libarchive: Heap-buffer-overflow in _warc_rdlen

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4606991431368704 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...

freetype2: Heap-buffer-overflow in tt_size_reset

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6627871858622464 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type:...

lcms: Heap-use-after-free in TetrahedralInterpFloat

Project: https://github.com/mm2/Little-CMS.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5428245918908416 Project: lcms Fuzzer: libFuzzerlcmscmstransformfuzzer Fuzz target binary: cmstransformfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type:...

libtsm: Global-buffer-overflow in vte_write_debug

Project: git://people.freedesktop.org/dvdhrm/libtsm Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6258143222824960 Project: libtsm Fuzzer: libFuzzerlibtsmfuzzer Fuzz target binary: libtsmfuzzer Job Type: libfuzzerasanlibtsm Platform Id: linux Crash Type:...

file: Attempting free in apprentice_map

Project: https://github.com/file/file.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5095269284708352 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Attempting free Crash Address...

json: Use-of-uninitialized-value in nlohmann::basic_json<std::__1::map, std::__1::vector, std::__1::basic_string<cha

Project: https://github.com/nlohmann/json.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6051806467588096 Project: json Fuzzer: libFuzzerjsonfuzzer-parsecbor Fuzz target binary: fuzzer-parsecbor Job Type: libfuzzermsanjson Platform Id: linux Crash Type:...

libreoffice: Crash in ImplCreateDIB

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6701721724125184 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type...

expat: Use-of-uninitialized-value in _start

Project: https://github.com/libexpat/libexpat.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4717026396340224 Project: expat Fuzzer: libFuzzerexpatparsefuzzer Fuzz target binary: expatparsefuzzer Job Type: libfuzzermsanexpat Platform Id: linux Crash Type:...

file: Crash in mprint

Project: https://github.com/file/file.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5158914005925888 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

libarchive: Heap-buffer-overflow in archive_mstring_copy_mbs

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6462609050042368 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...

libarchive: Heap-buffer-overflow in archive_le32dec

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4591448766808064 Target: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzzer binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...

lcms: Heap-use-after-free in NextCh

Project: https://github.com/mm2/Little-CMS.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5572304247455744 Target: lcms Fuzzer: libFuzzerlcmscmsIT8loadfuzzer Fuzzer binary: cmsIT8loadfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: Heap-use-after-free...

ffmpeg: Stack-buffer-overflow in ff_htmlmarkup_to_ass

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6380176053108736 Target: ffmpeg Fuzzer: libFuzzerffmpegSUBTITLEAVCODECIDSUBRIPfuzzer Fuzzer binary: ffmpegSUBTITLEAVCODECIDSUBRIPfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linu...

libchewing: Heap-buffer-overflow in CallPhrasing

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5186601554542592 Fuzzer: libFuzzerlibchewingchewingdynamicconfigfuzzer Job Type: libfuzzerasanlibchewing Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7f955b667fb0 Crash State: CallPhrasing...

libyal:libvsgpt_partition_fuzzer: Heap-buffer-overflow in libvsgpt_partition_entry_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=6082663170244608 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libvsgptpartitionfuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0xf4e00651 Crash State:...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in Flow::dissectMDNS

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=5881946677510144 Project: ntopng Fuzzing Engine: libFuzzer Fuzz Target: fuzzdissectpacket Job Type: libfuzzerasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

wasm3:fuzzer: Crash in op_i64_Load_i32_s

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=4832595972784128 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x753cf149f573 Crash State:...

libaom:av1_enc_fuzzer: Heap-buffer-overflow in av1_calc_mb_wiener_var_row

Detailed Report: https://oss-fuzz.com/testcase?key=5683371750260736 Project: libaom Fuzzing Engine: libFuzzer Fuzz Target: av1encfuzzer Job Type: libfuzzerasanlibaom Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x7e239e8618ea Crash State: av1calcmbwienervarrow...

openbabel:fuzz_convert: Stack-buffer-overflow in OpenBabel::MCDLFormat::getMCDL

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=6399125835546624 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzconvert Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address...

mruby:mruby_fuzzer: Crash in mrb_vm_exec

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6212427713413120 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0002dfff8004 Crash State: mrbvmexec...

json-flattener:AdvancedFuzzer: Security exception in com.github.wnameless.json.base.JsonValueUtils.toMap

Project: https://github.com/wnameless/json-flattener.git Detailed Report: https://oss-fuzz.com/testcase?key=4619821543915520 Project: json-flattener Fuzzing Engine: libFuzzer Fuzz Target: AdvancedFuzzer Job Type: libfuzzerasanjson-flattener Platform Id: linux Crash Type: Security exception Crash...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.NodeList.forEach

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4805093085216768 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

binutils:fuzz_addr2line: Heap-buffer-overflow in _bfd_read_unsigned_leb128

Detailed Report: https://oss-fuzz.com/testcase?key=5599450797244416 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzaddr2line Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x776b7ffe0761 Crash State: bfdreadunsignedleb128...

grok:grk_decompress_fuzzer: Memcpy-param-overlap in grk::memStreamRead

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5626836959952896 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzerasangrok Platform Id...

libssh2:ssh2_client_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Project: https://github.com/cmeister2/libssh2.git https://github.com/libssh2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5873195438899200 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerubsanlibssh2 Platform Id: linux Crash Type:...

hunspell: Stack-buffer-overflow in AffixMgr::compound_check_morph

Recording https://github.com/hunspell/hunspell/issues/996 here for historical purposes...

cyclonedds:fuzz_sample_deser: Crash in stream_normalize_adr

Detailed Report: https://oss-fuzz.com/testcase?key=5306173018931200 Project: cyclonedds Fuzzing Engine: honggfuzz Fuzz Target: fuzzsampledeser Job Type: honggfuzzasancyclonedds Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7ffff6d00000 Crash State: streamnormalizeadr...

ffmpeg:ffmpeg_AV_CODEC_ID_DDS_fuzzer: Use-of-uninitialized-value in run_postproc

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5610978396405760 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDDDSfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

edk2:TestPeiUsb: Stack-buffer-overflow in PeiUsbGetAllConfiguration

Project: https://github.com/tianocore/edk2.git Detailed Report: https://oss-fuzz.com/testcase?key=6213046417555456 Project: edk2 Fuzzing Engine: libFuzzer Fuzz Target: TestPeiUsb Job Type: libfuzzerasanedk2 Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x78ace72009d8...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in residual_coding

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5187484170911744 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

openssl:hashtable: Stack-buffer-overflow in CRYPTO_atomic_load

Detailed Report: https://oss-fuzz.com/testcase?key=5058079189172224 Project: openssl Fuzzing Engine: libFuzzer Fuzz Target: hashtable Job Type: libfuzzerasani386openssl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0xf5d01117 Crash State: CRYPTOatomicload osslhtget...

jsqlparser:JSqlParserFuzzer: Security exception in net.sf.jsqlparser.parser.CCJSqlParser.jj_3R_BitwiseXor_NUMBER_5_258

Detailed Report: https://oss-fuzz.com/testcase?key=6047852939771904 Project: jsqlparser Fuzzing Engine: libFuzzer Fuzz Target: JSqlParserFuzzer Job Type: libfuzzerasanjsqlparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

binutils:fuzz_objcopy: Use-of-uninitialized-value in cache_bwrite

Detailed Report: https://oss-fuzz.com/testcase?key=5114458120716288 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjcopy Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cachebwrite bfdwrite coffwriterelocs...

llvm:llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::object::WasmObjectFile::parseLinkingSectionSymtab

Detailed Report: https://oss-fuzz.com/testcase?key=4510378518511616 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60b000001325 Crash State:...

libbpf:bpf-object-fuzzer: Crash in bpf_object__close

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6235044945199104 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzermsanlibbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffff8019c...

kamailio:fuzz_parse_msg: Crash in parse_priv_value

Project: https://github.com/kamailio/kamailio.git Detailed Report: https://oss-fuzz.com/testcase?key=4608733516529664 Project: kamailio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsemsg Job Type: libfuzzerasankamailio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x618000010000 Cra...

openexr:openexr_exrcorecheck_fuzzer: Stack-buffer-overflow in DwaCompressor_readChannelRules

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=6514127842181120 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcorecheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Stack-buffer-overfl...

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5L__extern_traverse

Detailed Report: https://oss-fuzz.com/testcase?key=6268855837392896 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzerasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6040000081f6 Crash State: H5Lexterntraverse...

wolfssl:cryptofuzz-openssl-api: Heap-buffer-overflow in DesProcessBlock

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6246973621796864 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-api Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-use-after-return in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=6155911668563968 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address: 0x7fbfaf462bd4 Crash State:...

suricata:fuzz_mimedecparseline: Segv on unknown address in MimeDecDeInitParser

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5539502479507456 Project: suricata Fuzzing Engine: afl Fuzz Target: fuzzmimedecparseline Job Type: aflasansuricata Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

cryptsetup:crypt2_load_fuzz: Crash in crypt2_load_fuzz.cc

Detailed Report: https://oss-fuzz.com/testcase?key=6547799496065024 Project: cryptsetup Fuzzing Engine: honggfuzz Fuzz Target: crypt2loadfuzz Job Type: honggfuzzasancryptsetup Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fffe35e51e0 Crash State: crypt2loadfuzz.cc Sanitizer:...

ghostscript:gs_device_pdfwrite_fuzzer: Crash in names_index_ref

Detailed Report: https://oss-fuzz.com/testcase?key=4880033168097280 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62f004020468 Crash State: namesindexref...

cryptofuzz:cryptofuzz-boringssl-noasm: Stack-buffer-overflow in wc_Sha3_512_Final

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5049072880320512 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Stack-buffer-overflow...

dnsmasq:fuzz_rfc1035: Heap-buffer-overflow in resize_packet

Detailed Report: https://oss-fuzz.com/testcase?key=4774918610354176 Project: dnsmasq Fuzzing Engine: afl Fuzz Target: fuzzrfc1035 Job Type: aflasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7f27858f7f1f Crash State: resizepacket FuzzResizePacket fuzzrfc1035...

sigstore:FuzzUnmarshalCertificatesFromPEM: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5474410173169664 Project: sigstore Fuzzing Engine: libFuzzer Fuzz Target: FuzzUnmarshalCertificatesFromPEM Job Type: libfuzzerasansigstore Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000201328 Crash State: NULL Sanitizer:...

git:fuzz-commit-graph: Crash with empty stacktrace

Project: https://github.com/git/git.git Detailed Report: https://oss-fuzz.com/testcase?key=5037060053925888 Project: git Fuzzing Engine: libFuzzer Fuzz Target: fuzz-commit-graph Job Type: libfuzzerasangit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61b000024000 Crash State: NULL...

istio:fuzz_render_manifests: Crash in _cgo_try_pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5603617795604480 Project: istio Fuzzing Engine: libFuzzer Fuzz Target: fuzzrendermanifests Job Type: libfuzzerasanistio Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000004caf6c Crash State: cgotrypthreadcreate xcgosysthreadcreat...

clamav:clamav_dbload_YARA_fuzzer: Heap-buffer-overflow in cli_strlcat

Detailed Report: https://oss-fuzz.com/testcase?key=6593555471138816 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadYARAfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x602000959531 Crash State: clistrlcat yarayyparse...

libreoffice:lwpfuzzer: Segv on unknown address in LwpDrawTextArt::~LwpDrawTextArt

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5813135838150656 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: lwpfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Segv on unknown address Crash Address...