yara/rules_fuzzer: Heap-use-after-free in yr_re_ast_split_at_chaining_point

Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5732444007825408 Project: yara Fuzzer: libFuzzeryararulesfuzzer Fuzz target binary: rulesfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

skia/api_mock_gpu_canvas: Heap-use-after-free in void SkGlyphRunListPainter::drawGlyphRunAsBMPWithPathFallback<GrTextBlob::genera

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5737185492336640 Project: skia Fuzzer: aflskiaapimockgpucanvas Fuzz target binary: apimockgpucanvas Job Type: aflasanskia Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...

imagemagick/encoder_png32_fuzzer: Use-of-uninitialized-value in ScaleQuantumToChar

Detailed report: https://oss-fuzz.com/testcase?key=6272571728199680 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpng32fuzzer Fuzz target binary: encoderpng32fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

harfbuzz/hb-shape-fuzzer: Use-of-uninitialized-value in void hb_sanitize_context_t::set_object<AAT::ChainSubtable<AAT::ExtendedTypes> >

Detailed report: https://oss-fuzz.com/testcase?key=5657878543728640 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void...

skia/api_image_filter: Heap-buffer-overflow in make_fuzz_textblob

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5656916177453056 Project: skia Fuzzer: aflskiaapiimagefilter Fuzz target binary: apiimagefilter Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

open62541/fuzz_binary_decode: Heap-use-after-free in DataValue_clear

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5638857115041792 Project: open62541 Fuzzer: aflopen62541fuzzbinarydecode Fuzz target binary: fuzzbinarydecode Job Type: aflasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ 4...

libaom/av1_dec_fuzzer: Index-out-of-bounds in read_uncompressed_header

Detailed report: https://oss-fuzz.com/testcase?key=5682574110752768 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: libfuzzerubsanlibaom Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: readuncompressedheader...

minizip/unzip_fuzzer: Use-of-uninitialized-value in mz_zip_entry_read_header

Project: https://github.com/nmoinvaz/minizip.git Detailed report: https://oss-fuzz.com/testcase?key=5707718795460608 Project: minizip Fuzzer: libFuzzerminizipunzipfuzzer Fuzz target binary: unzipfuzzer Job Type: libfuzzermsanminizip Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

dav1d/dav1d_fuzzer: Use-of-uninitialized-value in iclip

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5658693757042688 Project: dav1d Fuzzer: libFuzzerdav1dfuzzer Fuzz target binary: dav1dfuzzer Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...

openvswitch/ofctl_parse_target: Heap-double-free in minimatch_destroy

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5725063685341184 Project: openvswitch Fuzzer: aflopenvswitchofctlparsetarget Fuzz target binary: ofctlparsetarget Job Type: aflasanopenvswitch Platform Id: linux Crash Type: Heap-double-free Crash...

dlplibs/qxpfuzzer: Bad-cast to std::__1::__shared_weak_countstd::__1::shared_ptr<librevenge::RVNGInputStream>::~shared_ptr in libqxp::QXPParser::parse

Detailed report: https://oss-fuzz.com/testcase?key=5744289871560704 Project: dlplibs Fuzzer: libFuzzerdlplibsqxpfuzzer Fuzz target binary: qxpfuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000004d215f0 Crash State: Bad-cast to...

unicorn/fuzz_emu_mips_32le: Heap-buffer-overflow in get_page_addr_code_mipsel

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5648422309199872 Project: unicorn Fuzzer: libFuzzerunicornfuzzemumips32le Fuzz target binary: fuzzemumips32le Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: Heap-buffer-overflo...

harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in OT::post::accelerator_t::cmp_gids

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5742079188140032 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

systemd/fuzz-netdev-parser: Heap-buffer-overflow in wireguard_done

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5656248813355008 Project: systemd Fuzzer: libFuzzersystemdfuzz-netdev-parser Fuzz target binary: fuzz-netdev-parser Job Type: libfuzzerasansystemd Platform Id: linux Crash Type: Heap-buffer-overflow...

radare2/ia_fuzz: Heap-buffer-overflow in r_bin_filter_name

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5701849554878464 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

poppler/pdf_fuzzer: Crash in XRefEntry::setFlag

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5668843268079616 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: UNKNOWN READ Crash...

mupdf/pdf_fuzzer: NULL

Detailed report: https://oss-fuzz.com/testcase?key=5658375946240000 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Reproducer...

freetype2/cff-ftengine: Crash in cff_decoder_parse_charstrings

Detailed report: https://oss-fuzz.com/testcase?key=5709686410575872 Project: freetype2 Fuzzer: libFuzzerfreetype2cff-ftengine Fuzz target binary: cff-ftengine Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fa03f210910 Crash State:...

libpcap/fuzz_both: Use-of-uninitialized-value in pcap_nametonetaddr

Detailed report: https://oss-fuzz.com/testcase?key=5754994205130752 Project: libpcap Fuzzer: libFuzzerlibpcapfuzzboth Fuzz target binary: fuzzboth Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pcapnametonetaddr genscode...

keystone/fuzz_asm_arm_armbe: Crash in llvm_ks::MCSymbol::isRegistered

Detailed report: https://oss-fuzz.com/testcase?key=5751870102962176 Project: keystone Fuzzer: aflkeystonefuzzasmarmarmbe Fuzz target binary: fuzzasmarmarmbe Job Type: aflasankeystone Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00008fff8001 Crash State:...

libreoffice/ww8fuzzer: Heap-buffer-overflow in WW8_BRC::isNil

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5688323562012672 Project: libreoffice Fuzzer: afllibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

librawspeed/VC5DecompressorFuzzer: Use-of-uninitialized-value in rawspeed::VC5Decompressor::parseLargeCodeblock

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5744163321020416 Project: librawspeed Fuzzer: libFuzzerlibrawspeedVC5DecompressorFuzzer Fuzz target binary: VC5DecompressorFuzzer Job Type: libfuzzermsanlibrawspeed Platform Id: linux Crash...

gdal/gtiff_fuzzer: Crash in GDAL_LercNS::Lerc2::ReadHeader

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5741391389392896 Project: gdal Fuzzer: aflgdalgtifffuzzer Fuzz target binary: gtifffuzzer Job Type: aflasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x618f800006ff Crash State:...

imagemagick/rotate_fuzzer: Index-out-of-bounds in LibRaw::subtract_black_internal

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5713220651188224 Project: imagemagick Fuzzer: libFuzzerimagemagickrotatefuzzer Fuzz target binary: rotatefuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::identify

Detailed report: https://oss-fuzz.com/testcase?key=5071707965489152 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

envoy/h1_capture_fuzz_test: NULL

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5674755374448640 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: Null-dereference READ Cras...

wpantund/wpantund-fuzz: Heap-use-after-free in TunnelIPv6Interface::remove_address

Project: https://github.com/openthread/wpantund.git Detailed report: https://oss-fuzz.com/testcase?key=5656107263983616 Project: wpantund Fuzzer: aflwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: aflasanwpantund Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash...

openvswitch/odp_target: Heap-buffer-overflow in format_generic_odp_key

Project: https://github.com/openvswitch/ovs.git Detailed report: https://oss-fuzz.com/testcase?key=5677587590807552 Project: openvswitch Fuzzer: libFuzzeropenvswitchodptarget Fuzz target binary: odptarget Job Type: libfuzzerasanopenvswitch Platform Id: linux Crash Type: Heap-buffer-overflow READ ...

librawspeed/PhaseOneDecompressorFuzzer: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5674338661957632 Project: librawspeed Fuzzer: libFuzzerlibrawspeedPhaseOneDecompressorFuzzer Fuzz target binary: PhaseOneDecompressorFuzzer Job Type: libfuzzermsanlibrawspeed Platform Id: lin...

wireshark/fuzzshark_ip_proto-udp: Global-buffer-overflow in add_ff_action

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5657352737390592 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

graphicsmagick/coder_MVG_fuzzer: Use-of-uninitialized-value in DrawDashPolygon

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5731552927940608 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

imagemagick/encoder_mvg_fuzzer: Use-of-uninitialized-value in ApplyPixelCompositeMask

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5653817912197120 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_mng_fuzzer: Use-of-uninitialized-value in deflate_slow

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5630675743408128 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermngfuzzer Fuzz target binary: encodermngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

open62541/fuzz_binary_message: Heap-use-after-free in UA_WorkQueue_cleanup

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5742300546727936 Project: open62541 Fuzzer: aflopen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ...

open62541/fuzz_binary_message: Crash in [heap]

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5664857509068800 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: UNKNOWN REA...

keystone/fuzz_asm_arm_thumb: Use-of-uninitialized-value in llvm_ks::ARMAsmBackend::applyFixup

Detailed report: https://oss-fuzz.com/testcase?key=5640810557603840 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmarmthumb Fuzz target binary: fuzzasmarmthumb Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

radare2/ia_fuzz: Heap-buffer-overflow in r_str_utf16_to_utf8

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5766541564444672 Project: radare2 Fuzzer: libFuzzerradare2iafuzz Fuzz target binary: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

imagemagick/encoder_heic_fuzzer: Heap-buffer-overflow in ff_hevc_put_hevc_epel_pixels_8_sse

Detailed report: https://oss-fuzz.com/testcase?key=5676248198545408 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62300001c320...

skia/textblob_deserialize: Use-of-uninitialized-value in SkScalarSignAsScalar

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5671296839450624 Project: skia Fuzzer: libFuzzerskiatextblobdeserialize Fuzz target binary: textblobdeserialize Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...

libreoffice/hwpfuzzer: Heap-use-after-free in HMemIODev::read4b

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5753299056197632 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_sample_filtering<unsigned char>

Detailed report: https://oss-fuzz.com/testcase?key=5712367019622400 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: voi...

poppler/pdf_fuzzer: Use-of-uninitialized-value in CMap::parse2

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5083353053659136 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type:...

harfbuzz/hb-subset-fuzzer: Stack-use-after-return in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5669437462544384 Project: harfbuzz Fuzzer: aflharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Stack-use-after-return READ 1...

poppler/pdf_fuzzer: Use-of-uninitialized-value in clip01

Detailed report: https://oss-fuzz.com/testcase?key=5647387350532096 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clip01...

freetype2/cff-render: Heap-buffer-overflow in tt_face_palette_set

Detailed report: https://oss-fuzz.com/testcase?key=5278718313365504 Project: freetype2 Fuzzer: aflfreetype2cff-render Fuzz target binary: cff-render Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61f0000028d8 Crash State: ttfacepaletteset...

libreoffice/ww6fuzzer: Bad-cast to SwNodeSwTable::GetTableNode in SwChartLockController_Helper::LockUnlockAllCharts

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6651521981743104 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

glib/fuzz_variant_binary: Use-of-uninitialized-value in gvs_tuple_is_normal

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed report: https://oss-fuzz.com/testcase?key=5995691548606464 Project: glib Fuzzer: libFuzzerglibfuzzvariantbinary Fuzz target binary: fuzzvariantbinary Job Type: libfuzzermsanglib Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in fz_maxi

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=4803533114179584 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

radare2/ia_fuzz: Heap-buffer-overflow in store_versioninfo_gnu_verdef

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=6065450650697728 Project: radare2 Fuzzer: aflradare2iafuzz Fuzz target binary: iafuzz Job Type: aflasanradare2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x611000006030...

glib/fuzz_variant_text: Heap-buffer-overflow in token_stream_prepare

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed report: https://oss-fuzz.com/testcase?key=6042691107291136 Project: glib Fuzzer: libFuzzerglibfuzzvarianttext Fuzz target binary: fuzzvarianttext Job Type: libfuzzerasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...