llvm:llvm-opt-fuzzer--x86_64-guard_widening: Heap-use-after-free in llvm::Value::setNameImpl

Detailed Report: https://oss-fuzz.com/testcase?key=5166633690333184 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-opt-fuzzer--x8664-guardwidening Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-use-after-free READ 3 Crash Address: 0x60400000d7f0 Crash State:...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::DeclareImplicitCopyAssignment

Detailed Report: https://oss-fuzz.com/testcase?key=5957130015473664 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::DeclareImplicitCopyAssignment...

gstreamer/gst-discoverer: Heap-buffer-overflow in gst_queue_locked_flush

Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer https://gitlab.freedesktop.org/gstreamer/gstreamer.git Detailed report: https://oss-fuzz.com/testcase?key=6589384829698048 Project: gstreamer Fuzzer: libFuzzergstreamergst-discoverer Fuzz target binary: gst-discoverer Job Type:...

libreoffice:fodtfuzzer: Heap-buffer-overflow in std::__1::unique_ptr<SwXMLTableRow_Impl, std::__1::default_delete<SwXMLTableRow_

Detailed Report: https://oss-fuzz.com/testcase?key=5196181338324992 Project: libreoffice Fuzzing Engine: afl Fuzz Target: fodtfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6020001c6da0 Crash State: std::1::uniqueptrSwXMLTableRowImp...

llvm:clang-fuzzer: Segv on unknown address in clang::CXXRecordDecl::data

Detailed Report: https://oss-fuzz.com/testcase?key=5749294702526464 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::CXXRecordDecl::data HandleDestructionImpl...

skia:skruntimeeffect: Heap-use-after-free in SkSL::StringFragment::operator==

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6254144880115712 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skruntimeeffect Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

clamav:clamav_scanfile_fuzzer: Heap-buffer-overflow in cli_codepage_to_utf8

Detailed Report: https://oss-fuzz.com/testcase?key=4794885675941888 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavscanfilefuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61900000d617 Crash State: clicodepagetoutf8...

libhevc:hevc_dec_fuzzer: Heap-buffer-overflow in ihevcd_parse_slice_data

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5753353983754240 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Heap-buffer-overflow WRIT...

llvm:clang-fuzzer: Use-of-uninitialized-value in clang::Parser::ParseCastExpression

Detailed Report: https://oss-fuzz.com/testcase?key=5079246079524864 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::Parser::ParseCastExpression...

golang:fuzzer-httpresp: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6305957406310400 Project: golang Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-httpresp Job Type: libfuzzerasangolang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000039204f2 Crash State: NULL Sanitizer: address ASAN Recommended...

quickjs:fuzz_eval: Stack-buffer-overflow in get_class_atom

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5071407886368768 Project: quickjs Fuzzing Engine: afl Fuzz Target: fuzzeval Job Type: aflasanquickjs Platform Id: linux Crash Type: Stack-buffer-overflow WRITE ...

libzmq:test_connect_ws_fuzzer: Use-of-uninitialized-value in zmq::stream_engine_base_t::out_event

Detailed Report: https://oss-fuzz.com/testcase?key=6326324676001792 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testconnectwsfuzzer Job Type: libfuzzermsanlibzmq Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: zmq::streamenginebaset::outevent...

libfdk-aac:aacDecoder_ConfigRaw: Use-of-uninitialized-value in _skipEqInstructions

Detailed Report: https://oss-fuzz.com/testcase?key=5144868184915968 Project: libfdk-aac Fuzzing Engine: libFuzzer Fuzz Target: aacDecoderConfigRaw Job Type: libfuzzermsanlibfdk-aac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: skipEqInstructions...

osquery:osqueryfuzz-config: Heap-buffer-overflow in bool rapidjson::GenericValue<rapidjson::UTF8<char>, rapidjson::MemoryPoolAllocat

Project: https://github.com/osquery/osquery.git Detailed Report: https://oss-fuzz.com/testcase?key=5082304661946368 Project: osquery Fuzzing Engine: libFuzzer Fuzz Target: osqueryfuzz-config Job Type: libfuzzerasanosquery Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

sqlite3: Crash in sqlite3DbMallocRawNN

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6739028850245632 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzerasansqlite3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x630000524f22 Crash State:...

libavc:svc_dec_fuzzer: Crash in ih264d_fill_bs1_16x16mb_pslice

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=4760994878193664 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: svcdecfuzzer Job Type: libfuzzermsanlibavc Platform Id: linux...

grok:grk_decompress_fuzzer: Crash in grk::T2Decompress::readPacketHeader

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=6289567230066688 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerasangrok Platform Id...

sqlite3:ossfuzz: Heap-buffer-overflow in whereLoopAddBtreeIndex

Detailed Report: https://oss-fuzz.com/testcase?key=6503337062301696 Project: sqlite3 Fuzzing Engine: honggfuzz Fuzz Target: ossfuzz Job Type: honggfuzzasansqlite3 Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60f0000003b8 Crash State: whereLoopAddBtreeIndex...

llvm:clang-objc-fuzzer: Global-buffer-overflow in clang::Lexer::tryReadUCN

Detailed Report: https://oss-fuzz.com/testcase?key=5120846479491072 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000ccf823c Crash State: clang::Lexer::tryReadUCN...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Crash in ogg_get_length

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5658535590625280 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61900001b628 Crash...

open62541:fuzz_json_decode_encode: Heap-buffer-overflow in jumpOverRec

Detailed Report: https://oss-fuzz.com/testcase?key=4963278934638592 Project: open62541 Fuzzing Engine: honggfuzz Fuzz Target: fuzzjsondecodeencode Job Type: honggfuzzasanopen62541 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x628000003f80 Crash State: jumpOverRec...

wolfssl:fuzzer-wolfssh-client-randomize: Use-of-uninitialized-value in memory_test

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4731601975771136 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-client-randomize Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

llvm:clang-objc-fuzzer: Segv on unknown address in clang::Preprocessor::LexHeaderName

Detailed Report: https://oss-fuzz.com/testcase?key=4823847375994880 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Preprocessor::LexHeaderName...

skia/sksl2glsl: Crash in SkSL::Constructor::getVecComponent

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5670815980322816 Project: skia Fuzzer: aflskiasksl2glsl Fuzz target binary: sksl2glsl Job Type: aflasanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000dfff801a Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_MSNSIREN_fuzzer: Global-buffer-overflow in siren_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5741847809490944 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDMSNSIRENfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash...

go-ethereum:fuzzDifficulty: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6061920195051520 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzDifficulty Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

libsndfile:sndfile_fuzzer: Use-of-uninitialized-value in psf_log_printf

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=5961843607339008 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

mysql-server:fuzz_initfile: Heap-use-after-free in trans_savepoint

Detailed Report: https://oss-fuzz.com/testcase?key=5753477935136768 Project: mysql-server Fuzzing Engine: honggfuzz Fuzz Target: fuzzinitfile Job Type: honggfuzzasanmysql-server Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6250003a4930 Crash State: transsavepoint...

sqlite3:ossfuzz: Heap-buffer-overflow in instrFunc

Detailed Report: https://oss-fuzz.com/testcase?key=5761066553835520 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzerasansqlite3 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000007d8 Crash State: instrFunc sqlite3VdbeExec...

mpg123/decode_fuzzer: Use-of-uninitialized-value in INT123_parse_new_id3

Detailed report: https://oss-fuzz.com/testcase?key=5124907546968064 Project: mpg123 Fuzzer: libFuzzermpg123decodefuzzer Fuzz target binary: decodefuzzer Job Type: libfuzzermsanmpg123 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: INT123parsenewid3 handleid3v...

freerdp:TestFuzzCommonAssistanceParseFileBuffer: Heap-buffer-overflow in TestFuzzCommonAssistanceParseFileBuffer.c

Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=5341511848689664 Project: freerdp Fuzzing Engine: libFuzzer Fuzz Target: TestFuzzCommonAssistanceParseFileBuffer Job Type: libfuzzerasanfreerdp Platform Id: linux Crash Type: Heap-buffer-overflow...

harfbuzz:hb-subset-fuzzer: Use-of-uninitialized-value in OT::Anchor::copy

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5289253733007360 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

freeimage:load_from_memory_fuzzer: Stack-buffer-overflow in strncpy

Detailed Report: https://oss-fuzz.com/testcase?key=5633780185825280 Project: freeimage Fuzzing Engine: libFuzzer Fuzz Target: loadfrommemoryfuzzer Job Type: libfuzzerasanfreeimage Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f89f7151530 Crash State: strncpy...

imagemagick/rotate_fuzzer: Index-out-of-bounds in LibRaw::scale_colors_loop

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5710383731441664 Project: imagemagick Fuzzer: libFuzzerimagemagickrotatefuzzer Fuzz target binary: rotatefuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type:...

edk2:TestFileName: Heap-buffer-overflow in StrLen

Detailed Report: https://oss-fuzz.com/testcase?key=5251909353537536 Project: edk2 Fuzzing Engine: libFuzzer Fuzz Target: TestFileName Job Type: libfuzzerasanedk2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x521000006100 Crash State: StrLen MangleFileName...

ffmpeg:ffmpeg_AV_CODEC_ID_MVDV_fuzzer: Heap-buffer-overflow in decode_mvdv

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6279905350516736 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMVDVfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60a00076f1a...

ffmpeg:ffmpeg_AV_CODEC_ID_G2M_fuzzer: Index-out-of-bounds in epic_decode_run_length

Detailed Report: https://oss-fuzz.com/testcase?key=5199357982015488 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDG2Mfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: epicdecoderunlength epicdecodetile...

gdal: Heap-buffer-overflow in FindSectLen

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5261785177260032 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

capstone:fuzz_disasmnext: Use-of-uninitialized-value in printAddressingMode

Detailed Report: https://oss-fuzz.com/testcase?key=5403361238384640 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: printAddressingMode M68KprintInst...

tarantool:luaL_loadbuffer_fuzzer: Crash in luaL_newstate

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=5016918430121984 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferfuzzer Job Type: libfuzzerubsantarantool Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

openbabel: heap-use-after-free in OpenBabel::FreeBondExpr

With the following new fuzz target: include "/src/openbabel/include/openbabel/rotor.h" include "/src/openbabel/include/openbabel/phmodel.h" include include extern "C" int LLVMFuzzerTestOneInputconst uint8t Data, sizet Size FuzzedDataProvider fuzzeddataproviderData, Size; std::string buffer =...

binutils:fuzz_objcopy: Crash in coff_count_linenumbers

Detailed Report: https://oss-fuzz.com/testcase?key=4710265532317696 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjcopy Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff8001 Crash State: coffcountlinenumbers...

nanopb:fuzztest: Heap-buffer-overflow in allocate_field

Project: https://github.com/nanopb/nanopb.git Detailed Report: https://oss-fuzz.com/testcase?key=5646298464911360 Project: nanopb Fuzzing Engine: afl Fuzz Target: fuzztest Job Type: aflasannanopb Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x621000008956 Crash State...

qt:qtbase_gui_image_qimage_loadfromdata: Heap-buffer-overflow in read_xpm_body

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5795358152851456 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguiimageqimageloadfromdata Job Type: libfuzzerasanqt Platform Id: linux Crash Type: Heap-buffer-overflow READ 7 Crash Address:...

libzmq:socket_bind_fuzzer: Heap-buffer-overflow in zmq::tcp_read

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5669751377625088 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: socketbindfuzzer Job Type: libfuzzerasani386libzmq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

libavc:avc_dec_fuzzer: Heap-buffer-overflow in ih264d_decode_slice_thread

Project: https://android.googlesource.com/platform/external/libavc Detailed Report: https://oss-fuzz.com/testcase?key=5689831887994880 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

wpantund: Crash in spinel_datatype_vunpack_

Detailed report: https://oss-fuzz.com/testcase?key=6589685272936448 Project: wpantund Fuzzer: libFuzzerwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: libfuzzerasanwpantund Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x63110000f7c4 Crash State: spineldatatypevunpa...

cairo:font_fuzzer: Heap-buffer-overflow in cairo_ft_apply_variations

Detailed Report: https://oss-fuzz.com/testcase?key=4947926569517056 Project: cairo Fuzzing Engine: honggfuzz Fuzz Target: fontfuzzer Job Type: honggfuzzasancairo Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7d0ff71d18c8 Crash State: cairoftapplyvariations...

yara:dotnet_fuzzer: Heap-use-after-free in dotnet_parse_tilde_2

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5195285818507264 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: dotnetfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x6190000006f2...

opencv/imread_fuzzer: Use-of-uninitialized-value in cv::ExrDecoder::readData

Detailed report: https://oss-fuzz.com/testcase?key=5744080958521344 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cv::ExrDecoder::readData...