openssl:client: Heap-use-after-free in CRYPTO_DOWN_REF

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5131160508432384 Project: openssl Fuzzing Engine: libFuzzer Fuzz Target: client Job Type: libfuzzerasanopenssl Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address: 0x60f00002d56...

ffmpeg:ffmpeg_AV_CODEC_ID_MAGICYUV_fuzzer: Heap-buffer-overflow in add_left_pred_int16_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5759562508664832 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMAGICYUVfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

ndpi:fuzz_ndpi_reader: Heap-use-after-free in ndpi_workflow_process_packet

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5074519341662208 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireader Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x612001eabd00 Crash State:...

openthread:radio-receive-done-fuzzer: Stack-buffer-overflow in ot::Message::Write

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5110937602490368 Project: openthread Fuzzing Engine: afl Fuzz Target: radio-receive-done-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 11 Crash...

ibmswtpm2:fuzz_tpm_server: Crash in libcrypto.soNUMBER

Detailed Report: https://oss-fuzz.com/testcase?key=5645756446277632 Project: ibmswtpm2 Fuzzing Engine: libFuzzer Fuzz Target: fuzztpmserver Job Type: libfuzzerasanibmswtpm2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000001460000 Crash State: libcrypto.soNUMBER Sanitizer: address...

libical/libical_fuzzer: Use-of-uninitialized-value in parser_get_next_char

Project: https://github.com/libical/libical.git Detailed report: https://oss-fuzz.com/testcase?key=5695048311635968 Project: libical Fuzzer: libFuzzerlibicalfuzzer Fuzz target binary: libicalfuzzer Job Type: libfuzzermsanlibical Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libvpx/vpx_dec_fuzzer_vp8: Crash in subpixel_ssse3.asm:1165

Project: https://chromium.googlesource.com/webm/libvpx Detailed report: https://oss-fuzz.com/testcase?key=5145943336288256 Project: libvpx Fuzzer: libFuzzerlibvpxvpxdecfuzzervp8 Fuzz target binary: vpxdecfuzzervp8 Job Type: libfuzzerasanlibvpx Platform Id: linux Crash Type: UNKNOWN READ Crash...

mbedtls/fuzz_privkey: Heap-buffer-overflow in pk_get_ecparams

Project: https://github.com/ARMmbed/mbedtls.git https://github.com/catenacyber/mbedtls.git https://github.com/Mbed-TLS/mbedtls.git Detailed report: https://oss-fuzz.com/testcase?key=5922466286272512 Project: mbedtls Fuzzer: aflmbedtlsfuzzprivkey Fuzz target binary: fuzzprivkey Job Type:...

yara/rules_fuzzer: Heap-double-free in yara_yyparse

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=6474914958671872 Project: yara Fuzzer: libFuzzeryararulesfuzzer Fuzz target binary: rulesfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-double-free Crash Address:...

fasthttp:fuzz_request: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5745696710590464 Project: fasthttp Fuzzing Engine: libFuzzer Fuzz Target: fuzzrequest Job Type: libfuzzerasanfasthttp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000555d7b8 Crash State: NULL Sanitizer: address ASAN Recommended...

yara:pe_fuzzer: Heap-buffer-overflow in pe_parse_debug_directory

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5657130592108544 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: pefuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6210000061f9...

freetype2:truetype: Heap-double-free in woff2_open_font

Detailed Report: https://oss-fuzz.com/testcase?key=5637818264584192 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: truetype Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x62c000000200 Crash State: woff2openfont sfntopenfont sfntinitfac...

libhevc:hevc_dec_fuzzer: Stack-use-after-return in ihevcd_process_thread

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5108935064813568 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasanlibhevc Platform Id: linux Crash Type: Stack-use-after-return READ 8...

chakra: Crash in int JsUtil::BaseDictionary<void*, unsigned int, Memory::RecyclerNonLeafAllocator

Detailed report: https://oss-fuzz.com/testcase?key=5727599193489408 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00008fff8800 Crash State: int JsUtil::BaseDictionary :: Sanitizer: address ASAN Regressed:...

mbedtls/fuzz_client: Heap-use-after-free in mbedtls_x509_crt_free

Project: https://github.com/ARMmbed/mbedtls.git https://github.com/catenacyber/mbedtls.git Detailed report: https://oss-fuzz.com/testcase?key=5142637603979264 Project: mbedtls Fuzzer: aflmbedtlsfuzzclient Fuzz target binary: fuzzclient Job Type: aflasanmbedtls Platform Id: linux Crash Type:...

open62541/fuzz_binary_message: Heap-use-after-free in String_clear

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5749297120804864 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

php/php-fuzz-exif: Heap-buffer-overflow in _estrndup

Detailed report: https://oss-fuzz.com/testcase?key=5740255098961920 Project: php Fuzzer: libFuzzerphpphp-fuzz-exif Fuzz target binary: php-fuzz-exif Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6120000032e0 Crash State: estrndup...

chakra: Crash in Js::PathTypeHandlerBase::AddPropertyInternal

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=6042404720214016 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x5617b9e05560 Crash State:...

unrar/unrar_fuzzer: Index-out-of-bounds in Unpack::LongLZ

Detailed report: https://oss-fuzz.com/testcase?key=4683334295748608 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzerubsanunrar Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: Unpack::LongLZ Unpack::Unpack15...

gnutls: Stack-buffer-overflow in cdk_pk_get_keyid

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6746150208012288 Project: gnutls Fuzzer: libFuzzergnutlsopenpgpcertparserfuzzer Fuzz target binary: gnutlsopenpgpcertparserfuzzer Job Type: libfuzzerasangnutls Platform Id: linux...

checker-framework:UtilCheckerFuzzer: Security exception in org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategories

Project: https://github.com/typetools/checker-framework.git Detailed Report: https://oss-fuzz.com/testcase?key=6590608346513408 Project: checker-framework Fuzzing Engine: libFuzzer Fuzz Target: UtilCheckerFuzzer Job Type: libfuzzerasanchecker-framework Platform Id: linux Crash Type: Security...

graphicsmagick:coder_PTIF_fuzzer: Stack-buffer-overflow in _TIFFVGetField

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5790874811105280 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPTIFfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE ...

suricata:fuzz_sigpcap_aware: Null-dereference READ in AlertJson

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5182217597091840 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcapaware Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

clamav:clamav_dbload_CRB_fuzzer: Crash in fp_cmp_mag

Detailed Report: https://oss-fuzz.com/testcase?key=5086737971412992 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCRBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61d000011e48 Crash State: fpcmpmag crtmgrtrustlistlookup...

envoy:network_writefilter_fuzz_test: Heap-buffer-overflow in Envoy::Extensions::NetworkFilters::MongoProxy::Bson::BufferHelper::removeString

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5631895071752192 Project: envoy Fuzzing Engine: honggfuzz Fuzz Target: networkwritefilterfuzztest Job Type: honggfuzzasanenvoy Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address...

skia:sksl2spirv: Segv on unknown address in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6198631948091392 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2spirv Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

llvm:clang-objc-fuzzer: Global-buffer-overflow in ProcessUCNEscape

Detailed Report: https://oss-fuzz.com/testcase?key=5085532385968128 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000ccfc3dc Crash State: ProcessUCNEscape...

wolfssl:fuzzer-wolfssl-rsa: Index-out-of-bounds in fp_read_radix_16

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4899197473783808 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-rsa Job Type: libfuzzerubsanwolfssl Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

envoy:xds_fuzz_test: Heap-use-after-free in std::__1::__list_iterator<std::__1::unique_ptr<Envoy::Server::ListenerImpl, std:

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5715241737125888 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: xdsfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x603000f1b6...

monero:cold-transaction_fuzz_tests: Heap-buffer-overflow in std::__1::enable_if<boost::archive::portable_binary_iarchive::is_loading::value,

Project: https://github.com/monero-project/monero.git Detailed Report: https://oss-fuzz.com/testcase?key=5203144052310016 Project: monero Fuzzing Engine: libFuzzer Fuzz Target: cold-transactionfuzztests Job Type: libfuzzerasanmonero Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in clip

Detailed Report: https://oss-fuzz.com/testcase?key=5758254161592320 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clip...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayVisitor>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5089431154589696 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

lwan:config_fuzzer: Global-buffer-overflow in lex_multiline_string

Project: git://github.com/lpereira/lwan Detailed Report: https://oss-fuzz.com/testcase?key=5642641999396864 Project: lwan Fuzzing Engine: afl Fuzz Target: configfuzzer Job Type: aflasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x00000114d3e0 Crash State:...

aspell:aspell_fuzzer: Heap-buffer-overflow in acommon::DecodeDirect<unsigned int>::decode

Project: https://github.com/gnuaspell/aspell.git Detailed Report: https://oss-fuzz.com/testcase?key=5686369787052032 Project: aspell Fuzzing Engine: afl Fuzz Target: aspellfuzzer Job Type: aflasanaspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60a0000003b0 Crash...

zlib-ng/compress_fuzzer: Negative-size-param in compress_fuzzer.c

Project: https://github.com/sebpop/zlib-ng.git https://github.com/zlib-ng/zlib-ng.git Detailed report: https://oss-fuzz.com/testcase?key=4634639783165952 Project: zlib-ng Fuzzer: libFuzzerzlib-ngcompressfuzzer Fuzz target binary: compressfuzzer Job Type: libfuzzerasanzlib-ng Platform Id: linux...

skia/api_raster_n32_canvas: Use-of-uninitialized-value in void arith_span<true>

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5667288297504768 Project: skia Fuzzer: libFuzzerskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick/encoder_mvg_fuzzer: Heap-buffer-overflow in TracePoint

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5655158907207680 Project: imagemagick Fuzzer: aflimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

dlplibs/lrffuzzer: Index-out-of-bounds in offsetTOCLookupFn

Detailed report: https://oss-fuzz.com/testcase?key=6333949702832128 Project: dlplibs Fuzzer: libFuzzerdlplibslrffuzzer Fuzz target binary: lrffuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: offsetTOCLookupFn doLoadFromCommonDat...

grpc: Crash in gpr_strdup

Detailed report: https://oss-fuzz.com/testcase?key=5391467415601152 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffc0 Crash State: gprstrdup grpclbaddressescopy...

apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in org.yaml.snakeyaml.parser.ParserImpl$ParseBlockMappingValueComment.produce

Detailed Report: https://oss-fuzz.com/testcase?key=4883712972488704 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

qt:qtbase_gui_image_qimage_loadfromdata: Heap-use-after-free in QString::QString

Detailed Report: https://oss-fuzz.com/testcase?key=5050369662910464 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguiimageqimageloadfromdata Job Type: libfuzzerasanqt Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address: 0x607000003c20 Crash State: QString::QString...

cryptofuzz:cryptofuzz-boringssl-noasm: Index-out-of-bounds in _sp_add_off

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=4643724212961280 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzerubsancryptofuzz Platform Id: linux Crash Type: Index-out-of-bounds...

apache-commons-bcel:BcelFuzzer: Security exception in org.apache.bcel.classfile.ElementValue.readElementValue

Detailed Report: https://oss-fuzz.com/testcase?key=5127197608509440 Project: apache-commons-bcel Fuzzing Engine: libFuzzer Fuzz Target: BcelFuzzer Job Type: libfuzzerasanapache-commons-bcel Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

tpm2:tpm2_execute_command_fuzzer: Index-out-of-bounds in MemoryRemoveTrailingZeros

Project: https://chromium.googlesource.com/chromiumos/thirdparty/tpm2 Detailed Report: https://oss-fuzz.com/testcase?key=4636883601195008 Project: tpm2 Fuzzing Engine: libFuzzer Fuzz Target: tpm2executecommandfuzzer Job Type: libfuzzerubsantpm2 Platform Id: linux Crash Type: Index-out-of-bounds...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in move_explicit_Hcation

Detailed Report: https://oss-fuzz.com/testcase?key=5699348764688384 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: inchiinputfuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62e00000d200 Crash State: moveexplicitHcation...

openh264:decoder_fuzzer: Heap-buffer-overflow in WelsDec::WelsCheckAndRecoverForFutureDecoding

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5153819073445888 Project: openh264 Fuzzing Engine: afl Fuzz Target: decoderfuzzer Job Type: aflasanopenh264 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7f6dc5342c1b Cra...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::SerializedPageReader::DecompressIfNeeded

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5086499571499008 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Crash in threedostr_probe

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5152950446718976 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x603fe7000050 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_COOK_fuzzer: Heap-buffer-overflow in cook_decode_init

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5762459498184704 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDCOOKfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

c-blosc2:decompress_fuzzer: Heap-buffer-overflow in tinfl_decompress

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5120916286341120 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...