libfdk-aac/aacDecoder_DecodeFrame: Stack-buffer-overflow in calcAvgGain

Detailed report: https://oss-fuzz.com/testcase?key=5693677388693504 Project: libfdk-aac Fuzzer: libFuzzerlibfdk-aacaacDecoderDecodeFrame Fuzz target binary: aacDecoderDecodeFrame Job Type: libfuzzerasanlibfdk-aac Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

wireshark/fuzzshark_ip_proto-udp: Crash in tvb_ensure_bytes_exist

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5709248316571648 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerubsanwireshark Platform Id: linux Crash Type:...

imagemagick/encoder_bmp_fuzzer: Use-of-uninitialized-value in cmsMLUgetASCII

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5742789528125440 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderbmpfuzzer Fuzz target binary: encoderbmpfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

libsass/data_context_fuzzer: Bad-cast to Sass::PreValue from Sass::Unary_Expression in Sass::SharedImpl<Sass::PreValue>::SharedImpl<Sass::Expression>

Detailed report: https://oss-fuzz.com/testcase?key=5636165890211840 Project: libsass Fuzzer: libFuzzerdatacontextfuzzer Fuzz target binary: datacontextfuzzer Job Type: libfuzzerubsanlibsass Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000031e1f40 Crash State: Bad-cast to Sass::PreVal...

libsass/data_context_fuzzer: Heap-buffer-overflow in Sass::Prelexer::quoted_string

Project: https://github.com/sass/libsass.git Detailed report: https://oss-fuzz.com/testcase?key=4812489848520704 Project: libsass Fuzzer: afllibsassdatacontextfuzzer Fuzz target binary: datacontextfuzzer Job Type: aflasanlibsass Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

icu/collator_rulebased_fuzzer: Crash in icu_64::UCharsTrie::branchNext

Detailed report: https://oss-fuzz.com/testcase?key=5693360544677888 Project: icu Fuzzer: libFuzzericucollatorrulebasedfuzzer Fuzz target binary: collatorrulebasedfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f8c94ee4a30 Crash State:...

ffmpeg/ffmpeg_AV_CODEC_ID_VORBIS_fuzzer: Crash in vorbis_floor0_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5729191309344768 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDVORBISfuzzer Fuzz target binary: ffmpegAVCODECIDVORBISfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ...

ffmpeg/ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in read_sb_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5658343542095872 Project: ffmpeg Fuzzer: libFuzzerffmpegDEMUXERfuzzer Fuzz target binary: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Cra...

c-ares/ares_parse_reply_fuzzer: NULL

Project: https://github.com/c-ares/c-ares.git Detailed report: https://oss-fuzz.com/testcase?key=5697835103682560 Project: c-ares Fuzzer: libFuzzerc-aresaresparsereplyfuzzer Fuzz target binary: aresparsereplyfuzzer Job Type: libfuzzerubsanc-ares Platform Id: linux Crash Type: Null-dereference REA...

c-ares/ares_parse_reply_fuzzer: Heap-buffer-overflow in ares_parse_aaaa_reply

Project: https://github.com/c-ares/c-ares.git Detailed report: https://oss-fuzz.com/testcase?key=5650695891451904 Project: c-ares Fuzzer: libFuzzerc-aresaresparsereplyfuzzer Fuzz target binary: aresparsereplyfuzzer Job Type: libfuzzerasanc-ares Platform Id: linux Crash Type: Heap-buffer-overflow...

libarchive/libarchive_fuzzer: Crash in crc32

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5668631809097728 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: UNKNOWN READ Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Index-out-of-bounds in apply_band_extension

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5671602181636096 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDATRAC9fuzzer Fuzz target binary: ffmpegAVCODECIDATRAC9fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_MOTIONPIXELS_fuzzer: Index-out-of-bounds in mp_get_vlc

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5168534407086080 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMOTIONPIXELSfuzzer Fuzz target binary: ffmpegAVCODECIDMOTIONPIXELSfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

njs/njs_process_script_fuzzer: Use-of-uninitialized-value in add_name

Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5644192103006208 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

karchive/karchive_fuzzer: Crash in KGzipFilter::uncompress_noop

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5739739270873088 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x72b0000100...

gdal/gtiff_mmap: Crash in DumpModeDecode

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5743325837000704 Project: gdal Fuzzer: libFuzzergdalgtiffmmap Fuzz target binary: gtiffmmap Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000a30fc38 Crash...

hostap/p2p-fuzzer-action: Use-of-uninitialized-value in p2p_send_action

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5679294988156928 Project: hostap Fuzzer: libFuzzerhostapp2p-fuzzer-action Fuzz target binary: p2p-fuzzer-action Job Type: libfuzzermsanhostap Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

imagemagick/encoder_psd_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5703608798019584 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpsdfuzzer Fuzz target binary: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

llvm/llvm-opt-fuzzer--x86_64-loop_vectorize: Heap-use-after-free in WriteAsOperandInternal

Detailed report: https://oss-fuzz.com/testcase?key=5692243106594816 Project: llvm Fuzzer: libFuzzerllvmllvm-opt-fuzzer--x8664-loopvectorize Fuzz target binary: llvm-opt-fuzzer--x8664-loopvectorize Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

karchive/karchive_fuzzer: Heap-buffer-overflow in QByteArray::operator=

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5750712295751680 Project: karchive Fuzzer: aflkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: aflasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

perfetto/trace_processor_fuzzer: Crash in perfetto::trace_processor::fuchsia_trace_utils::ReadTimestamp

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed report: https://oss-fuzz.com/testcase?key=5197616339484672 Project: perfetto Fuzzer: libFuzzerperfettotraceprocessorfuzzer Fuzz target binary: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Cra...

mruby/mruby_fuzzer: Use-of-uninitialized-value in time_update_datetime

Project: https://github.com/mruby/mruby.git Detailed report: https://oss-fuzz.com/testcase?key=5642873585795072 Project: mruby Fuzzer: libFuzzermrubyfuzzer Fuzz target binary: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

harfbuzz/hb-subset-fuzzer: Use-of-uninitialized-value in hb_hashmap_t<hb_serialize_context_t::object_t const*, unsigned int,

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5676773460672512 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type:...

libpcap/fuzz_both: Use-of-uninitialized-value in fuzz_both.c

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed report: https://oss-fuzz.com/testcase?key=5674747897053184 Project: libpcap Fuzzer: libFuzzerlibpcapfuzzboth Fuzz target binary: fuzzboth Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

lwan/request_fuzzer: Global-buffer-overflow in strsep_char

Project: git://github.com/lpereira/lwan Detailed report: https://oss-fuzz.com/testcase?key=5658117347475456 Project: lwan Fuzzer: afllwanrequestfuzzer Fuzz target binary: requestfuzzer Job Type: aflasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address: 0x0000012023bf...

dlplibs/wqfuzzer: Use-of-uninitialized-value in std::__1::enable_if<

Detailed report: https://oss-fuzz.com/testcase?key=5717618784206848 Project: dlplibs Fuzzer: libFuzzerdlplibswqfuzzer Fuzz target binary: wqfuzzer Job Type: libfuzzermsandlplibs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::enableif...

net-snmp/agentx_parse_fuzzer: Heap-buffer-overflow in agentx_parse_string

Project: git://git.code.sf.net/p/net-snmp/code Detailed report: https://oss-fuzz.com/testcase?key=5631634545573888 Project: net-snmp Fuzzer: aflnet-snmpagentxparsefuzzer Fuzz target binary: agentxparsefuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

lwan/request_fuzzer: Negative-size-param in parse_proxy_protocol_v2

Project: git://github.com/lpereira/lwan Detailed report: https://oss-fuzz.com/testcase?key=5091179189764096 Project: lwan Fuzzer: libFuzzerlwanrequestfuzzer Fuzz target binary: requestfuzzer Job Type: libfuzzerasanlwan Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

graphicsmagick/coder_TIFF_fuzzer: Use-of-uninitialized-value in TIFFYCbCrtoRGB

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5640694644867072 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderTIFFfuzzer Fuzz target binary: coderTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

pcre2/pcre2_fuzzer: Stack-buffer-overflow in get_grouplength

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://oss-fuzz.com/testcase?key=5643597614940160 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

kimageformats/kimgio_fuzzer: Heap-use-after-free in KArchiveDirectory::addEntry

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5739960809816064 Project: kimageformats Fuzzer: aflkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Heap-use-after-free READ 8...

libheif/file-fuzzer: Stack-buffer-overflow in void apply_sao_internal<unsigned short>

Project: https://github.com/strukturag/libheif.git Detailed report: https://oss-fuzz.com/testcase?key=5660192059949056 Project: libheif Fuzzer: libFuzzerlibheiffile-fuzzer Fuzz target binary: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Stack-buffer-overflow READ 4...

opencv/imdecode_fuzzer: Incorrect-function-pointer-type in cv::Mat::convertTo

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5643625308880896 Project: opencv Fuzzer: libFuzzerimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash...

openh264/decoder_fuzzer: Heap-use-after-free in WelsDec::MapColToList0

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5644886558113792 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free READ 4...

libressl/asn1: Heap-buffer-overflow in ASN1_get_object

Project: https://github.com/libressl-portable/portable.git Detailed report: https://oss-fuzz.com/testcase?key=5740695165337600 Project: libressl Fuzzer: libFuzzerlibresslasn1 Fuzz target binary: asn1 Job Type: libfuzzerasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libressl/server: Global-buffer-overflow in ssl_sigalg

Project: https://github.com/libressl-portable/portable.git Detailed report: https://oss-fuzz.com/testcase?key=5658594446409728 Project: libressl Fuzzer: libFuzzerlibresslserver Fuzz target binary: server Job Type: libfuzzerasanlibressl Platform Id: linux Crash Type: Global-buffer-overflow READ 2...

opencv/imdecode_fuzzer: Negative-size-param in _TIFFmemcpy

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5766572742803456 Project: opencv Fuzzer: aflopencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash Stat...

radare2/ia_fuzz: Heap-buffer-overflow in r_utf8_strlen

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5683914623942656 Project: radare2 Fuzzer: aflradare2iafuzz Fuzz target binary: iafuzz Job Type: aflasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x623000102d02...

php/php-fuzz-exif: Heap-buffer-overflow in php_ifd_get32s

Detailed report: https://oss-fuzz.com/testcase?key=5679912919236608 Project: php Fuzzer: aflphpphp-fuzz-exif Fuzz target binary: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60b000076555 Crash State: phpifdget32s exifprocessIFDTAG...

openthread/ip6-send-fuzzer: Stack-buffer-overflow in ot::MeshCoP::ChannelMaskEntry::GetMask

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5629736728920064 Project: openthread Fuzzer: aflopenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow...

openthread/radio-receive-done-fuzzer: Stack-buffer-overflow in ot::NetworkData::NetworkData::PrefixMatch

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5746988237193216 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Cra...

opencv/imdecode_fuzzer: Crash in jp2_box_get

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5665823442599936 Project: opencv Fuzzer: libFuzzeropencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

opencv/imread_fuzzer: Use-of-uninitialized-value in inflate

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5633341317971968 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in fz_clamp

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5658959258583040 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

envoy/config_fuzz_test: Heap-use-after-free in Envoy::Server::InitManagerImpl::initializeTarget

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5664687524413440 Project: envoy Fuzzer: libFuzzerenvoyconfigfuzztest Fuzz target binary: configfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

kimageformats/kimgio_fuzzer: Crash in BLEND_SOURCE_OVER_ARGB32_WITH_CONST_ALPHA_AVX2

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5765015108321280 Project: kimageformats Fuzzer: aflkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

keystone/fuzz_asm_x86_32: Use-of-uninitialized-value in llvm_ks::isIntN

Detailed report: https://oss-fuzz.com/testcase?key=5633466098515968 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmx8632 Fuzz target binary: fuzzasmx8632 Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: llvmks::isIntN...

keystone/fuzz_asm_mips64be: Use-of-uninitialized-value in adjustFixupValue

Detailed report: https://oss-fuzz.com/testcase?key=5680137981394944 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmmips64be Fuzz target binary: fuzzasmmips64be Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: adjustFixupValue...

pcre2/pcre2_fuzzer: Heap-buffer-overflow in read_name

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://oss-fuzz.com/testcase?key=5761668473159680 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

kimageformats/kimgio_fuzzer: Use-of-uninitialized-value in destStoreMonoLsb

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5630967190913024 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...