ffmpeg: Heap-buffer-overflow in FDKmemset

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4540199973421056 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBFDKAACfuzzer Fuzz target binary: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

ffmpeg: Heap-buffer-overflow in vp8_decode_mb_row_no_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6314998085189632 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDWEBPfuzzer Fuzz target binary: ffmpegAVCODECIDWEBPfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

ffmpeg: Heap-buffer-overflow in chunky2chunky

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5020737339392000 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDCDXLfuzzer Fuzz target binary: ffmpegAVCODECIDCDXLfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

ffmpeg: Index-out-of-bounds in stereo_processing

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5212314171080704 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAACfuzzer Fuzz target binary: ffmpegAVCODECIDAACfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

wireshark: Heap-buffer-overflow in bootp_option

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=6216983760601088 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkudpport-bootp Fuzz target binary: fuzzsharkudpport-bootp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

libxml2: Use-of-uninitialized-value in xmlNextChar

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=5437541593382912 Project: libxml2 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Fuzz target binary: libxml2xmlreadmemoryfuzzer Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type:...

freetype2: Global-buffer-overflow in af_face_globals_compute_style_coverage

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://oss-fuzz.com/testcase?key=5391910787088384 Project: freetype2 Fuzzer: aflfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash...

ffmpeg: Global-buffer-overflow in ff_h264_filter_mb_fast

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6515070404132864 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDH264fuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDH264fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

lcms: Heap-buffer-overflow in TetrahedralInterpFloat

Project: https://github.com/mm2/Little-CMS.git Detailed report: https://oss-fuzz.com/testcase?key=6565571653009408 Project: lcms Fuzzer: libFuzzerlcmscmstransformfuzzer Fuzz target binary: cmstransformfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

gnutls: Heap-buffer-overflow in _cdk_buftou32

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=6394161118838784 Project: gnutls Fuzzer: libFuzzergnutlsopenpgpcertparserfuzzer Fuzz target binary: gnutlsopenpgpcertparserfuzzer Job Type: libfuzzerasangnutls Platform Id: linux Crash Type:...

libreoffice: Global-buffer-overflow in ImplUnicodeToDBCS

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5976843305877504 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

libreoffice: Crash in HStream::readBytes

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4509432228610048 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash...

ffmpeg: Crash in ff_put_pixels8_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5936536407244800 Project: ffmpeg Fuzzer: ffmpegVIDEOAVCODECIDINTERPLAYVIDEOfuzzer Job Type: libfuzzerasanffmpeg Crash Type: UNKNOWN READ Crash Address: 0x62b000010280 Crash State:...

freetype2: Heap-buffer-overflow in tt_size_reset

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6627871858622464 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type:...

ffmpeg: Heap-buffer-overflow in ipvideo_decode_block_opcode_0xA

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4850119698546688 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDINTERPLAYVIDEOfuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDINTERPLAYVIDEOfuzzer Job Type: libfuzzerasanffmpeg...

gnutls: Heap-buffer-overflow in read_attribute

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6667435805507584 Project: gnutls Fuzzer: libFuzzergnutlsopenpgpcertparserfuzzer Fuzz target binary: gnutlsopenpgpcertparserfuzzer Job Type: libfuzzerasangnutls Platform Id: linux...

libreoffice: Heap-buffer-overflow in EnhWMFReader::ReadEnhWMF

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5718557136519168 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type...

icu: Heap-buffer-overflow in utf8TextAccess

Project: https://github.com/unicode-org/icu.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6284234629054464 Project: icu Fuzzer: ucasemapfuzzer Job Type: libfuzzerasanicu Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x615000000760 Crash State: utf8TextAccess...

pcre2: Heap-buffer-overflow in parse_regex

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6709751601692672 Target: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzzer binary: pcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

lcms: Heap-use-after-free in NextCh

Project: https://github.com/mm2/Little-CMS.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5572304247455744 Target: lcms Fuzzer: libFuzzerlcmscmsIT8loadfuzzer Fuzzer binary: cmsIT8loadfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: Heap-use-after-free...

libjpeg-turbo: Crash in libjpeg_turbo_fuzzer

Project: https://github.com/libjpeg-turbo/libjpeg-turbo.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5850953135685632 Target: libjpeg-turbo Fuzzer: libFuzzerlibjpeg-turbolibjpegturbofuzzer Fuzzer binary: libjpegturbofuzzer Job Type: libfuzzerasanlibjpeg-turbo Platfor...

pcre2: Heap-buffer-overflow in compile_regex

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6206316414500864 Fuzzer: libFuzzerpcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x6120000005fb Crash State:...

libchewing: Heap-buffer-overflow in ChewingIsChiAt

Project: https://github.com/chewing/libchewing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5628163484811264 Fuzzer: libFuzzerchewingdynamicconfigfuzzer Job Type: libfuzzerasanlibchewing Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

Crash in sqlite3ExprSkipCollate

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5415982302494720 Fuzzer: libFuzzersqlite3fuzzer Job Type: libfuzzerasansqlite3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x322a32323236 Crash State: sqlite3ExprSkipCollate sqlite3ExprAffinity binaryCompareP5...

Heap-buffer-overflow in xmlDictComputeFastKey

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5086706067832832 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

imagemagick:enhance_fuzzer: Use-of-uninitialized-value in LibRaw::ljpeg_diff

Detailed Report: https://oss-fuzz.com/testcase?key=4761222404374528 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::ljpegdiff...

skia:sksl2spirv: Heap-use-after-free in SkSL::VariableReference::decrementRefs

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=4883400584069120 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2spirv Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x61100002af64...

libreoffice:docxfuzzer: Heap-buffer-overflow in AES_decrypt

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5641196309053440 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: docxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in fuzz_reader_transmit

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5085716578828288 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

arrow:parquet-arrow-fuzz: Heap-buffer-overflow in parquet::arrow::ApplyOriginalStorageMetadata

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5076612654301184 Project: arrow Fuzzing Engine: afl Fuzz Target: parquet-arrow-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x607000000460 Crash...

grok:grk_decompress_fuzzer: Heap-use-after-free in grk::TileProcessor::~TileProcessor

Detailed Report: https://oss-fuzz.com/testcase?key=5629659654651904 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerasangrok Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60d000000390 Crash State:...

libreoffice:sftfuzzer: Crash in GetUShort

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5679219483607040 Project: libreoffice Fuzzing Engine: afl Fuzz Target: sftfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6140000104e9 Crash...

libavif:avif_decode_fuzzer: Crash in avifRWDataSet

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=6544674100346880 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: avifdecodefuzzer Job Type: libfuzzerubsanlibavif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00002b5806...

libreoffice:ww8fuzzer: Heap-use-after-free in SfxItemSet::Count

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5666529566523392 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: ww8fuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash...

rdkit:mol_data_stream_to_mol_fuzzer: Crash in __dynamic_cast

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6033801128706048 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffff0000000...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=4750976240844800 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void intrapredictionangular vo...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in cmd_put_drawing_color

Detailed Report: https://oss-fuzz.com/testcase?key=5072828683255808 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cmdputdrawingcolor...

go-dns:fuzz_msg_unpack: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5706613619687424 Project: go-dns Fuzzing Engine: libFuzzer Fuzz Target: fuzzmsgunpack Job Type: libfuzzerasango-dns Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000016a280c Crash State: NULL Sanitizer: address ASAN Recommended...

monero:cold-outputs_fuzz_tests: Crash in tools::wallet2::import_outputs

Project: https://github.com/monero-project/monero.git Detailed Report: https://oss-fuzz.com/testcase?key=5443075625975808 Project: monero Fuzzing Engine: libFuzzer Fuzz Target: cold-outputsfuzztests Job Type: libfuzzerasanmonero Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

fasthttp:fuzz_request: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5640952463753216 Project: fasthttp Fuzzing Engine: libFuzzer Fuzz Target: fuzzrequest Job Type: libfuzzerasanfasthttp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000268b78c Crash State: NULL Sanitizer: address ASAN Recommended...

sleuthkit:sleuthkit_fls_ext_fuzzer: Index-out-of-bounds in tsk_img_read

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5693864252538880 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsextfuzzer Job Type: libfuzzerubsansleuthkit Platform Id: linux Crash Type: Index-out-of-bounds Crash Addres...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in asepcos_parse_sec_attr

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5179173686214656 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15reader Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

sleuthkit:sleuthkit_fls_hfs_fuzzer: Heap-buffer-overflow in hfs_cat_traverse

Detailed Report: https://oss-fuzz.com/testcase?key=6261381394071552 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflshfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61e000000a8a Crash State: hfscattraverse...

libyal:libfshfs_volume_fuzzer: Heap-buffer-overflow in libfshfs_fork_descriptor_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=5650228016054272 Project: libyal Fuzzing Engine: honggfuzz Fuzz Target: libfshfsvolumefuzzer Job Type: honggfuzzasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x611000000139 Crash State:...

fastjson:fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6259722731388928 Project: fastjson Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanfastjson Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000039118 Crash State: NULL Sanitizer: address ASAN Recommended Securit...

openexr:openexr_exrenvmap_fuzzer: Segv on unknown address in Imf_2_5::hufUncompress

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5896229264031744 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrenvmapfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Segv on unknown address Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_fuzzer: Heap-buffer-overflow in dng_decode_jpeg

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6326925027704832 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTIFFfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

rdkit:mol_data_stream_to_mol_fuzzer: Bad-cast to RDKit::Atom from invalid vptr in RDKit::SubstanceGroup::addAtomWithBookmark

Detailed Report: https://oss-fuzz.com/testcase?key=6001237489876992 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000032d2ea0 Crash State: Bad-cast to RDKit::Atom from invalid...

uwebsockets:MockedEchoServer: Use-of-uninitialized-value in longest_match

Project: https://github.com/uNetworking/uWebSockets.git Detailed Report: https://oss-fuzz.com/testcase?key=5370327463624704 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: MockedEchoServer Job Type: libfuzzermsanuwebsockets Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

samba:fuzz_ndr_dfsblobs_TYPE_STRUCT: Heap-buffer-overflow in ndr_push_string_array

Project: https://gitlab.com/samba-team/samba.git Detailed Report: https://oss-fuzz.com/testcase?key=5664733353738240 Project: samba Fuzzing Engine: honggfuzz Fuzz Target: fuzzndrdfsblobsTYPESTRUCT Job Type: honggfuzzasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Addres...