openh264:decoder_fuzzer: Heap-use-after-free in WelsDec::CWelsDecoder::SetOption

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5693903391162368 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasani386openh264 Platform Id: linux Crash Type: Heap-use-after-free WRITE 1 Crash Address:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in SHA1Transform

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5638005415215104 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6100000180f9 Crash State...

libfdk-aac/aacDecoder_DecodeFrame: Index-out-of-bounds in processDrcTime

Detailed report: https://oss-fuzz.com/testcase?key=5744919487971328 Project: libfdk-aac Fuzzer: libFuzzerlibfdk-aacaacDecoderDecodeFrame Fuzz target binary: aacDecoderDecodeFrame Job Type: libfuzzerubsanlibfdk-aac Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

systemd/fuzz-netdev-parser: Use-of-uninitialized-value in explicit_bzero_safe

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5189307683307520 Project: systemd Fuzzer: libFuzzersystemdfuzz-netdev-parser Fuzz target binary: fuzz-netdev-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type:...

perfetto/trace_processor_fuzzer: Crash in perfetto::trace_processor::ProtoTraceParser::ParseTypedFtraceToRaw

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed report: https://oss-fuzz.com/testcase?key=5740416861732864 Project: perfetto Fuzzer: libFuzzerperfettotraceprocessorfuzzer Fuzz target binary: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Cra...

harfbuzz/hb-subset-fuzzer: Global-buffer-overflow in CFF::BlendArg::set_blends

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5710107829075968 Project: harfbuzz Fuzzer: aflharfbuzzhb-subset-fuzzer Fuzz target binary: hb-subset-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Global-buffer-overflow READ 8...

librawspeed/VC5DecompressorFuzzer: Heap-buffer-overflow in rawspeed::VC5Decompressor::Wavelet::HighPassBand::decode

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5735870561255424 Project: librawspeed Fuzzer: libFuzzerlibrawspeedVC5DecompressorFuzzer Fuzz target binary: VC5DecompressorFuzzer Job Type: libfuzzerasanlibrawspeed Platform Id: linux Crash...

systemd/fuzz-network-parser: Heap-buffer-overflow in network_free

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5759063753752576 Project: systemd Fuzzer: libFuzzersystemdfuzz-network-parser Fuzz target binary: fuzz-network-parser Job Type: libfuzzerasansystemd Platform Id: linux Crash Type: Heap-buffer-overfl...

graphicsmagick/coder_PNG_fuzzer: Use-of-uninitialized-value in ReadPNGImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5146983567196160 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPNGfuzzer Fuzz target binary: coderPNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

imagemagick/encoder_tiff64_fuzzer: Use-of-uninitialized-value in DecodeLabImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4812954626162688 Project: imagemagick Fuzzer: libFuzzerimagemagickencodertiff64fuzzer Fuzz target binary: encodertiff64fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type...

skia/animated_image_decode: Container-overflow in piex::GetFullCropDimension

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5667932416770048 Project: skia Fuzzer: libFuzzerskiaanimatedimagedecode Fuzz target binary: animatedimagedecode Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Container-overflow READ 4...

openthread/ip6-send-fuzzer: Stack-buffer-overflow in ot::NetworkData::ServiceTlv::GetServiceDataLength

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5433723441905664 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type:...

imagemagick/encoder_xc_fuzzer: Heap-buffer-overflow in string

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5399651365683200 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderxcfuzzer Fuzz target binary: encoderxcfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_psd_fuzzer: Negative-size-param in CopyMagickMemory

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5076161005617152 Project: imagemagick Fuzzer: aflimagemagickencoderpsdfuzzer Fuzz target binary: encoderpsdfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_pcds_fuzzer: Use-of-uninitialized-value in ClampPixel

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5687013954027520 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpcdsfuzzer Fuzz target binary: encoderpcdsfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

unrar/unrar_fuzzer: Heap-buffer-overflow in Unpack::CopyString

Detailed report: https://oss-fuzz.com/testcase?key=6224876978307072 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzerasanunrar Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7f0e45e76800 Crash State: Unpack::CopyString...

libreoffice: Heap-use-after-free in SwNumRule::GetNumFormat

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4591319768891392 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

resiprocate: Heap-buffer-overflow in ares_mkquery

Project: https://github.com/resiprocate/resiprocate.git Detailed report: https://oss-fuzz.com/testcase?key=5471786512678912 Project: resiprocate Fuzzer: aflresiprocatearesfuzzname Fuzz target binary: aresfuzzname Job Type: aflasanresiprocate Platform Id: linux Crash Type: Heap-buffer-overflow WRI...

gdal: Heap-buffer-overflow in NITFRasterBand::IReadBlock

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5463142119243776 Project: gdal Fuzzer: libFuzzergdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x603000084656 Crash State:...

proj4: Stack-buffer-overflow in pj_open_lib_ex

Detailed report: https://oss-fuzz.com/testcase?key=6058391271112704 Project: proj4 Fuzzer: aflproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: aflasanproj4 Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7f2bb94a2421 Crash State: pjopenlibex...

dlplibs: Global-buffer-overflow in StarEncoding::read

Detailed report: https://oss-fuzz.com/testcase?key=6132274431000576 Project: dlplibs Fuzzer: libFuzzerdlplibssdwfuzzer Fuzz target binary: sdwfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000a4fcdc Crash State:...

libtsm: Heap-buffer-overflow in tsm_screen_tab_left

Project: git://people.freedesktop.org/dvdhrm/libtsm Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5633680093478912 Project: libtsm Fuzzer: libFuzzerlibtsmfuzzer Fuzz target binary: libtsmfuzzer Job Type: libfuzzerasanlibtsm Platform Id: linux Crash Type:...

Heap-buffer-overflow in Mac_Read_sfnt_Resource

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4605905983242240 Fuzzer: libFuzzerfreetype2fuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

libavif:[email protected]: Crash in [email protected]

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=4755077641863168 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerasanlibavif Platform Id: linux Crash Type:...

apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in org.yaml.snakeyaml.parser.ParserImpl$ParseBlockMappingValueComment.produce

Detailed Report: https://oss-fuzz.com/testcase?key=4883712972488704 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

libucl: Heap-buffer-overflow in ucl_maybe_parse_number

With the following harness: include include include include "ucl.h" int uclmaybeparsenumber uclobjectt obj, const char start, const char end, const char pos, bool allowdouble, bool numberbytes, bool allowtime; int LLVMFuzzerTestOneInputconst uint8t data, sizet size if size == 0 return 0; uclobjec...

jackson-dataformats-text:DeserializerFuzzer: Security exception in com.fasterxml.jackson.databind.DeserializationContext.readValue

Project: https://github.com/FasterXML/jackson-dataformats-text.git Detailed Report: https://oss-fuzz.com/testcase?key=4520756360642560 Project: jackson-dataformats-text Fuzzing Engine: libFuzzer Fuzz Target: DeserializerFuzzer Job Type: libfuzzerasanjackson-dataformats-text Platform Id: linux Cra...

libreoffice:hwpfuzzer: Global-buffer-overflow in Outline::GetUnicode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5975627141611520 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::UdpLayer::parseNextLayer

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5208740558667776 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

pillow:fuzz_pillow: Invalid-free in _dealloc

Project: https://github.com/python-pillow/Pillow.git Detailed Report: https://oss-fuzz.com/testcase?key=4940032184287232 Project: pillow Fuzzing Engine: libFuzzer Fuzz Target: fuzzpillow Job Type: libfuzzerasanpillow Platform Id: linux Crash Type: Invalid-free Crash Address: 0x6190000eab80 Crash...

bitcoin-core:policy_estimator_io: Crash in FuzzedFileProvider::seek

Detailed Report: https://oss-fuzz.com/testcase?key=5868483069476864 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: policyestimatorio Job Type: libfuzzerasani386bitcoin-core Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffff Crash State: FuzzedFileProvider::seek...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in move_explicit_Hcation

Detailed Report: https://oss-fuzz.com/testcase?key=5699348764688384 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: inchiinputfuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62e00000d200 Crash State: moveexplicitHcation...

simdjson:fuzz_ondemand: Crash in numberparsing.h

Project: https://github.com/simdjson/simdjson.git https://github.com/lemire/simdjson.git Detailed Report: https://oss-fuzz.com/testcase?key=5632701446750208 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzondemand Job Type: libfuzzerasansimdjson Platform Id: linux Crash Type: UNKNOWN...

wolfssl:fuzzer-wolfssh-server: Heap-buffer-overflow in wolfSSH_accept

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5752343091740672 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-server Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address...

libsndfile:sndfile_fuzzer: Use-of-uninitialized-value in dwvw_decode_load_bits

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=6483024919920640 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

php:php-fuzz-execute: Heap-use-after-free in zend_gc_addref

Detailed Report: https://oss-fuzz.com/testcase?key=5636312147951616 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x612000018040 Crash State: zendgcaddref...

ndpi:fuzz_process_packet: Use-of-uninitialized-value in ndpi_check_dga_name

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5641543770439680 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

grok:grk_decompress_fuzzer: Heap-use-after-free in grk::t1_part1::T1Part1::postDecode

Detailed Report: https://oss-fuzz.com/testcase?key=4816483509862400 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerasangrok Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x607000016538 Crash State:...

php:php-fuzz-parser: Heap-use-after-free in shutdown_executor

Detailed Report: https://oss-fuzz.com/testcase?key=6273714575114240 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0xf38297cc Crash State: shutdownexecutor zenddeactivate...

libzmq:test_socket_options_fuzzer: Heap-buffer-overflow in zmq_z85_decode

Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5458470013501440 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testsocketoptionsfuzzer Job Type: libfuzzerasanlibzmq Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

nanopb:fuzztest: Use-of-uninitialized-value in pb_encode_varint

Project: https://github.com/nanopb/nanopb.git Detailed Report: https://oss-fuzz.com/testcase?key=5127522971549696 Project: nanopb Fuzzing Engine: libFuzzer Fuzz Target: fuzztest Job Type: libfuzzermsannanopb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

go-dns:fuzz_msg_unpack: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5642061701971968 Project: go-dns Fuzzing Engine: libFuzzer Fuzz Target: fuzzmsgunpack Job Type: libfuzzerasango-dns Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000002d140 Crash State: NULL Sanitizer: address ASAN Recommended...

assimp:assimp_fuzzer: Heap-buffer-overflow in ODDLParser::OpenDDLParser::parseIdentifier

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5161012492500992 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

grok:grk_decompress_fuzzer: Container-overflow in grk::T2Decode::read_packet_header

Detailed Report: https://oss-fuzz.com/testcase?key=5136412048097280 Project: grok Fuzzing Engine: honggfuzz Fuzz Target: grkdecompressfuzzer Job Type: honggfuzzasangrok Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address: 0x61500007a760 Crash State:...

immer:flex-vector-gc: Segv on unknown address in immer::detail::rbts::relaxed_pos<immer::detail::rbts::node<int, immer::memory_po

Project: https://github.com/arximboldi/immer.git Detailed Report: https://oss-fuzz.com/testcase?key=4872518268354560 Project: immer Fuzzing Engine: libFuzzer Fuzz Target: flex-vector-gc Job Type: libfuzzerasanimmer Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

sqlite3:ossfuzz: Use-of-uninitialized-value in sqlite3Atoi64

Detailed Report: https://oss-fuzz.com/testcase?key=4899130430980096 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sqlite3Atoi64 computeNumericType numericType...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_oracle

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5090959332474880 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60a0000fbad1 Crash State...

suricata:fuzz_applayerparserparse: Heap-use-after-free in htp_connp_is_line_terminator

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5099629239861248 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzapplayerparserparse Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Addres...

quickjs:fuzz_compile: Heap-use-after-free in JS_ReadObjectRec

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5676100190732288 Project: quickjs Fuzzing Engine: honggfuzz Fuzz Target: fuzzcompile Job Type: honggfuzzasanquickjs Platform Id: linux Crash Type:...

binutils:fuzz_disassemble: Use-of-uninitialized-value in loop_prim_n_bytes

Detailed Report: https://oss-fuzz.com/testcase?key=5652986874560512 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: loopprimnbytes decodes12z printinsns12...