llvm:clang-fuzzer: Segv on unknown address in bool EvaluateComparisonBinaryOperator<IntExprEvaluator::VisitBinaryOperator

Detailed Report: https://oss-fuzz.com/testcase?key=5886443099783168 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: bool EvaluateComparisonBinaryOperator::Visit...

envoy:stat_merger_fuzz_test: Crash in std::__1::iterator_traits<char const*>::difference_type std::__1::count<char con

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5716755467206656 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: statmergerfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000009af9000 Cra...

arrow:parquet-arrow-fuzz: Crash in apache::thrift::protocol::TCompactProtocolT<apache::thrift::transport::TMemoryBu

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5726334745837568 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x619f000f05b0 Crash State:...

libavc:avc_dec_fuzzer: Heap-buffer-overflow in ih264d_decode_slice_thread

Project: https://android.googlesource.com/platform/external/libavc Detailed Report: https://oss-fuzz.com/testcase?key=5689831887994880 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

libhtp:fuzz_htp: Use-of-uninitialized-value in LzmaDec_TryDummy

Project: https://github.com/OISF/libhtp.git Detailed Report: https://oss-fuzz.com/testcase?key=5164808743157760 Project: libhtp Fuzzing Engine: libFuzzer Fuzz Target: fuzzhtp Job Type: libfuzzermsanlibhtp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick/encoder_heic_fuzzer: Bad-cast to std::__1::__shared_weak_count from invalid vptr in std::__1::shared_ptr<heif::HeifPixelImage>::~shared_ptr

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5669433122488320 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type:...

radare2/ia_fuzz: Heap-buffer-overflow in r_bin_mdmp_get_mem_info

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5080237558202368 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

libtiff/tiff_read_rgba_fuzzer: Use-of-uninitialized-value in adler32_z

Project: https://gitlab.com/libtiff/libtiff.git Detailed report: https://oss-fuzz.com/testcase?key=4834991885254656 Project: libtiff Fuzzer: libFuzzerlibtifftiffreadrgbafuzzer Fuzz target binary: tiffreadrgbafuzzer Job Type: libfuzzermsanlibtiff Platform Id: linux Crash Type:...

grpc/api_fuzzer: Crash in gpr_strdup

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5406804084260864 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fff00000000 Crash...

dlplibs/pdbfuzzer: Heap-buffer-overflow in ucnv_UTF8FromUTF8

Detailed report: https://oss-fuzz.com/testcase?key=6686971150729216 Project: dlplibs Fuzzer: libFuzzerdlplibspdbfuzzer Fuzz target binary: pdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x606000000300 Crash State: ucnvUTF8FromUT...

json: Heap-buffer-overflow in nlohmann::basic_json<std::__1::map, std::__1::vector, std::__1::basic_string<cha

Project: https://github.com/nlohmann/json.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6541936374579200 Project: json Fuzzer: libFuzzerjsonfuzzer-parsecbor Fuzz target binary: fuzzer-parsecbor Job Type: libfuzzerasanjson Platform Id: linux Crash Type:...

oniguruma:fuzzer: Stack-buffer-overflow in onigenc_unicode_get_case_fold_codes_by_str

Project: https://github.com/kkos/oniguruma.git Detailed Report: https://oss-fuzz.com/testcase?key=5142910239244288 Project: oniguruma Fuzzing Engine: afl Fuzz Target: fuzzer Job Type: aflasanoniguruma Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7ffc76be7664 Crash...

openexr:openexr_scanlines_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4721411661496320 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrscanlinesfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

imagemagick:encoder_dng_fuzzer: Global-buffer-overflow in LibRaw::parseSigmaMakernote

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5693021307011072 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderdngfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Global-buffer-overflow READ 4...

rapidjson:fuzzer: Crash in void rapidjson::PutN<rapidjson::GenericStringBuffer<rapidjson::UTF8<char>, rapid

Detailed Report: https://oss-fuzz.com/testcase?key=5737460289503232 Project: rapidjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasani386rapidjson Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x4f5cf10a Crash State: void rapidjson::PutN, rapid...

binutils:fuzz_bfd: Heap-buffer-overflow in bfd_getb32

Detailed Report: https://oss-fuzz.com/testcase?key=5766948239704064 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzbfd Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000000351 Crash State: bfdgetb32 sombfdcountarsymbols somslurparm...

libssh2:ssh2_client_fuzzer: Heap-buffer-overflow in kex_agree_methods

Project: https://github.com/cmeister2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5129964331991040 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerasanlibssh2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_PNG_fuzzer: Crash in av_freep

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5768418552184832 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDPNGfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00000045dfd0...

hostap/ap-mgmt-fuzzer: Crash in hostapd_is_dfs_required

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5666753884979200 Project: hostap Fuzzer: aflhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: aflasanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f6600000018 Crash...

imagemagick/crop_fuzzer: Use-of-uninitialized-value in ReadBlobLZWByte

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4905612635799552 Project: imagemagick Fuzzer: libFuzzerimagemagickcropfuzzer Fuzz target binary: cropfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

libreoffice/docxfuzzer: Bad-cast to writerfilter::ooxml::OOXMLFastContextHandlerShape from writerfilter::ooxml::OOXMLFastContextHandlerWrapper in writerfilter::ooxml::OOXMLFastContextHandlerWrapper::lcl_createFastChildContext

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6132449609252864 Project: libreoffice Fuzzer: libFuzzerlibreofficedocxfuzzer Fuzz target binary: docxfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

util-linux:test_fdisk_script_fuzz: Heap-buffer-overflow in fdisk_partname

Project: https://github.com/karelzak/util-linux.git Detailed Report: https://oss-fuzz.com/testcase?key=5705475858104320 Project: util-linux Fuzzing Engine: libFuzzer Fuzz Target: testfdiskscriptfuzz Job Type: libfuzzerasani386util-linux Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

libheif:encoder-fuzzer: Heap-buffer-overflow in x265::PicYuv::copyFromPicture

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5148929759641600 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: encoder-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

opus:opus_decode_fuzzer_fixed: Use-of-uninitialized-value in celt_decode_lost

Project: https://gitlab.xiph.org/xiph/opus.git Detailed Report: https://oss-fuzz.com/testcase?key=6387771504852992 Project: opus Fuzzing Engine: libFuzzer Fuzz Target: opusdecodefuzzerfixed Job Type: libfuzzermsanopus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

quickjs:fuzz_compile: Heap-use-after-free in JS_DefineProperty

Detailed Report: https://oss-fuzz.com/testcase?key=5658108885204992 Project: quickjs Fuzzing Engine: afl Fuzz Target: fuzzcompile Job Type: aflasanquickjs Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60900025f8e8 Crash State: JSDefineProperty buildbacktrace...

libreoffice:ww6fuzzer: Segv on unknown address in com::sun::star::uno::BaseReference::iquery

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5948909376765952 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Segv on unknown address Crash Address...

ffmpeg:ffmpeg_BSF_HEVC_METADATA_fuzzer: Index-out-of-bounds in cbs_h265_read_slice_segment_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5160442882424832 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFHEVCMETADATAfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

imagemagick:encoder_dxt1_fuzzer: Use-of-uninitialized-value in PerceptibleReciprocal

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5070329724796928 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdxt1fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

ntp:fuzz_ntpd_receive: Use-of-uninitialized-value in receive

Detailed Report: https://oss-fuzz.com/testcase?key=5684730627883008 Project: ntp Fuzzing Engine: libFuzzer Fuzz Target: fuzzntpdreceive Job Type: libfuzzermsanntp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: receive fuzzntpdreceive.c fuzzntpdreceive.c...

wireshark/fuzzshark_ip_proto-udp: Global-buffer-overflow in decode_tlv

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5698027312906240 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in BEInt<unsigned int, 4>::operator unsigned int

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5685596677210112 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

mbedtls/fuzz_privkey: Heap-buffer-overflow in pk_get_ecparams

Project: https://github.com/ARMmbed/mbedtls.git https://github.com/catenacyber/mbedtls.git Detailed report: https://oss-fuzz.com/testcase?key=5922466286272512 Project: mbedtls Fuzzer: aflmbedtlsfuzzprivkey Fuzz target binary: fuzzprivkey Job Type: aflasanmbedtls Platform Id: linux Crash Type:...

imagemagick/encoder_heic_fuzzer: Heap-buffer-overflow in readInt

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5714693059510272 Project: imagemagick Fuzzer: aflimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

gdal: Heap-buffer-overflow in NTFFileReader::ProcessAttRec

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4683413271347200 Project: gdal Fuzzer: libFuzzergdalshapefuzzer Fuzz target binary: shapefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

file: Heap-buffer-overflow in cdf_getuint32

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=4879865188712448 Project: file Fuzzer: aflfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: aflasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x611000000280 Cra...

re2: Use-of-uninitialized-value in re2::Prog::MarkSuccessors

Project: https://code.googlesource.com/re2 Detailed report: https://oss-fuzz.com/testcase?key=5285093406932992 Project: re2 Fuzzer: libFuzzerre2fuzzer Fuzz target binary: re2fuzzer Job Type: libfuzzermsanre2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

grpc: Heap-buffer-overflow in grpc_base64_decode

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5595941564317696 Project: grpc Fuzzer: libFuzzergrpcserverfuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x608000000172 Crash State:...

libreoffice:fodtfuzzer: Container-overflow in std::__1::unique_ptr<SwXMLTableRow_Impl, std::__1::default_delete<SwXMLTableRow_

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5766728887566336 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: fodtfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow READ 8 Crash...

skia:sksl2spirv: Heap-use-after-free in SkSL::VariableReference::~VariableReference

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=4899879000997888 Project: skia Fuzzing Engine: afl Fuzz Target: sksl2spirv Job Type: aflasanskia Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60e00002c218 Crash State:...

llvm:clang-objc-fuzzer: Segv on unknown address in llvm::llvm_unreachable_internal

Detailed Report: https://oss-fuzz.com/testcase?key=5423964099969024 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: llvm::llvmunreachableinternal...

poppler:pdf_fuzzer: Use-of-uninitialized-value in poppler::destination_private::destination_private

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5650183043153920 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

yara:pe_fuzzer: Heap-buffer-overflow in pe_parse_debug_directory

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5657130592108544 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: pefuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6210000061f9...

ndpi:fuzz_ndpi_reader: Heap-use-after-free in ndpi_workflow_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5074519341662208 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireader Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x612001eabd00 Crash State:...

openthread:radio-receive-done-fuzzer: Stack-buffer-overflow in ot::Message::Write

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5110937602490368 Project: openthread Fuzzing Engine: afl Fuzz Target: radio-receive-done-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 11 Crash...

ibmswtpm2:fuzz_tpm_server: Crash in libcrypto.soNUMBER

Detailed Report: https://oss-fuzz.com/testcase?key=5645756446277632 Project: ibmswtpm2 Fuzzing Engine: libFuzzer Fuzz Target: fuzztpmserver Job Type: libfuzzerasanibmswtpm2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000001460000 Crash State: libcrypto.soNUMBER Sanitizer: address...

libssh2:ssh2_client_fuzzer: Heap-buffer-overflow in _libssh2_ntohu32

Project: https://github.com/cmeister2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5196894417977344 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerasanlibssh2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in strncpy

Detailed Report: https://oss-fuzz.com/testcase?key=5633780185825280 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f89f7151530 Crash State: strncpy...

mbedtls/fuzz_client: Heap-use-after-free in mbedtls_x509_crt_free

Project: https://github.com/ARMmbed/mbedtls.git Detailed report: https://oss-fuzz.com/testcase?key=5142637603979264 Project: mbedtls Fuzzer: aflmbedtlsfuzzclient Fuzz target binary: fuzzclient Job Type: aflasanmbedtls Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

libvpx/vpx_dec_fuzzer_vp8: Crash in subpixel_ssse3.asm:1165

Project: https://chromium.googlesource.com/webm/libvpx Detailed report: https://oss-fuzz.com/testcase?key=5145943336288256 Project: libvpx Fuzzer: libFuzzerlibvpxvpxdecfuzzervp8 Fuzz target binary: vpxdecfuzzervp8 Job Type: libfuzzerasanlibvpx Platform Id: linux Crash Type: UNKNOWN READ Crash...

mupdf/pdf_fuzzer: Heap-use-after-free in fz_fin_cached_color_converter

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=4866555528609792 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6060000005f8...