com/testcase?key=4846477779402752 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::SSLClientHelloMessage::getSessionIDLength

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4865272770199552 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libspng:spng_read_fuzzer: Use-of-uninitialized-value in check_exif

Detailed Report: https://oss-fuzz.com/testcase?key=5644543818203136 Project: libspng Fuzzing Engine: libFuzzer Fuzz Target: spngreadfuzzer Job Type: libfuzzermsanlibspng Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: checkexif readnonidatchunks readchunks...

stb:stbi_read_fuzzer: Use-of-uninitialized-value in stbi__jpeg_huff_decode

Project: https://github.com/nothings/stb.git Detailed Report: https://oss-fuzz.com/testcase?key=6243539368542208 Project: stb Fuzzing Engine: libFuzzer Fuzz Target: stbireadfuzzer Job Type: libfuzzermsanstb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_ADPCM_IMA_CUNNING_fuzzer: Global-buffer-overflow in adpcm_ima_cunning_expand_nibble

Detailed Report: https://oss-fuzz.com/testcase?key=5717917221257216 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDADPCMIMACUNNINGfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000000a39768 Crash State:...

libavif:avif_decode_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5645512985542656 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: avifdecodefuzzer Job Type: libfuzzerasanlibavif Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN...

jsc: Heap-use-after-free in JSC::PolymorphicAccess::regenerate

Detailed Report: https://oss-fuzz.com/testcase?key=5147592910700544 Project: jsc Fuzzer: jsfuzzer Job Type: asanjsc Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60a000055950 Crash State: JSC::PolymorphicAccess::regenerate JSC::StructureStubInfo::addAccessCase...

harfbuzz:hb-draw-fuzzer: Heap-buffer-overflow in BEInt<short, 2>::operator short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5750654771658752 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-draw-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

envoy:stat_merger_fuzz_test: Crash in Envoy::Stats::SymbolTableImpl::Encoding::decodeTokens

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5713856297172992 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: statmergerfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000ac3b000 Cra...

pcre2:pcre2_fuzzer: Heap-buffer-overflow in set_table_bit

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed Report: https://oss-fuzz.com/testcase?key=5082586231865344 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61100000043b...

skia:api_skdescriptor: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5755812456955904 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apiskdescriptor Job Type: libfuzzermsanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000004050020 Crash State: NULL Sanitizer: memory MSAN Recommended...

open62541:fuzz_json_decode_encode: Index-out-of-bounds in writeJsonObjStart

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5682041805078528 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecodeencode Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address...

openthread:ip6-send-fuzzer: Stack-buffer-overflow in ot::ExtendedTlv::GetLength

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5751684162912256 Project: openthread Fuzzing Engine: honggfuzz Fuzz Target: ip6-send-fuzzer Job Type: honggfuzzasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash...

jsc: Segv on unknown address in jsc

Detailed Report: https://oss-fuzz.com/testcase?key=5757079010934784 Project: jsc Fuzzer: jsfuzzer Job Type: asanjsc Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: jsc JSC::JITCode::execute JSC::Interpreter::executeProgram Sanitizer: address ASAN Regressed:...

file:magic_fuzzer: Index-out-of-bounds in der_tag

Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=5642732083347456 Project: file Fuzzing Engine: libFuzzer Fuzz Target: magicfuzzer Job Type: libfuzzerubsanfile Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: dertag dercmp...

qt:setMarkdown: Heap-buffer-overflow in md_process_table_row

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5685425572413440 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: setMarkdown Job Type: libfuzzerasanqt Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000006b0 Crash State:...

wasmtime:differential: Crash in [stack]

Project: https://github.com/bytecodealliance/wasmtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5637784696258560 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: differential Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_oscar

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5077550909095936 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x608000331572 Crash State...

skia:skottie_json: Use-of-uninitialized-value in sksg::Matrix<SkM44>::setMatrix

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5760004743495680 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skottiejson Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

qt:setMarkdown: Heap-use-after-free in QScopedPointer<QObjectData, QScopedPointerDeleter<QObjectData> >::operator->

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5728348359884800 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: setMarkdown Job Type: libfuzzerasanqt Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6020000006d8 Crash State:...

unicorn:fuzz_emu_arm_arm: Crash in cpu_arm_exec_arm

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5662497394917376 Project: unicorn Fuzzing Engine: afl Fuzz Target: fuzzemuarmarm Job Type: aflasanunicorn Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000007e1c00 Crash Stat...

ffmpeg:ffmpeg_AV_CODEC_ID_DIRAC_fuzzer: Crash in ff_dequant_subband_32_sse4

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5729372837511168 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDDIRACfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000bba5000...

llvm:clang-fuzzer: Segv on unknown address in llvm::APInt::udiv

Detailed Report: https://oss-fuzz.com/testcase?key=5711340262129664 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: llvm::APInt::udiv llvm::APInt::sdiv...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::ActOnParamDeclarator

Detailed Report: https://oss-fuzz.com/testcase?key=5721768493056000 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::ActOnParamDeclarator...

opensc:fuzz_pkcs15_reader: Crash in parse_sec_attr_44

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5681169970757632 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerubsanopensc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000013a1000 Crash...

radare2:ia_fuzz: Heap-buffer-overflow in walk_exports

Project: https://github.com/radare/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5767342952284160 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x602000036837...

osquery:osqueryfuzz-config: Crash in rapidjson::internal::FastPath

Project: https://github.com/osquery/osquery.git Detailed Report: https://oss-fuzz.com/testcase?key=5751874325577728 Project: osquery Fuzzing Engine: libFuzzer Fuzz Target: osqueryfuzz-config Job Type: libfuzzerasanosquery Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0001000c821b...

imagemagick:encoder_mvg_fuzzer: Use-of-uninitialized-value in ClampToQuantum

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5755691830083584 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

skia:sksl2spirv: Heap-buffer-overflow in SkSL::FunctionDeclaration::determineFinalTypes

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5736337256218624 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2spirv Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6030000006f8...

libhevc:hevc_dec_fuzzer: Global-buffer-overflow in ihevcd_unpack_coeffs

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5101556982087680 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Global-buffer-overflow RE...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in decode_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5762455661182976 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegDEMUXERfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x60a000000046 Cras...

libmpeg2:mpeg2_dec_fuzzer: Heap-buffer-overflow in impeg2_fmt_conv_yuv420p_to_yuv420sp_uv

Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5672508879011840 Project: libmpeg2 Fuzzing Engine: afl Fuzz Target: mpeg2decfuzzer Job Type: aflasanlibmpeg2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

imagemagick/encoder_j2k_fuzzer: Heap-buffer-overflow in ReadJP2Image

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5634686653562880 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderj2kfuzzer Fuzz target binary: encoderj2kfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

readstat/fuzz_format_spss_commands: Stack-buffer-overflow in readstat_copy_quoted

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5701415210582016 Project: readstat Fuzzer: libFuzzerreadstatfuzzformatspsscommands Fuzz target binary: fuzzformatspsscommands Job Type: libfuzzerasanreadstat Platform Id: linux Crash Type:...