ffmpeg: Heap-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6424225917173760 Project: ffmpeg Fuzzer: ffmpegVIDEOAVCODECIDPICTORfuzzer Job Type: libfuzzerasanffmpeg Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7f77cbd4ca6f Crash Stat...

libarchive: Heap-buffer-overflow in _warc_rdlen

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4606991431368704 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...

freetype2: Heap-buffer-overflow in tt_size_reset

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6627871858622464 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type:...

lcms: Heap-use-after-free in TetrahedralInterpFloat

Project: https://github.com/mm2/Little-CMS.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5428245918908416 Project: lcms Fuzzer: libFuzzerlcmscmstransformfuzzer Fuzz target binary: cmstransformfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type:...

libtsm: Global-buffer-overflow in vte_write_debug

Project: git://people.freedesktop.org/dvdhrm/libtsm Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6258143222824960 Project: libtsm Fuzzer: libFuzzerlibtsmfuzzer Fuzz target binary: libtsmfuzzer Job Type: libfuzzerasanlibtsm Platform Id: linux Crash Type:...

file: Attempting free in apprentice_map

Project: https://github.com/file/file.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5095269284708352 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Attempting free Crash Address...

libass: Attempting free in ass_free_track

Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6177355424858112 Project: libass Fuzzer: libFuzzerlibassfuzzer Fuzz target binary: libassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Attempting free Crash...

file: Crash in mprint

Project: https://github.com/file/file.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5158914005925888 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

libarchive: Heap-buffer-overflow in archive_mstring_copy_mbs

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6462609050042368 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...

libarchive: Heap-buffer-overflow in archive_le32dec

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4591448766808064 Target: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzzer binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...

lcms: Heap-use-after-free in NextCh

Project: https://github.com/mm2/Little-CMS.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5572304247455744 Target: lcms Fuzzer: libFuzzerlcmscmsIT8loadfuzzer Fuzzer binary: cmsIT8loadfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: Heap-use-after-free...

ffmpeg: Stack-buffer-overflow in ff_htmlmarkup_to_ass

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6380176053108736 Target: ffmpeg Fuzzer: libFuzzerffmpegSUBTITLEAVCODECIDSUBRIPfuzzer Fuzzer binary: ffmpegSUBTITLEAVCODECIDSUBRIPfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linu...

libchewing: Heap-buffer-overflow in CallPhrasing

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5186601554542592 Fuzzer: libFuzzerlibchewingchewingdynamicconfigfuzzer Job Type: libfuzzerasanlibchewing Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7f955b667fb0 Crash State: CallPhrasing...

libyal:libvsgpt_partition_fuzzer: Heap-buffer-overflow in libvsgpt_partition_entry_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=6082663170244608 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libvsgptpartitionfuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0xf4e00651 Crash State:...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in Flow::dissectMDNS

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=5881946677510144 Project: ntopng Fuzzing Engine: libFuzzer Fuzz Target: fuzzdissectpacket Job Type: libfuzzerasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

wasm3:fuzzer: Crash in op_i64_Load_i32_s

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=4832595972784128 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x753cf149f573 Crash State:...

libaom:av1_enc_fuzzer: Heap-buffer-overflow in get_window_wiener_var

Detailed Report: https://oss-fuzz.com/testcase?key=6636186354122752 Project: libaom Fuzzing Engine: honggfuzz Fuzz Target: av1encfuzzer Job Type: honggfuzzasanlibaom Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x7acfd65ee430 Crash State: getwindowwienervar...

libaom:av1_enc_fuzzer: Heap-buffer-overflow in av1_calc_mb_wiener_var_row

Detailed Report: https://oss-fuzz.com/testcase?key=5683371750260736 Project: libaom Fuzzing Engine: libFuzzer Fuzz Target: av1encfuzzer Job Type: libfuzzerasanlibaom Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x7e239e8618ea Crash State: av1calcmbwienervarrow...

openbabel:fuzz_convert: Stack-buffer-overflow in OpenBabel::MCDLFormat::getMCDL

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=6399125835546624 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzconvert Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address...

json-flattener:AdvancedFuzzer: Security exception in com.github.wnameless.json.base.JsonValueUtils.toMap

Project: https://github.com/wnameless/json-flattener.git Detailed Report: https://oss-fuzz.com/testcase?key=4619821543915520 Project: json-flattener Fuzzing Engine: libFuzzer Fuzz Target: AdvancedFuzzer Job Type: libfuzzerasanjson-flattener Platform Id: linux Crash Type: Security exception Crash...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.NodeList.forEach

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4805093085216768 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

binutils:fuzz_addr2line: Heap-buffer-overflow in _bfd_read_unsigned_leb128

Detailed Report: https://oss-fuzz.com/testcase?key=5599450797244416 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzaddr2line Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x776b7ffe0761 Crash State: bfdreadunsignedleb128...

libssh2:ssh2_client_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Project: https://github.com/cmeister2/libssh2.git https://github.com/libssh2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5873195438899200 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerubsanlibssh2 Platform Id: linux Crash Type:...

hunspell: Stack-buffer-overflow in AffixMgr::compound_check_morph

Recording https://github.com/hunspell/hunspell/issues/996 here for historical purposes...

ffmpeg:ffmpeg_AV_CODEC_ID_DDS_fuzzer: Use-of-uninitialized-value in run_postproc

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5610978396405760 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDDDSfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

edk2:TestPeiUsb: Stack-buffer-overflow in PeiUsbGetAllConfiguration

Project: https://github.com/tianocore/edk2.git Detailed Report: https://oss-fuzz.com/testcase?key=6213046417555456 Project: edk2 Fuzzing Engine: libFuzzer Fuzz Target: TestPeiUsb Job Type: libfuzzerasanedk2 Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x78ace72009d8...

openssl:hashtable: Stack-buffer-overflow in CRYPTO_atomic_load

Detailed Report: https://oss-fuzz.com/testcase?key=5058079189172224 Project: openssl Fuzzing Engine: libFuzzer Fuzz Target: hashtable Job Type: libfuzzerasani386openssl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0xf5d01117 Crash State: CRYPTOatomicload osslhtget...

jsqlparser:JSqlParserFuzzer: Security exception in net.sf.jsqlparser.parser.CCJSqlParser.jj_3R_BitwiseXor_NUMBER_5_258

Detailed Report: https://oss-fuzz.com/testcase?key=6047852939771904 Project: jsqlparser Fuzzing Engine: libFuzzer Fuzz Target: JSqlParserFuzzer Job Type: libfuzzerasanjsqlparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

libavc:svc_dec_fuzzer: Segv on unknown address in ih264d_compute_bs_non_mbaff

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=4750234416644096 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: svcdecfuzzer Job Type: libfuzzermsanlibavc Platform Id: linux...

llvm:llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::object::WasmObjectFile::parseLinkingSectionSymtab

Detailed Report: https://oss-fuzz.com/testcase?key=4510378518511616 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60b000001325 Crash State:...

libbpf:bpf-object-fuzzer: Crash in bpf_object__close

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6235044945199104 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzermsanlibbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffff8019c...

kamailio:fuzz_parse_msg: Crash in parse_priv_value

Project: https://github.com/kamailio/kamailio.git Detailed Report: https://oss-fuzz.com/testcase?key=4608733516529664 Project: kamailio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsemsg Job Type: libfuzzerasankamailio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x618000010000 Cra...

openexr:openexr_exrcorecheck_fuzzer: Stack-buffer-overflow in DwaCompressor_readChannelRules

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=6514127842181120 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcorecheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Stack-buffer-overfl...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-use-after-return in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=6155911668563968 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address: 0x7fbfaf462bd4 Crash State:...

suricata:fuzz_mimedecparseline: Segv on unknown address in MimeDecDeInitParser

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5539502479507456 Project: suricata Fuzzing Engine: afl Fuzz Target: fuzzmimedecparseline Job Type: aflasansuricata Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

cryptsetup:crypt2_load_fuzz: Crash in crypt2_load_fuzz.cc

Detailed Report: https://oss-fuzz.com/testcase?key=6547799496065024 Project: cryptsetup Fuzzing Engine: honggfuzz Fuzz Target: crypt2loadfuzz Job Type: honggfuzzasancryptsetup Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fffe35e51e0 Crash State: crypt2loadfuzz.cc Sanitizer:...

ghostscript:gs_device_pdfwrite_fuzzer: Crash in names_index_ref

Detailed Report: https://oss-fuzz.com/testcase?key=4880033168097280 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62f004020468 Crash State: namesindexref...

cryptofuzz:cryptofuzz-boringssl-noasm: Stack-buffer-overflow in wc_Sha3_512_Final

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5049072880320512 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Stack-buffer-overflow...

dnsmasq:fuzz_rfc1035: Heap-buffer-overflow in resize_packet

Detailed Report: https://oss-fuzz.com/testcase?key=4774918610354176 Project: dnsmasq Fuzzing Engine: afl Fuzz Target: fuzzrfc1035 Job Type: aflasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7f27858f7f1f Crash State: resizepacket FuzzResizePacket fuzzrfc1035...

sigstore:FuzzUnmarshalCertificatesFromPEM: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5474410173169664 Project: sigstore Fuzzing Engine: libFuzzer Fuzz Target: FuzzUnmarshalCertificatesFromPEM Job Type: libfuzzerasansigstore Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000201328 Crash State: NULL Sanitizer:...

git:fuzz-commit-graph: Crash with empty stacktrace

Project: https://github.com/git/git.git Detailed Report: https://oss-fuzz.com/testcase?key=5037060053925888 Project: git Fuzzing Engine: libFuzzer Fuzz Target: fuzz-commit-graph Job Type: libfuzzerasangit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61b000024000 Crash State: NULL...

istio:fuzz_render_manifests: Crash in _cgo_try_pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5603617795604480 Project: istio Fuzzing Engine: libFuzzer Fuzz Target: fuzzrendermanifests Job Type: libfuzzerasanistio Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000004caf6c Crash State: cgotrypthreadcreate xcgosysthreadcreat...

libreoffice:lwpfuzzer: Segv on unknown address in LwpDrawTextArt::~LwpDrawTextArt

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5813135838150656 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: lwpfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Segv on unknown address Crash Address...

openbabel:fuzz_obconversion_sdf: Container-overflow in OpenBabel::MDLFormat::ReadV3000Block

Detailed Report: https://oss-fuzz.com/testcase?key=4739930742456320 Project: openbabel Fuzzing Engine: afl Fuzz Target: fuzzobconversionsdf Job Type: aflasanopenbabel Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address: 0x608000000468 Crash State:...

libraw:libraw_raf_fuzzer: Index-out-of-bounds in DHT::get_hv_rbg

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4948455395557376 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawraffuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-use-after-free in APFSJObjTree::APFSJObjTree

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4514429260660736 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

gpac:fuzz_parse: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6573214919688192 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000041b41 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securi...

ffmpeg:ffmpeg_AV_CODEC_ID_MAGICYUV_fuzzer: Heap-buffer-overflow in magy_decode_slice

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6005121199374336 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDMAGICYUVfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

skia:sksl2metal: Use-of-uninitialized-value in std::__1::default_delete<SkSL::Symbol const>::operator

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5139847045709824 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2metal Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libsndfile:sndfile_fuzzer: Crash in _fini

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=5927490457174016 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...