mupdf/pdf_fuzzer: Heap-use-after-free in fz_drop_key_storable

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5688460871467008 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x613000000040...

open62541/fuzz_binary_message: Heap-use-after-free in UA_SecureChannel_deleteMembersCleanup

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=6595691192254464 Project: open62541 Fuzzer: aflopen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ...

libreoffice/htmlfuzzer: Bad-cast to SwTableBox from SwClient in DelBoxNode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5928080133586944 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

mupdf/pdf_fuzzer: Stack-buffer-overflow in pdf_lookup_cmap_full

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5267574158786560 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7f86eb165ec0...

wireshark/fuzzshark_ip_proto-udp: in proto_tree_set_representation

Detailed report: https://oss-fuzz.com/testcase?key=6249167828549632 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type: READ Crash Address: 0x7ff628851950 Crash State:...

imagemagick/encoder_wpg_fuzzer: Use-of-uninitialized-value in WritePixelCacheRegion

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5352977939300352 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderwpgfuzzer Fuzz target binary: encoderwpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

gdal/gdal_translate_fuzzer: Crash in [heap]

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5365232118530048 Project: gdal Fuzzer: libFuzzergdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

libreoffice/lwpfuzzer: Bad-cast to LwpFrib from XFParagraph in LwpChangeMgr::ConvertAllChange

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4767866357284864 Project: libreoffice Fuzzer: libFuzzerlibreofficelwpfuzzer Fuzz target binary: lwpfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

curl/curl_fuzzer_ftp: Heap-buffer-overflow in loop

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5917474819145728 Project: curl Fuzzer: libFuzzercurlfuzzerftp Fuzz target binary: curlfuzzerftp Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libreoffice/pptfuzzer: Index-out-of-bounds in PPTExtParaProv::PPTExtParaProv

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6036446419877888 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Index-out-of-boun...

imagemagick/encoder_vda_fuzzer: Use-of-uninitialized-value in GetMagicInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6001481594437632 Project: imagemagick Fuzzer: libFuzzerimagemagickencodervdafuzzer Fuzz target binary: encodervdafuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_pcds_fuzzer: Use-of-uninitialized-value in ReadVIFFImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4766863213985792 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpcdsfuzzer Fuzz target binary: encoderpcdsfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

dlplibs/pubfuzzer: Global-buffer-overflow in getPosixID

Detailed report: https://oss-fuzz.com/testcase?key=5692113388830720 Project: dlplibs Fuzzer: afldlplibspubfuzzer Fuzz target binary: pubfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x0000008d0ae0 Crash State: getPosixID...

librawspeed/TiffDecoderFuzzer-DcrDecoder: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6168972937396224 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-DcrDecoder Fuzz target binary: TiffDecoderFuzzer-DcrDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

libreoffice/htmlfuzzer: Bad-cast to SwTableBox from SwClient in DelBoxNode

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5494093451886592 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/htmlfuzzer: Bad-cast to SfxPoolItem from invalid vptr in SwAttrHandler::FontChg

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5259221261090816 Project: libreoffice Fuzzer: libFuzzerlibreofficehtmlfuzzer Fuzz target binary: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/xlsfuzzer: Bad-cast to const ScCondFormatEntry from ScValidationData in ScConditionEntry::IsEqual

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4960732710961152 Project: libreoffice Fuzzer: libFuzzerlibreofficexlsfuzzer Fuzz target binary: xlsfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

libreoffice/xlsxfuzzer: Bad-cast to ZipPackageFolder from ZipPackageStream in ZipPackage::getZipFileContents

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5908578138324992 Project: libreoffice Fuzzer: libFuzzerlibreofficexlsxfuzzer Fuzz target binary: xlsxfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

librawspeed/TiffParserFuzzer-GetDecoder-Decode: Heap-buffer-overflow in rawspeed::DngOpcodes::OffsetPerRowOrCol<rawspeed::DngOpcodes::DeltaRowOrColBase:

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5262004903215104 Project: librawspeed Fuzzer: afllibrawspeedTiffParserFuzzer-GetDecoder-Decode Fuzz target binary: TiffParserFuzzer-GetDecoder-Decode Job Type: aflasanlibrawspeed Platform Id:...

librawspeed/LJpegDecompressorFuzzer: Use-after-poison in void rawspeed::LJpegDecompressor::decodeN<4>

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6742329370083328 Project: librawspeed Fuzzer: libFuzzerlibrawspeedLJpegDecompressorFuzzer Fuzz target binary: LJpegDecompressorFuzzer Job Type: libfuzzerasanlibrawspeed Platform Id: linux Cra...

proj4/standard_fuzzer: Crash in reverse_4d

Detailed report: https://oss-fuzz.com/testcase?key=6162480330964992 Project: proj4 Fuzzer: libFuzzerproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: libfuzzerasanproj4 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fbe21623158 Crash State: reverse4d pjinv4d projtra...

unrar/unrar_fuzzer: Use-of-uninitialized-value in Archive::GetComment

Project: https://github.com/aawc/unrar.git Detailed report: https://oss-fuzz.com/testcase?key=5413862464552960 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

librawspeed/SonyArw2DecompressorFuzzer: Crash in rawspeed::RawImage::create

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5956588557828096 Project: librawspeed Fuzzer: libFuzzerlibrawspeedSonyArw2DecompressorFuzzer Fuzz target binary: SonyArw2DecompressorFuzzer Job Type: libfuzzerasanlibrawspeed Platform Id: lin...

spidermonkey: Heap-buffer-overflow in js::WasmTableObject::getImpl

Detailed report: https://oss-fuzz.com/testcase?key=6215596157960192 Project: spidermonkey Fuzzer: jsfuzzer Job Type: asanspidermonkey Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6110001b4c80 Crash State: js::WasmTableObject::getImpl js::WasmTableObject::get...

chakra: Stack-use-after-scope in Emit

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=6522431389827072 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address: 0x7ff7f4c4a1d0 Crash State: Emit...

tor/oss-fuzz-diff: Use-of-uninitialized-value in cdline_linecpy

Project: https://git.torproject.org/tor.git Detailed report: https://oss-fuzz.com/testcase?key=4831951589474304 Project: tor Fuzzer: libFuzzertoross-fuzz-diff Fuzz target binary: oss-fuzz-diff Job Type: libfuzzermsantor Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

proj4/standard_fuzzer: Crash in pj_read_vgrid_value

Detailed report: https://oss-fuzz.com/testcase?key=5958339780411392 Project: proj4 Fuzzer: libFuzzerproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: libfuzzerubsanproj4 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffff38fbc Crash State: pjreadvgridvalue...

libreoffice/pptfuzzer: Bad-cast to const XLineStartItem from XLineEndItem;EnhancedCustomShape2d::SwapStartAndEndArrow;CorrectCalloutArrows

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5550802748833792 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash...

llvm/llvm-special-case-list-fuzzer: Global-buffer-overflow in p_b_symbol

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6124359660863488 Project: llvm Fuzzer: libFuzzerllvmllvm-special-case-list-fuzzer Fuzz target binary: llvm-special-case-list-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type:...

librawspeed/TiffDecoderFuzzer-NefDecoder: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4659952477011968 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-NefDecoder Fuzz target binary: TiffDecoderFuzzer-NefDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

gdal

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6537397673132032 Project: gdal Fuzzer: libFuzzergdalogrfilesystemfuzzer Fuzz target binary: ogrfilesystemfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

librawspeed/RawSpeedFuzzer: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6276046933458944 Project: librawspeed Fuzzer: libFuzzerlibrawspeedRawSpeedFuzzer Fuzz target binary: RawSpeedFuzzer Job Type: libfuzzermsanlibrawspeed Platform Id: linux Crash Type:...

dlplibs: Heap-buffer-overflow in ucnv_UTF8FromUTF8

Detailed report: https://oss-fuzz.com/testcase?key=6715693878738944 Project: dlplibs Fuzzer: libFuzzerdlplibspdbfuzzer Fuzz target binary: pdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x604000000afc Crash State: ucnvUTF8FromUTF...

proj4: Heap-use-after-free in pj_projection_specific_setup_lsat

Detailed report: https://oss-fuzz.com/testcase?key=6325763662938112 Project: proj4 Fuzzer: libFuzzerproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: libfuzzerasanproj4 Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address: 0x6170000001c0 Crash State:...

librawspeed: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4923578240729088 Project: librawspeed Fuzzer: libFuzzerlibrawspeedRawParserFuzzer-GetDecoder-Decode Fuzz target binary: RawParserFuzzer-GetDecoder-Decode Job Type: libfuzzermsanlibrawspeed...

curl: Heap-buffer-overflow in Curl_client_write

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5836302881652736 Project: curl Fuzzer: libFuzzercurlfuzzer Fuzz target binary: curlfuzzer Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60c000000173...

ffmpeg: Global-buffer-overflow in initSlotBasedRotation

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4898065225875456 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBFDKAACfuzzer Fuzz target binary: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

libreoffice: Crash in FT_Done_Glyph

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6110726827540480 Project: libreoffice Fuzzer: libFuzzerlibreofficecgmfuzzer Fuzz target binary: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash...

libreoffice: Crash in FT_Glyph_Get_CBox

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6067912982921216 Project: libreoffice Fuzzer: libFuzzerlibreofficecgmfuzzer Fuzz target binary: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash...

llvm: Heap-buffer-overflow in llvm::DataExtractor::getCStr

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5474306626682880 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

proj4: Crash in _fini

Detailed report: https://oss-fuzz.com/testcase?key=6425067984519168 Project: proj4 Fuzzer: aflproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: aflasanproj4untrusted Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000115a73 Crash State: fini Sanitizer: address ASAN...

librawspeed: Use-after-poison in rawspeed::SamsungV0Decompressor::decompressStrip

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5436374968696832 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-SrwDecoder Fuzz target binary: TiffDecoderFuzzer-SrwDecoder Job Type: libfuzzerasanlibrawspeed Platform Id:...

gdal: Heap-buffer-overflow in ReadGrib1Sect2

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6023193733103616 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

gnutls: Use-of-uninitialized-value in wrap_nettle_cipher_aead_decrypt

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=5729187954425856 Project: gnutls Fuzzer: libFuzzergnutlspskclientfuzzer Fuzz target binary: gnutlspskclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-valu...

libreoffice: Heap-buffer-overflow in BitmapWriteAccess::SetPaletteColor

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5288134717734912 Project: libreoffice Fuzzer: libFuzzerlibreofficetiffuzzer Fuzz target binary: tiffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

gdal: Heap-buffer-overflow in SDTSModId::Set

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5119922457804800 Project: gdal Fuzzer: libFuzzergdalogrsdtsfuzzer Fuzz target binary: ogrsdtsfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

gdal: Heap-buffer-overflow in CADBuffer::ReadCHAR

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6298144394444800 Project: gdal Fuzzer: aflgdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62700000350e Crash...

gdal: Heap-buffer-overflow in CADBuffer::ReadCHAR

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4977210190462976 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

curl: Use-of-uninitialized-value in getrn

Detailed report: https://oss-fuzz.com/testcase?key=6249722698268672 Project: curl Fuzzer: libFuzzercurlfuzzer Fuzz target binary: curlfuzzer Job Type: libfuzzermsancurl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: getrn lhretrieve intthreadgetitem Sanitize...

gdal: Heap-buffer-overflow in GTiffDataset::IsBlockAvailable

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5368481509801984 Project: gdal Fuzzer: libFuzzergdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...