ots:ots-fuzzer: Heap-buffer-overflow in LZ4_decompress_safe_partial

Project: https://github.com/khaledhosny/ots.git Detailed Report: https://oss-fuzz.com/testcase?key=5662681298370560 Project: ots Fuzzing Engine: libFuzzer Fuzz Target: ots-fuzzer Job Type: libfuzzerasanots Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6180000007d0...

imagemagick:encoder_heic_fuzzer: Crash in slice_segment_header::operator=

Detailed Report: https://oss-fuzz.com/testcase?key=5689229497860096 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xbebebebe Crash State: slicesegmentheader::operator=...

ffmpeg:ffmpeg_BSF_TRACE_HEADERS_fuzzer: Heap-buffer-overflow in cbs_jpeg_split_fragment

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5673285471961088 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFTRACEHEADERSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::PerformImplicitConversion

Detailed Report: https://oss-fuzz.com/testcase?key=5693858247868416 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::PerformImplicitConversion...

samba:fuzz_ndr_nbt_TYPE_STRUCT: Heap-buffer-overflow in ndr_push_bytes

Detailed Report: https://oss-fuzz.com/testcase?key=5690460391866368 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrnbtTYPESTRUCT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x608000000200 Crash State: ndrpushbytes...

binutils:fuzz_bfd: Heap-buffer-overflow in xcoff64_slurp_armap

Detailed Report: https://oss-fuzz.com/testcase?key=5127251264012288 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzbfd Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x6210002f7ce0 Crash State: xcoff64slurparmap xcoff64archivep...

gdal:ogr_fuzzer: Heap-use-after-free in VSIFSeekL

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5631257522470912 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: ogrfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf4e04dd0 Crash...

dlplibs:wdbfuzzer: Crash in QuattroParserInternal::State::getColor

Detailed Report: https://oss-fuzz.com/testcase?key=5735536765698048 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: wdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000004c748bc Crash State: QuattroParserInternal::State::getColor...

ffmpeg:ffmpeg_BSF_HEVC_MP4TOANNEXB_fuzzer: Heap-buffer-overflow in hevc_mp4toannexb_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5169193398042624 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFHEVCMP4TOANNEXBfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Addres...

libreoffice:cgmfuzzer: Heap-buffer-overflow in CGM::ImplDoClass7

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5129086141988864 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_get_attribute_bytes_alloc

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5704639777603584 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::LookupQualifiedName

Detailed Report: https://oss-fuzz.com/testcase?key=5702033537761280 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::LookupQualifiedName...

llvm:clang-objc-fuzzer: Segv on unknown address in clang::Parser::ParseObjCInterfaceDeclList

Detailed Report: https://oss-fuzz.com/testcase?key=5696539704164352 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Parser::ParseObjCInterfaceDeclList...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in coolkey_v1_get_attribute_len

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5744665433473024 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libheif:file-fuzzer: Crash in slice_segment_header::operator=

Detailed Report: https://oss-fuzz.com/testcase?key=5742814906548224 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasani386libheif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xbebebebe Crash State: slicesegmentheader::operator=...

libmpeg2:mpeg2_dec_fuzzer: Crash in ideint_process

Project: https://android.googlesource.com/platform/external/libmpeg2 Detailed Report: https://oss-fuzz.com/testcase?key=5683041813135360 Project: libmpeg2 Fuzzing Engine: libFuzzer Fuzz Target: mpeg2decfuzzer Job Type: libfuzzermsanlibmpeg2 Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in bebytes2ushort

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5633829448712192 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in derive_collocated_motion_vectors

Detailed Report: https://oss-fuzz.com/testcase?key=5765356846579712 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: derivecollocatedmotionvectors...

imagemagick:ping_dng_fuzzer: Heap-buffer-overflow in LibRaw::sget4

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5697854828183552 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

mruby:mruby_fuzzer: Crash in str_decref

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6321459584827392 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000002a86 Crash State:...

openh264:decoder_fuzzer: Heap-use-after-free in WelsDec::SetUnRef

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5746521706594304 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free WRITE 1 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_XMA2_fuzzer: Index-out-of-bounds in xma_decode_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5635373899710464 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDXMA2fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

libreoffice:pptfuzzer: Heap-use-after-free in SvxMSDffManager::SolveSolver

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5718371501080576 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

libreoffice:cgmfuzzer: Heap-use-after-free in CGM::ImplGetUI

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5695809299677184 Project: libreoffice Fuzzing Engine: afl Fuzz Target: cgmfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

libreoffice:docxfuzzer: Heap-use-after-free in SwIndex::Remove

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5638500712185856 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: docxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

harfbuzz:hb-subset-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5758358618898432 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzerasani386harfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

lwan:config_fuzzer: Global-buffer-overflow in backup

Project: git://github.com/lpereira/lwan Detailed Report: https://oss-fuzz.com/testcase?key=5745367148134400 Project: lwan Fuzzing Engine: afl Fuzz Target: configfuzzer Job Type: aflasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x00000114d3e0 Crash State:...

mysql-server:fuzz_stmt_fetch: Heap-buffer-overflow in read_one_row_complete

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=5685853497589760 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzstmtfetch Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

open62541:fuzz_mdns_message: Stack-buffer-overflow in _label

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6309580862128128 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzmdnsmessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

imagemagick:rotate_fuzzer: Use-of-uninitialized-value in ResamplePixelColor

Detailed Report: https://oss-fuzz.com/testcase?key=5692380841246720 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: rotatefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ResamplePixelColor DistortImage...

imagemagick:encoder_viff_fuzzer: Use-of-uninitialized-value in ClampToQuantum

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5726728634236928 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodervifffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

usrsctp:fuzzer_connect: Heap-buffer-overflow in sctp_handle_asconf

Project: https://github.com/weinrank/usrsctp.git Detailed Report: https://oss-fuzz.com/testcase?key=5665964259016704 Project: usrsctp Fuzzing Engine: afl Fuzz Target: fuzzerconnect Job Type: aflasanusrsctp Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x611000371180...

usrsctp:fuzzer_connect: Use-of-uninitialized-value in sctp_find_ifa_by_addr

Project: https://github.com/weinrank/usrsctp.git Detailed Report: https://oss-fuzz.com/testcase?key=5649242005176320 Project: usrsctp Fuzzing Engine: libFuzzer Fuzz Target: fuzzerconnect Job Type: libfuzzermsanusrsctp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

graphicsmagick:coder_JPG_fuzzer: Heap-buffer-overflow in GenerateEXIFAttribute

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5647510596485120 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJPGfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ...

freetype2:cidtype1: Heap-double-free in woff2_open_font

Detailed Report: https://oss-fuzz.com/testcase?key=5698158495006720 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: cidtype1 Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x624000002100 Crash State: woff2openfont sfntopenfont sfntinitfac...

freetype2:type1: Crash in woff2_open_font

Detailed Report: https://oss-fuzz.com/testcase?key=5633873572003840 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: type1 Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff8000 Crash State: woff2openfont sfntopenfont sfntinitface...

usrsctp:fuzzer_connect: Use-of-uninitialized-value in sctp_handle_asconf

Project: https://github.com/weinrank/usrsctp.git Detailed Report: https://oss-fuzz.com/testcase?key=5741506257747968 Project: usrsctp Fuzzing Engine: libFuzzer Fuzz Target: fuzzerconnect Job Type: libfuzzermsanusrsctp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

poppler:pdf_fuzzer: Use-of-uninitialized-value in AnnotAppearanceBuilder::drawText

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5736326871121920 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libhevc:hevc_dec_fuzzer: Stack-use-after-return in ihevcd_process_thread

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5176835272343552 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Stack-use-after-return RE...

xvid:fuzzer-decoder: Crash in decoder_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5651853588561920 Project: xvid Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decoder Job Type: libfuzzermsanxvid Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000fffff801 Crash State: decoderdecode xviddecore fuzzer.cpp Sanitizer...

libhevc:hevc_dec_fuzzer: Stack-use-after-return in ihevcd_process_thread

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5728826448936960 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasanlibhevc Platform Id: linux Crash Type: Stack-use-after-return READ 8...

matio:matio_fuzzer: Crash in H5MM_xstrdup

Detailed Report: https://oss-fuzz.com/testcase?key=5711189249622016 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x610000060148 Crash State: H5MMxstrdup H5Genttolink H5Gnodeiterate Sanitizer: address...

openthread:radio-receive-done-fuzzer: Stack-buffer-overflow in ot::NetworkData::Leader::SendCommissioningGetResponse

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5741928179564544 Project: openthread Fuzzing Engine: libFuzzer Fuzz Target: radio-receive-done-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow REA...

matio:matio_fuzzer: Crash in H5VM_memcpyvv

Detailed Report: https://oss-fuzz.com/testcase?key=5668320912605184 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000522737c0 Crash State: H5VMmemcpyvv H5Dcompactreadvv H5Dselectio...

libhevc:hevc_dec_fuzzer: Heap-buffer-overflow in ihevcd_mv_merge

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5747011424354304 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Heap-buffer-overflow READ...

libxslt:xpath: Heap-buffer-overflow in xsltFormatNumberConversion

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5656808252768256 Project: libxslt Fuzzing Engine: afl Fuzz Target: xpath Job Type: aflasanlibxslt Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60300000131f Crash...

libhevc:hevc_dec_fuzzer: Heap-buffer-overflow in ihevcd_parse_slice_data

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5696728530944000 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasanlibhevc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1...

cryptofuzz:cryptofuzz-openssl: Heap-buffer-overflow in cipher_hw_desx_cbc_initkey

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5678733813350400 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl Job Type: libfuzzerasani386cryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ ...

grpc:client_fuzzer: Index-out-of-bounds in grpc_static_mdelem_for_static_strings

Project: https://github.com/grpc/grpc.git Detailed Report: https://oss-fuzz.com/testcase?key=5665813578645504 Project: grpc Fuzzing Engine: libFuzzer Fuzz Target: clientfuzzer Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

libssh2:ssh2_client_fuzzer: Heap-buffer-overflow in _libssh2_ntohu32

Project: https://github.com/cmeister2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5651535966502912 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerasanlibssh2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...