libaom/av1_dec_fuzzer: Index-out-of-bounds in read_uncompressed_header

Detailed report: https://oss-fuzz.com/testcase?key=5682574110752768 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: libfuzzerubsanlibaom Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: readuncompressedheader...

openvswitch/ofctl_parse_target: Use-of-uninitialized-value in json_string_unescape

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5701233931714560 Project: openvswitch Fuzzer: libFuzzeropenvswitchofctlparsetarget Fuzz target binary: ofctlparsetarget Job Type: libfuzzermsanopenvswitch Platform Id: linux Crash Type:...

open62541/fuzz_binary_message: NULL

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5712315752644608 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type:...

dav1d/dav1d_fuzzer: Use-of-uninitialized-value in iclip

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5658693757042688 Project: dav1d Fuzzer: libFuzzerdav1dfuzzer Fuzz target binary: dav1dfuzzer Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...

openvswitch/ofctl_parse_target: Heap-double-free in minimatch_destroy

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5725063685341184 Project: openvswitch Fuzzer: aflopenvswitchofctlparsetarget Fuzz target binary: ofctlparsetarget Job Type: aflasanopenvswitch Platform Id: linux Crash Type: Heap-double-free Crash...

libgit2/objects_fuzzer: Heap-buffer-overflow in git__strntol64

Project: https://github.com/libgit2/libgit2.git Detailed report: https://oss-fuzz.com/testcase?key=5667317078294528 Project: libgit2 Fuzzer: libFuzzerlibgit2objectsfuzzer Fuzz target binary: objectsfuzzer Job Type: libfuzzerasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in hb_array_t<OT::IntType<short, 2u> const>::operator

Detailed report: https://oss-fuzz.com/testcase?key=5689920685867008 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: hbarrayt...

systemd/fuzz-network-parser: Crash in netdev_get

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5695165612687360 Project: systemd Fuzzer: aflsystemdfuzz-network-parser Fuzz target binary: fuzz-network-parser Job Type: aflasansystemd Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

skia/api_raster_n32_canvas: Stack-buffer-overflow in void Fuzz::next<unsigned int>

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5666199178838016 Project: skia Fuzzer: libFuzzerskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4...

systemd/fuzz-netdev-parser: Heap-buffer-overflow in wireguard_done

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5656248813355008 Project: systemd Fuzzer: libFuzzersystemdfuzz-netdev-parser Fuzz target binary: fuzz-netdev-parser Job Type: libfuzzerasansystemd Platform Id: linux Crash Type: Heap-buffer-overflow...

envoy/server_fuzz_test: Heap-use-after-free in std::__1::__hash_iterator<std::__1::__hash_node<std::__1::__hash_value_type<std:

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5761881319407616 Project: envoy Fuzzer: libFuzzerenvoyserverfuzztest Fuzz target binary: serverfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

libarchive/libarchive_fuzzer: Heap-buffer-overflow in read_bits_16

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5695188345815040 Project: libarchive Fuzzer: afllibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

mupdf/pdf_fuzzer: NULL

Detailed report: https://oss-fuzz.com/testcase?key=5658375946240000 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Reproducer...

libgit2/objects_fuzzer: Heap-buffer-overflow in parse_mode

Project: https://github.com/libgit2/libgit2.git Detailed report: https://oss-fuzz.com/testcase?key=5766563588734976 Project: libgit2 Fuzzer: libFuzzerlibgit2objectsfuzzer Fuzz target binary: objectsfuzzer Job Type: libfuzzerasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

freetype2/cff-ftengine: Crash in cff_decoder_parse_charstrings

Detailed report: https://oss-fuzz.com/testcase?key=5709686410575872 Project: freetype2 Fuzzer: libFuzzerfreetype2cff-ftengine Fuzz target binary: cff-ftengine Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fa03f210910 Crash State:...

libpcap/fuzz_both: Use-of-uninitialized-value in pcap_nametonetaddr

Detailed report: https://oss-fuzz.com/testcase?key=5754994205130752 Project: libpcap Fuzzer: libFuzzerlibpcapfuzzboth Fuzz target binary: fuzzboth Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pcapnametonetaddr genscode...

libreoffice/ww8fuzzer: Bad-cast to SwPaMSwRangeRedline::operator< in std::__1::pair<std::__1::__wrap_iter<SwRangeRedline* const*>, std::__1::__wrap_iter<SwRangeRedline* const*> > std::__1::__equal_range<CompareSwRedlineTable&, std::__1::__wrap_iter<SwRangeRedline* const*>, SwRangeRedline*>

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5680715916640256 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

gdal/gtiff_fuzzer: Crash in GDAL_LercNS::Lerc2::ReadHeader

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5741391389392896 Project: gdal Fuzzer: aflgdalgtifffuzzer Fuzz target binary: gtifffuzzer Job Type: aflasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x618f800006ff Crash State:...

harfbuzz/hb-shape-fuzzer: Global-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5718889451749376 Project: harfbuzz Fuzzer: aflharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Cra...

libgit2/objects_fuzzer: Heap-buffer-overflow in git_buf_vprintf

Project: https://github.com/libgit2/libgit2.git Detailed report: https://oss-fuzz.com/testcase?key=5727770101940224 Project: libgit2 Fuzzer: libFuzzerlibgit2objectsfuzzer Fuzz target binary: objectsfuzzer Job Type: libfuzzerasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 13...

harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in hb_sanitize_context_t::check_range

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5729361857085440 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type:...

imagemagick/rotate_fuzzer: Index-out-of-bounds in LibRaw::subtract_black_internal

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5713220651188224 Project: imagemagick Fuzzer: libFuzzerimagemagickrotatefuzzer Fuzz target binary: rotatefuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::identify

Detailed report: https://oss-fuzz.com/testcase?key=5071707965489152 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in OT::hmtxvmtx<OT::hmtx, OT::hhea>::accelerator_t::get_advance

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5719982789361664 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type:...

libpcap/fuzz_filter: Use-of-uninitialized-value in pcap_nametonetaddr

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed report: https://oss-fuzz.com/testcase?key=5631616488046592 Project: libpcap Fuzzer: libFuzzerlibpcapfuzzfilter Fuzz target binary: fuzzfilter Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value...

envoy/h1_capture_fuzz_test: NULL

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5674755374448640 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: Null-dereference READ Cras...

unicorn/fuzz_emu_arm_armbe: Index-out-of-bounds in load_reg_var_armeb

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5650412976209920 Project: unicorn Fuzzer: libFuzzerunicornfuzzemuarmarmbe Fuzz target binary: fuzzemuarmarmbe Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bound...

keystone/fuzz_asm_armv8_arm: Use-of-uninitialized-value in llvm_ks::MCAssembler::computeFragmentSize

Detailed report: https://oss-fuzz.com/testcase?key=5768306540150784 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmarmv8arm Fuzz target binary: fuzzasmarmv8arm Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

openvswitch/odp_target: Heap-buffer-overflow in format_generic_odp_key

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5677587590807552 Project: openvswitch Fuzzer: libFuzzeropenvswitchodptarget Fuzz target binary: odptarget Job Type: libfuzzerasanopenvswitch Platform Id: linux Crash Type: Heap-buffer-overflow READ ...

wireshark/fuzzshark_ip: Crash in do_throw

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5729492048281600 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: UNKNOWN READ Crash...

librawspeed/PhaseOneDecompressorFuzzer: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5674338661957632 Project: librawspeed Fuzzer: libFuzzerlibrawspeedPhaseOneDecompressorFuzzer Fuzz target binary: PhaseOneDecompressorFuzzer Job Type: libfuzzermsanlibrawspeed Platform Id: lin...

open62541/fuzz_binary_message: Heap-use-after-free in UA_WorkQueue_cleanup

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5742300546727936 Project: open62541 Fuzzer: aflopen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ...

ffmpeg/ffmpeg_AV_CODEC_ID_ILBC_fuzzer: Stack-buffer-overflow in create_augmented_vector

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5699970020147200 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDILBCfuzzer Fuzz target binary: ffmpegAVCODECIDILBCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflo...

open62541/fuzz_binary_message: Use-of-uninitialized-value in UA_WorkQueue_cleanup

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5766606660042752 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type:...

keystone/fuzz_asm_arm_thumb: Use-of-uninitialized-value in llvm_ks::ARMAsmBackend::applyFixup

Detailed report: https://oss-fuzz.com/testcase?key=5640810557603840 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmarmthumb Fuzz target binary: fuzzasmarmthumb Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

unicorn/fuzz_emu_arm64_arm: Use-of-uninitialized-value in tcg_liveness_analysis_aarch64

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5642497104019456 Project: unicorn Fuzzer: libFuzzerunicornfuzzemuarm64arm Fuzz target binary: fuzzemuarm64arm Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type:...

libreoffice/docxfuzzer: Heap-buffer-overflow in emfplushelper::EmfPlusHelperData::processEmfPlusData

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5682069892497408 Project: libreoffice Fuzzer: afllibreofficedocxfuzzer Fuzz target binary: docxfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

unicorn/fuzz_emu_arm_thumb: Index-out-of-bounds in store_reg_arm

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5655596519391232 Project: unicorn Fuzzer: libFuzzerunicornfuzzemuarmthumb Fuzz target binary: fuzzemuarmthumb Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bound...

libreoffice/hwpfuzzer: Heap-use-after-free in HMemIODev::read4b

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5753299056197632 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

radare2/ia_fuzz: Heap-buffer-overflow in info

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5712659681378304 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_sample_filtering<unsigned char>

Detailed report: https://oss-fuzz.com/testcase?key=5712367019622400 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: voi...

gnutls/gnutls_ocsp_resp_parser_fuzzer: Use-of-uninitialized-value in _gnutls_x509_read_pkalgo_params

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=5693444165468160 Project: gnutls Fuzzer: libFuzzergnutlsocsprespparserfuzzer Fuzz target binary: gnutlsocsprespparserfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type:...

boringssl/ssl_ctx_api: Use-of-uninitialized-value in parse_sigalgs_list

Project: https://boringssl.googlesource.com/boringssl Detailed report: https://oss-fuzz.com/testcase?key=5714757638684672 Project: boringssl Fuzzer: libFuzzerboringsslsslctxapi Fuzz target binary: sslctxapi Job Type: libfuzzermsanboringssl Platform Id: linux Crash Type: Use-of-uninitialized-value...

llvm/llvm-opt-fuzzer--x86_64-instcombine: Heap-use-after-free in llvm::Value::assertModuleIsMaterializedImpl

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5722313073360896 Project: llvm Fuzzer: libFuzzerllvmllvm-opt-fuzzer--x8664-instcombine Fuzz target binary: llvm-opt-fuzzer--x8664-instcombine Job Type: libfuzzerasanllvm Platform Id: linux Crash...

harfbuzz/hb-subset-fuzzer: Heap-buffer-overflow in OT::Coverage::intersects

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5758598970343424 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflo...

poppler/pdf_fuzzer: Use-of-uninitialized-value in clip01

Detailed report: https://oss-fuzz.com/testcase?key=5647387350532096 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clip01...

radare2/ia_fuzz: Heap-buffer-overflow in sections

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5673375310020608 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

file/magic_fuzzer: Heap-buffer-overflow in json_parse_string

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=4844153304252416 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libreoffice/ww8fuzzer: Heap-buffer-overflow in rtl_uStringbuffer_insert

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6235706568474624 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

freetype2/cff-ftengine: Stack-buffer-overflow in cff_parser_run

Detailed report: https://oss-fuzz.com/testcase?key=5723673720782848 Project: freetype2 Fuzzer: aflfreetype2cff-ftengine Fuzz target binary: cff-ftengine Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7fa252831e10 Crash State: cffparserrun...