jsc: Crash in jsc

Detailed report: https://oss-fuzz.com/testcase?key=4816702556078080 Project: jsc Job Type: asanjsc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: jsc jsc jsc Sanitizer: address ASAN Regressed:...

icu/collator_rulebased_fuzzer: Crash in icu_64::UCharsTrie::branchNext

Project: https://github.com/unicode-org/icu.git Detailed report: https://oss-fuzz.com/testcase?key=5649936613376000 Project: icu Fuzzer: libFuzzericucollatorrulebasedfuzzer Fuzz target binary: collatorrulebasedfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: UNKNOWN READ Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_DXV_fuzzer: Heap-buffer-overflow in dxt1_block_internal

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5670831067234304 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDDXVfuzzer Fuzz target binary: ffmpegAVCODECIDDXVfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

imagemagick/ping_icon_fuzzer: Use-of-uninitialized-value in png_crc_finish

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5751794220662784 Project: imagemagick Fuzzer: libFuzzerimagemagickpingiconfuzzer Fuzz target binary: pingiconfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_heic_fuzzer: Stack-buffer-overflow in std::__1::shared_ptr<heif::HeifPixelImage>::~shared_ptr

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5638446846050304 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_dng_fuzzer: Heap-buffer-overflow in LibRaw::get2

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5755410549571584 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

open62541/fuzz_binary_message: Use-of-uninitialized-value in __RefHead_ZIP_INSERT

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5721711044984832 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type:...

njs/njs_process_script_fuzzer: Use-of-uninitialized-value in nxt_random_add

Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5655066641432576 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

njs/njs_process_script_fuzzer: Heap-buffer-overflow in nxt_vsprintf

Project: http://hg.nginx.org/njs Detailed report: https://oss-fuzz.com/testcase?key=5142265766346752 Project: njs Fuzzer: libFuzzernjsprocessscriptfuzzer Fuzz target binary: njsprocessscriptfuzzer Job Type: libfuzzerasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address:...

libxslt/xslt: Use-of-uninitialized-value in xmlStrlen

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed report: https://oss-fuzz.com/testcase?key=5197371471822848 Project: libxslt Fuzzer: libFuzzerlibxsltxslt Fuzz target binary: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

karchive/karchive_fuzzer: Index-out-of-bounds in BZ2_decompress

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5204259928276992 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzerubsankarchive Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

gdal/gtiff_mmap: Crash in inflate

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5074700427853824 Project: gdal Fuzzer: libFuzzergdalgtiffmmap Fuzz target binary: gtiffmmap Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62d0947c1773 Crash...

harfbuzz/hb-subset-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5761434614497280 Project: harfbuzz Fuzzer: aflharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Cra...

imagemagick/encoder_tiff_fuzzer: Use-of-uninitialized-value in HalfToSinglePrecision

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5640152724013056 Project: imagemagick Fuzzer: libFuzzerimagemagickencodertifffuzzer Fuzz target binary: encodertifffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

karchive/karchive_fuzzer: Use-of-uninitialized-value in KTar::KTarPrivate::readRawHeader

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5721364448673792 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

openthread/cli-uart-received-fuzzer: Stack-buffer-overflow in ot::Ip6::Address::FromString

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5661048276779008 Project: openthread Fuzzer: libFuzzeropenthreadcli-uart-received-fuzzer Fuzz target binary: cli-uart-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash...

karchive/karchive_fuzzer: Use-of-uninitialized-value in QByteArray::operator=

Project: git://anongit.kde.org/karchive Detailed report: https://oss-fuzz.com/testcase?key=5725791050006528 Project: karchive Fuzzer: libFuzzerkarchivefuzzer Fuzz target binary: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

gdal/mrf_fuzzer: Heap-buffer-overflow in ExpandPacked8ToByte1

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5645695916179456 Project: gdal Fuzzer: aflgdalmrffuzzer Fuzz target binary: mrffuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7f4b21b43800 Crash...

kimageformats/kimgio_kra_fuzzer: Use-of-uninitialized-value in QString::vasprintf

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5710491000766464 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiokrafuzzer Fuzz target binary: kimgiokrafuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

tinyxml2/xmltest: Use-of-uninitialized-value in tinyxml2::StrPair::ParseText

Project: https://github.com/leethomason/tinyxml2.git Detailed report: https://oss-fuzz.com/testcase?key=5752728054136832 Project: tinyxml2 Fuzzer: libFuzzertinyxml2xmltest Fuzz target binary: xmltest Job Type: libfuzzermsantinyxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

lwan/request_fuzzer: Global-buffer-overflow in parse_headers

Project: git://github.com/lpereira/lwan Detailed report: https://oss-fuzz.com/testcase?key=5649134389821440 Project: lwan Fuzzer: afllwanrequestfuzzer Fuzz target binary: requestfuzzer Job Type: aflasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash Address: 0x0000012023bf...

wpantund/wpantund-fuzz: Crash in (__has_construct<std::__1::allocator<unsigned

Detailed report: https://oss-fuzz.com/testcase?key=5700079681273856 Project: wpantund Fuzzer: libFuzzerwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: libfuzzerubsanwpantund Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000085d000 Crash State: hasconstruct::valu...

lwan/request_fuzzer: Negative-size-param in parse_proxy_protocol_v2

Project: git://github.com/lpereira/lwan Detailed report: https://oss-fuzz.com/testcase?key=5091179189764096 Project: lwan Fuzzer: libFuzzerlwanrequestfuzzer Fuzz target binary: requestfuzzer Job Type: libfuzzerasanlwan Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

opencv/imread_fuzzer: Crash in _TIFFmemset

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5760646009847808 Project: opencv Fuzzer: aflopencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fe0ecdf77d0 Crash...

kimageformats/kimgio_fuzzer: Heap-use-after-free in void qDeleteAll<QHash<QString, KArchiveEntry*>::const_iterator>

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=6207244191924224 Project: kimageformats Fuzzer: aflkimageformatskimgiofuzzer Fuzz target binary: kimgiofuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Heap-use-after-free READ 8...

keystone/fuzz_asm_sparc64be: Crash in cfree

Detailed report: https://oss-fuzz.com/testcase?key=5741753304350720 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmsparc64be Fuzz target binary: fuzzasmsparc64be Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x718dfffef620 Crash State: cfree...

systemd/fuzz-netdev-parser: Global-buffer-overflow in nulstr_contains

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5695224883445760 Project: systemd Fuzzer: libFuzzersystemdfuzz-netdev-parser Fuzz target binary: fuzz-netdev-parser Job Type: libfuzzerasansystemd Platform Id: linux Crash Type: Global-buffer-overfl...

opencv/imdecode_fuzzer: Negative-size-param in _TIFFmemcpy

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5766572742803456 Project: opencv Fuzzer: aflopencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash Stat...

opencv/imdecode_fuzzer: Heap-buffer-overflow in jpc_dec_process_sot

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5727882976952320 Project: opencv Fuzzer: aflopencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

grpc/ssl_server_fuzzer: Heap-buffer-overflow in grpc_core::HandshakerArgs::HandshakerArgs

Detailed report: https://oss-fuzz.com/testcase?key=5732516768514048 Project: grpc Fuzzer: libFuzzergrpcsslserverfuzzer Fuzz target binary: sslserverfuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x615000000268 Crash State:...

graphicsmagick/coder_PTIF_fuzzer: Use-of-uninitialized-value in DisassociateAlphaRegion

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5713410539388928 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPTIFfuzzer Fuzz target binary: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

openh264/decoder_fuzzer: Heap-use-after-free in WelsDec::MapColToList0

Project: https://github.com/cisco/openh264.git Detailed report: https://oss-fuzz.com/testcase?key=5746677611233280 Project: openh264 Fuzzer: libFuzzeropenh264decoderfuzzer Fuzz target binary: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-use-after-free READ 4...

readstat/fuzz_format_sas7bdat: Heap-buffer-overflow in sas_read4

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5726230161129472 Project: readstat Fuzzer: aflreadstatfuzzformatsas7bdat Fuzz target binary: fuzzformatsas7bdat Job Type: aflasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow READ ...

kcodecs/kcodecs_fuzzer: Global-buffer-overflow in kencodingprober::nsCodingStateMachine::NextState

Project: git://anongit.kde.org/kcodecs Detailed report: https://oss-fuzz.com/testcase?key=5191762182668288 Project: kcodecs Fuzzer: libFuzzerkcodecsfuzzer Fuzz target binary: kcodecsfuzzer Job Type: libfuzzerasankcodecs Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

libreoffice/ww6fuzzer: Heap-use-after-free in SwIndex::Remove

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5679197056401408 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

openthread/cli-uart-received-fuzzer: Index-out-of-bounds in ot::Cli::Uart::ReceiveTask

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5730276330700800 Project: openthread Fuzzer: libFuzzeropenthreadcli-uart-received-fuzzer Fuzz target binary: cli-uart-received-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux Cras...

grpc/api_fuzzer: Incorrect-function-pointer-type in grpc_core::AresDnsResolver::StartResolvingLocked

Detailed report: https://oss-fuzz.com/testcase?key=5168950411788288 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Crash State:...

libxls/fuzz_xls: Heap-buffer-overflow in xls_isCellTooSmall

Project: https://github.com/libxls/libxls.git Detailed report: https://oss-fuzz.com/testcase?key=5085850579238912 Project: libxls Fuzzer: afllibxlsfuzzxls Fuzz target binary: fuzzxls Job Type: aflasanlibxls Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x603000002008...

readstat/fuzz_format_dta: Stack-buffer-overflow in readstat_convert

Project: https://github.com/WizardMac/ReadStat.git Detailed report: https://oss-fuzz.com/testcase?key=5730197242904576 Project: readstat Fuzzer: aflreadstatfuzzformatdta Fuzz target binary: fuzzformatdta Job Type: aflasanreadstat Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...

curl/curl_fuzzer_ftp: Crash in ftp_disconnect

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5176327364149248 Project: curl Fuzzer: libFuzzercurlfuzzerftp Fuzz target binary: curlfuzzerftp Job Type: libfuzzerasancurl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000015b0 Crash...

graphicsmagick/coder_MIFF_fuzzer: Use-of-uninitialized-value in deflate_slow

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5689395047301120 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMIFFfuzzer Fuzz target binary: coderMIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

radare2/ia_fuzz: Heap-buffer-overflow in walkSymbols

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed report: https://oss-fuzz.com/testcase?key=5669017843400704 Project: radare2 Fuzzer: aflradare2iafuzz Fuzz target binary: iafuzz Job Type: aflasanradare2 Platform Id: linux Crash Type:...

keystone/fuzz_asm_sparc64be: Heap-buffer-overflow in ELFSparcAsmBackend::applyFixup

Detailed report: https://oss-fuzz.com/testcase?key=5642078139187200 Project: keystone Fuzzer: libFuzzerkeystonefuzzasmsparc64be Fuzz target binary: fuzzasmsparc64be Job Type: libfuzzerasankeystone Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6070000003e1 Crash State...

boost/boost_regex_fuzzer: Crash in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo

Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=5680605526753280 Project: boost Fuzzer: aflboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: aflasanboost Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6231d00001ba Crash...

libreoffice/ww8fuzzer: Bad-cast to SwPaMSwRangeRedline::operator< in std::__1::pair<std::__1::__wrap_iter<SwRangeRedline* const*>, std::__1::__wrap_i

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5662585936936960 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

dav1d/dav1d_fuzzer_mt: Use-of-uninitialized-value in cdef_find_dir_c

Project: https://code.videolan.org/videolan/dav1d.git Detailed report: https://oss-fuzz.com/testcase?key=5673813048557568 Project: dav1d Fuzzer: libFuzzerdav1dfuzzermt Fuzz target binary: dav1dfuzzermt Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

glib/fuzz_markup: Use-of-uninitialized-value in g_utf8_get_char_extended

Detailed report: https://oss-fuzz.com/testcase?key=6336979020021760 Project: glib Fuzzer: libFuzzerglibfuzzmarkup Fuzz target binary: fuzzmarkup Job Type: libfuzzermsanglib Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: gutf8getcharextended...

libreoffice/ww8fuzzer: Bad-cast to SwPaMSwRangeRedline::operator< in std::__1::pair<std::__1::__wrap_iter<SwRangeRedline* const*>, std::__1::__wrap_iter<SwRangeRedline* const*> > std::__1::__equal_range<CompareSwRedlineTable&, std::__1::__wrap_iter<SwRangeRedline* const*>, SwRangeRedline*>

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5680715916640256 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

harfbuzz/hb-shape-fuzzer: Heap-buffer-overflow in BEInt<unsigned short, 2>::operator unsigned short

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5688420752424960 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow...

skia/android_codec: Heap-buffer-overflow in swizzle_index_to_n32

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5755937772535808 Project: skia Fuzzer: aflskiaandroidcodec Fuzz target binary: androidcodec Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...