libarchive/libarchive_fuzzer: Stack-buffer-overflow in parse_file_extra_owner

Project: https://github.com/libarchive/libarchive.git Detailed report: https://oss-fuzz.com/testcase?key=5676090753810432 Project: libarchive Fuzzer: afllibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1...

systemd/fuzz-netdev-parser: Use-of-uninitialized-value in explicit_bzero_safe

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5189307683307520 Project: systemd Fuzzer: libFuzzersystemdfuzz-netdev-parser Fuzz target binary: fuzz-netdev-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type:...

php/php-fuzz-exif: Heap-buffer-overflow in _estrndup

Detailed report: https://oss-fuzz.com/testcase?key=5740255098961920 Project: php Fuzzer: libFuzzerphpphp-fuzz-exif Fuzz target binary: php-fuzz-exif Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6120000032e0 Crash State: estrndup...

gnupg/fuzz_verify: Heap-use-after-free in proc_plaintext

Project: git://git.gnupg.org/gnupg.git Detailed report: https://oss-fuzz.com/testcase?key=5697816893063168 Project: gnupg Fuzzer: libFuzzergnupgfuzzverify Fuzz target binary: fuzzverify Job Type: libfuzzerasangnupg Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

minizip/unzip_fuzzer: Index-out-of-bounds in BZ2_decompress

Project: https://github.com/nmoinvaz/minizip.git Detailed report: https://oss-fuzz.com/testcase?key=5714988497371136 Project: minizip Fuzzer: libFuzzerminizipunzipfuzzer Fuzz target binary: unzipfuzzer Job Type: libfuzzerubsanminizip Platform Id: linux Crash Type: Index-out-of-bounds Crash Addres...

skia/api_raster_n32_canvas: Crash in SkScan::DAAFillPath

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5713029673517056 Project: skia Fuzzer: aflskiaapirastern32canvas Fuzz target binary: apirastern32canvas Job Type: aflasanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x01018100810...

xmlsec/xmlsec_fuzzer: Heap-use-after-free in xmlStrndup

Project: https://github.com/lsh123/xmlsec.git Detailed report: https://oss-fuzz.com/testcase?key=5630952466808832 Project: xmlsec Fuzzer: libFuzzerxmlsecfuzzer Fuzz target binary: xmlsecfuzzer Job Type: libfuzzerasanxmlsec Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

libxml2/libxml2_xml_read_memory_fuzzer: Use-of-uninitialized-value in xmlParseCharEncoding

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=6287294328209408 Project: libxml2 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Fuzz target binary: libxml2xmlreadmemoryfuzzer Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type:...

libwebp/fuzz_advanced_api: Use-of-uninitialized-value in ReadSymbol

Project: https://chromium.googlesource.com/webm/libwebp Detailed report: https://oss-fuzz.com/testcase?key=5760292385456128 Project: libwebp Fuzzer: libFuzzerlibwebpfuzzadvancedapi Fuzz target binary: fuzzadvancedapi Job Type: libfuzzermsanlibwebp Platform Id: linux Crash Type:...

graphicsmagick/coder_GIF_fuzzer: Heap-buffer-overflow in DecodeImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6043228022243328 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderGIFfuzzer Fuzz target binary: coderGIFfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

botan/tls_client: Heap-buffer-overflow in void Botan::copy_mem<unsigned char>

Project: https://github.com/randombit/botan.git Detailed report: https://oss-fuzz.com/testcase?key=4905819050082304 Project: botan Fuzzer: libFuzzerbotantlsclient Fuzz target binary: tlsclient Job Type: libfuzzerasanbotan Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

imagemagick/encoder_tiff64_fuzzer: Use-of-uninitialized-value in DecodeLabImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4812954626162688 Project: imagemagick Fuzzer: libFuzzerimagemagickencodertiff64fuzzer Fuzz target binary: encodertiff64fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type...

skia/animated_image_decode: Container-overflow in piex::GetFullCropDimension

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5667932416770048 Project: skia Fuzzer: libFuzzerskiaanimatedimagedecode Fuzz target binary: animatedimagedecode Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Container-overflow READ 4...

skia/animated_image_decode: Use-of-uninitialized-value in SkAnimatedImage::decodeNextFrame

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5526593989509120 Project: skia Fuzzer: libFuzzerskiaanimatedimagedecode Fuzz target binary: animatedimagedecode Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick/encoder_pcds_fuzzer: Use-of-uninitialized-value in ClampPixel

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5687013954027520 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpcdsfuzzer Fuzz target binary: encoderpcdsfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

wireshark/fuzzshark_ip_proto-udp: Global-buffer-overflow in proto_item_add_bitmask_tree

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=6168934182027264 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type:...

librawspeed: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4854170727219200 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-ThreefrDecoder Fuzz target binary: TiffDecoderFuzzer-ThreefrDecoder Job Type: libfuzzermsanlibrawspeed...

gdal: Heap-buffer-overflow in NITFRasterBand::IReadBlock

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5463142119243776 Project: gdal Fuzzer: libFuzzergdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x603000084656 Crash State:...

dlplibs: Global-buffer-overflow in StarEncoding::read

Detailed report: https://oss-fuzz.com/testcase?key=6132274431000576 Project: dlplibs Fuzzer: libFuzzerdlplibssdwfuzzer Fuzz target binary: sdwfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000a4fcdc Crash State:...

skia:sksl2spirv: Segv on unknown address in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6198631948091392 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2spirv Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

libreoffice:htmlfuzzer: Heap-use-after-free in SfxItemSet::Count

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5699610401832960 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: htmlfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash...

openh264:decoder_fuzzer: Crash in WelsDec::WelsMarkAsRef

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5731532414910464 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f0ac8de0c30 Crash...

kubernetes:yaml_FuzzSigYaml: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5792011216748544 Project: kubernetes Fuzzing Engine: libFuzzer Fuzz Target: yamlFuzzSigYaml Job Type: libfuzzerasankubernetes Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000036b21124 Crash State: NULL Sanitizer: address ASAN...

libsndfile:sndfile_fuzzer: Use-of-uninitialized-value in dwvw_decode_load_bits

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=6483024919920640 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

cryptofuzz:cryptofuzz-boringssl: Heap-buffer-overflow in mp_toradix

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5692555180900352 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1...

skia:sksl2spirv: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5806581326020608 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2spirv Job Type: libfuzzerubsanskia Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: undefined UBSAN Crash...

sqlite3:ossfuzz: Use-of-uninitialized-value in sqlite3Atoi64

Detailed Report: https://oss-fuzz.com/testcase?key=4899130430980096 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sqlite3Atoi64 computeNumericType numericType...

systemd:fuzz-network-parser: Heap-buffer-overflow in config_parse_ets_prio

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=6247961001197568 Project: systemd Fuzzing Engine: honggfuzz Fuzz Target: fuzz-network-parser Job Type: honggfuzzasansystemd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

skia:svg_dom: Global-buffer-overflow in SkParse::FindNamedColor

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5124092452929536 Project: skia Fuzzing Engine: afl Fuzz Target: svgdom Job Type: aflasanskia Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000001da0690 Crash State:...

libraw:libraw_fuzzer: Use-of-uninitialized-value in LibRaw::copy_bayer

Detailed Report: https://oss-fuzz.com/testcase?key=6270484961558528 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::copybayer LibRaw::raw2imageex...

libzmq:test_connect_null_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5716323687727104 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testconnectnullfuzzer Job Type: libfuzzerasanlibzmq Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_ADPCM_IMA_CUNNING_fuzzer: Global-buffer-overflow in adpcm_ima_cunning_expand_nibble

Detailed Report: https://oss-fuzz.com/testcase?key=5717917221257216 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDADPCMIMACUNNINGfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000000a39768 Crash State:...

suricata:fuzz_applayerparserparse: Heap-use-after-free in htp_connp_is_line_terminator

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5099629239861248 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzapplayerparserparse Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Addres...

dav1d:dav1d_fuzzer: Crash in dav1d_resize_ssse3

Project: https://code.videolan.org/videolan/dav1d.git Detailed Report: https://oss-fuzz.com/testcase?key=5692903256227840 Project: dav1d Fuzzing Engine: afl Fuzz Target: dav1dfuzzer Job Type: aflasandav1d Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62b10000587c Crash State:...

quickjs:fuzz_compile: Heap-use-after-free in JS_ReadObjectRec

Project: https://github.com/horhof/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5676100190732288 Project: quickjs Fuzzing Engine: honggfuzz Fuzz Target: fuzzcompile Job Type: honggfuzzasanquickjs Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

imagemagick:crop_fuzzer: Use-of-uninitialized-value in LibRaw::panasonic_load_raw

Detailed Report: https://oss-fuzz.com/testcase?key=5199241358344192 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::panasonicloadraw LibRaw::unpa...

envoy:stat_merger_fuzz_test: Crash in Envoy::Stats::SymbolTableImpl::Encoding::decodeTokens

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5713856297172992 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: statmergerfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000ac3b000 Cra...

open62541:fuzz_json_decode_encode: Index-out-of-bounds in writeJsonObjStart

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5685684407107584 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecodeencode Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address...

llvm:clang-fuzzer: Segv on unknown address in clang::OverloadExpr::find

Detailed Report: https://oss-fuzz.com/testcase?key=5663520494714880 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::OverloadExpr::find...

libarchive:libarchive_fuzzer: Heap-use-after-free in copy_string

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=5655329908195328 Project: libarchive Fuzzing Engine: libFuzzer Fuzz Target: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash...

wireshark:fuzzshark_ip_proto-udp: Heap-buffer-overflow in bytestring_to_str

Project: https://code.wireshark.org/review/wireshark Detailed Report: https://oss-fuzz.com/testcase?key=5728342863249408 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libhevc:hevc_dec_fuzzer: Heap-buffer-overflow in ihevcd_process

Project: https://android.googlesource.com/platform/external/libhevc Detailed Report: https://oss-fuzz.com/testcase?key=5758594137456640 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasanlibhevc Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

osquery:osqueryfuzz-config: Crash in rapidjson::internal::FastPath

Project: https://github.com/osquery/osquery.git Detailed Report: https://oss-fuzz.com/testcase?key=5751874325577728 Project: osquery Fuzzing Engine: libFuzzer Fuzz Target: osqueryfuzz-config Job Type: libfuzzerasanosquery Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0001000c821b...

ffmpeg/ffmpeg_AV_CODEC_ID_MSS2_fuzzer: Index-out-of-bounds in vc1_decode_ac_coeff

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5666071933091840 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMSS2fuzzer Fuzz target binary: ffmpegAVCODECIDMSS2fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

icu/collator_rulebased_fuzzer: Use-of-uninitialized-value in isMatchAtCPBoundary

Project: https://github.com/unicode-org/icu.git Detailed report: https://oss-fuzz.com/testcase?key=5644492876546048 Project: icu Fuzzer: libFuzzericucollatorrulebasedfuzzer Fuzz target binary: collatorrulebasedfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type:...

unicorn/fuzz_emu_mips_32be: Heap-buffer-overflow in tlb_set_page_mips

Project: https://github.com/unicorn-engine/unicorn.git Detailed report: https://oss-fuzz.com/testcase?key=5645992751267840 Project: unicorn Fuzzer: aflunicornfuzzemumips32be Fuzz target binary: fuzzemumips32be Job Type: aflasanunicorn Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Cra...

open62541/fuzz_json_decode_encode: Heap-buffer-overflow in UA_unbase64

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5207216900014080 Project: open62541 Fuzzer: libFuzzeropen62541fuzzjsondecodeencode Fuzz target binary: fuzzjsondecodeencode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

open62541/fuzz_binary_message: Heap-use-after-free in String_clear

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5749297120804864 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

libreoffice/qpwfuzzer: Global-buffer-overflow in std::__1::unique_ptr<ScAttrArray, std::__1::default_delete<ScAttrArray> >::opera

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5728133946277888 Project: libreoffice Fuzzer: afllibreofficeqpwfuzzer Fuzz target binary: qpwfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Global-buffer-overflow READ 8...

radare2/ia_fuzz: Crash in r_uleb128

Project: https://github.com/radare/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5651766995058688 Project: radare2 Fuzzer: aflradare2iafuzz Fuzz target binary: iafuzz Job Type: aflasanradare2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61f10005167f Crash State:...