Heap-buffer-overflow in xmlDictComputeFastKey

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5408788102250496 Fuzzer: libFuzzerlibxml2readmemoryfuzzer Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

dlplibs:sdcfuzzer: Heap-buffer-overflow in STOFFStarMathToMMLConverterInternal::Parser::convert

Detailed Report: https://oss-fuzz.com/testcase?key=6749423412772864 Project: dlplibs Fuzzing Engine: libFuzzer Fuzz Target: sdcfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7c5877012988 Crash State:...

mruby:mruby_fuzzer: Crash in mrb_vm_exec

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6212427713413120 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0002dfff8004 Crash State: mrbvmexec...

nsmd:decode_common_resp_fuzzer: Heap-buffer-overflow in decode_common_resp

Detailed Report: https://oss-fuzz.com/testcase?key=4832295673200640 Project: nsmd Fuzzing Engine: libFuzzer Fuzz Target: decodecommonrespfuzzer Job Type: libfuzzerasannsmd Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x75fbfefe00b6 Crash State: decodecommonresp...

mruby:mruby_fuzzer: Stack-use-after-return in parser_lex

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5317160201945088 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address: 0x7bedc1e3e3c0...

mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_f_sprintf

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6105731716415488 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7887b259e7ff...

libxaac:xaac_enc_fuzzer: Heap-buffer-overflow in ixheaace_process

Project: https://github.com/ittiam-systems/libxaac.git Detailed Report: https://oss-fuzz.com/testcase?key=6358997045936128 Project: libxaac Fuzzing Engine: libFuzzer Fuzz Target: xaacencfuzzer Job Type: libfuzzerasanlibxaac Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in str2ullong

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6074198366945280 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x78fe5d2eae59 Crash State:...

cairo:font_fuzzer: Heap-buffer-overflow in find_name

Detailed Report: https://oss-fuzz.com/testcase?key=6060439623761920 Project: cairo Fuzzing Engine: libFuzzer Fuzz Target: fontfuzzer Job Type: libfuzzerasancairo Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x773cfbde16e4 Crash State: findname cairotruetypereadfontnam...

ghostscript:gs_device_tiffsep1_fuzzer: Crash in image_simple_expand

Detailed Report: https://oss-fuzz.com/testcase?key=5185787787542528 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x794a1935585f Crash State: imagesimpleexpand...

assimp:assimp_fuzzer: Use-of-uninitialized-value in Assimp::MDLImporter::ReplaceTextureWithColor

Detailed Report: https://oss-fuzz.com/testcase?key=4877139169312768 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Assimp::MDLImporter::ReplaceTextureWithColor...

gpsd:FuzzDriversStructured: Global-buffer-overflow in gpsd_poll

Project: https://gitlab.com/gpsd/gpsd.git Detailed Report: https://oss-fuzz.com/testcase?key=4900618321068032 Project: gpsd Fuzzing Engine: libFuzzer Fuzz Target: FuzzDriversStructured Job Type: libfuzzerasangpsd Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

wamr:wamr_fuzz_llvm_jit: Null-dereference READ in os_thread_wrapper

Project: https://github.com/bytecodealliance/wasm-micro-runtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5568564682883072 Project: wamr Fuzzing Engine: libFuzzer Fuzz Target: wamrfuzzllvmjit Job Type: libfuzzerasanwamr Platform Id: linux Crash Type: Null-dereference READ Crash...

vlc:vlc-demux-dec-libfuzzer-mp4: Crash in MP4_TrackSeek

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6684624020635648 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mp4 Job Type: aflasanvlc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff7fff Crash State:...

libxaac:xaac_enc_fuzzer: Heap-buffer-overflow in ixheaace_write_bits

Project: https://github.com/ittiam-systems/libxaac.git Detailed Report: https://oss-fuzz.com/testcase?key=5264306347507712 Project: libxaac Fuzzing Engine: libFuzzer Fuzz Target: xaacencfuzzer Job Type: libfuzzerasanlibxaac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

selinux:checkpolicy-fuzzer: Heap-double-free in policydb_destroy

Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=5836176679567360 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: checkpolicy-fuzzer Job Type: libfuzzerasanselinux Platform Id: linux Crash Type: Heap-double-free Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_ADPCM_IMA_MAGIX_DEC_fuzzer: Heap-buffer-overflow in adpcm_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4847227777646592 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDADPCMIMAMAGIXDECfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type:...

openthread:ip6-fuzzer: Stack-buffer-overflow in ot::Tlv::GetSize

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=4688966503956480 Project: openthread Fuzzing Engine: honggfuzz Fuzz Target: ip6-fuzzer Job Type: honggfuzzasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash...

ruby:fuzz_regex: Crash in forward_search_range

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5968328821899264 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzregex Job Type: libfuzzerubsanruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x78f8318f0016 Crash State:...

arrow:parquet-arrow-fuzz: Crash in parquet::ArrowBinaryHelper<parquet::PhysicalType<

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4570087119192064 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: parquet-arrow-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x56de346eb7e0 Crash...

openssl:provider: Heap-buffer-overflow in aes_xts_init

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5367200136626176 Project: openssl Fuzzing Engine: afl Fuzz Target: provider Job Type: aflasanopenssl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x763d9d30c250 Crash Stat...

libdwarf:fuzz_crc_32: Heap-buffer-overflow in _dwarf_macho_load_dwarf_sections

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=4931308642172928 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzcrc32 Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

simdjson:fuzz_ndjson: Use-of-uninitialized-value in simdjson::dom::stage1_worker::stop_thread

Detailed Report: https://oss-fuzz.com/testcase?key=6540286584225792 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzndjson Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: simdjson::dom::stage1worker::stopthread...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Index-out-of-bounds in hevc_decode_init

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4956250308935680 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

wireshark:fuzzshark_udp_port-dns: Heap-buffer-overflow in make_local_part_domain

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=6395620455940096 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkudpport-dns Job Type: aflasanwireshark Platform Id: linux Crash Type:...

suricata:fuzz_siginit: Use-of-uninitialized-value in hashlittle_safe

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=4557899680776192 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsiginit Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

mruby:mruby_proto_fuzzer: Bad-cast to ::ruby_fuzzer::BuiltinFuncsruby_fuzzer::Statement::clear_stmt_oneof in ruby_fuzzer::Statement::~Statement

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6611845320605696 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: Bad-cast Crash Address: 0x58f69a47ec30 Crash State:...

mruby:mruby_proto_fuzzer: Bad-cast to ::ruby_fuzzer::BuiltinFuncs from invalid vptr in ruby_fuzzer::Statement::clear_stmt_oneof

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4641941434466304 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyprotofuzzer Job Type: libfuzzerubsanmruby Platform Id: linux Crash Type: Bad-cast Crash Address: 0x598bb83514a0 Crash State:...

net-snmp:snmp_parse_args_fuzzer: Heap-buffer-overflow in snmp_in_options

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=6384743772127232 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpparseargsfuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type:...

ntpsec:FuzzServer: Use-of-uninitialized-value in next_uint16

Detailed Report: https://oss-fuzz.com/testcase?key=6175290369310720 Project: ntpsec Fuzzing Engine: libFuzzer Fuzz Target: FuzzServer Job Type: libfuzzermsanntpsec Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: nextuint16 ntskeprocessreceive FuzzServer.c...

libconfig:config_read_fuzzer: Stack-buffer-overflow in config_setting_get_member

Project: https://github.com/hyperrealm/libconfig.git Detailed Report: https://oss-fuzz.com/testcase?key=6621525259649024 Project: libconfig Fuzzing Engine: libFuzzer Fuzz Target: configreadfuzzer Job Type: libfuzzerasanlibconfig Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash...

libreoffice:htmlfuzzer: Heap-use-after-free in SwNodes::UpdateOutlineIdx

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6069445264474112 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

ghostscript:gs_device_ps2write_fuzzer: Stack-buffer-underflow in gs_type1_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=5694822949650432 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7b6643049c1c Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_MMVIDEO_fuzzer: Index-out-of-bounds in mm_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4655048979709952 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMMVIDEOfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

xpdf: Heap-buffer-overflow in ZxDoc::parse

With the following new fuzz target generated by https://github.com/google/oss-fuzz-gen: include include include include include include include "/src/xpdf-4.05/xpdf/Zoox.h" extern "C" int LLVMFuzzerTestOneInputconst uint8t data, sizet size FuzzedDataProvider fdpdata, size; std::string filename =...

pigweed:peer_cache_fuzzer: Use-of-uninitialized-value in unsigned long bt::Random<unsigned long>

Detailed Report: https://oss-fuzz.com/testcase?key=6254271758139392 Project: pigweed Fuzzing Engine: libFuzzer Fuzz Target: peercachefuzzer Job Type: libfuzzermsanpigweed Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: unsigned long bt::Random bt::RandomPeerI...

w3m:fuzz_conv: Crash in wc_any_to_isoNUMBER

Detailed Report: https://oss-fuzz.com/testcase?key=5114197861531648 Project: w3m Fuzzing Engine: libFuzzer Fuzz Target: fuzzconv Job Type: libfuzzerasanw3m Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x290700000b40 Crash State: wcanytoisoNUMBER wcpushtoisoNUMBER wcStrconv Sanitizer...

shaderc:shaderc_fdp_fuzzer: Crash in glslang::HlslTokenStream::advanceToken

Project: https://github.com/google/shaderc.git Detailed Report: https://oss-fuzz.com/testcase?key=4542997712142336 Project: shaderc Fuzzing Engine: libFuzzer Fuzz Target: shadercfdpfuzzer Job Type: libfuzzerasanshaderc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f3baa5de580 Cras...

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in void RDKit::ParseV3000AtomProps<std::__1::vector<std::__1::basic_string_view<cha

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6046179775610880 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

imagemagick:encoder_tiff64_fuzzer: Use-of-uninitialized-value in PixarLogDecode

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5030711574200320 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertiff64fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick:encoder_jxl_fuzzer: Use-of-uninitialized-value in GetPixelIntensity

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5162477567934464 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderjxlfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in residual_coding

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5187484170911744 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5144976934109184 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

openssl:hashtable: Stack-buffer-overflow in CRYPTO_atomic_load

Detailed Report: https://oss-fuzz.com/testcase?key=5058079189172224 Project: openssl Fuzzing Engine: libFuzzer Fuzz Target: hashtable Job Type: libfuzzerasani386openssl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0xf5d01117 Crash State: CRYPTOatomicload osslhtget...

clock:FuzzClock: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4944318432346112 Project: clock Fuzzing Engine: libFuzzer Fuzz Target: FuzzClock Job Type: libfuzzerasanclock Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommended...

cras:cras_fl_media_fuzzer: Use-of-uninitialized-value in validate_bluetooth_device_address

Detailed Report: https://oss-fuzz.com/testcase?key=6559408940187648 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: crasflmediafuzzer Job Type: libfuzzermsancras Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: validatebluetoothdeviceaddress...

jackson-databind:ObjectReaderRandomClassFuzzer: Security exception in com.github.javaparser.ast.NodeList.forEach

Detailed Report: https://oss-fuzz.com/testcase?key=5562294826237952 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ObjectReaderRandomClassFuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

llvm:llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::object::WasmObjectFile::parseLinkingSectionSymtab

Detailed Report: https://oss-fuzz.com/testcase?key=4510378518511616 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60b000001325 Crash State:...

kamailio:fuzz_parse_msg: Crash in parse_priv_value

Project: https://github.com/kamailio/kamailio.git Detailed Report: https://oss-fuzz.com/testcase?key=4608733516529664 Project: kamailio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsemsg Job Type: libfuzzerasankamailio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x618000010000 Cra...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4924767227215872 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...