libreoffice: Heap-buffer-overflow in SVBT16ToShort

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5027507092848640 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

gdal: Stack-buffer-overflow in nc4_get_vara

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5770093583663104 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash...

ffmpeg: Index-out-of-bounds in ff_h264_pred_weight_table

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5267945972301824 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDH264fuzzer Fuzz target binary: ffmpegAVCODECIDH264fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

libxml2: Heap-buffer-overflow in xmlFAParsePosCharGroup

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=6008601485246464 Project: libxml2 Fuzzer: afllibxml2xmlregexpcompilefuzzer Fuzz target binary: libxml2xmlregexpcompilefuzzer Job Type: aflasanlibxml2 Platform Id: linux Crash Type:...

gdal: Heap-buffer-overflow in NTFFileReader::ProcessAttDesc

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4847781791399936 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

dlplibs: Heap-buffer-overflow in MsWksDBParser::readFormula

Detailed report: https://oss-fuzz.com/testcase?key=5753657637208064 Project: dlplibs Fuzzer: libFuzzerdlplibsclariswksfuzzer Fuzz target binary: clariswksfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62e00000bd99 Crash State:...

grpc: Index-out-of-bounds in grpc_static_mdelem_for_static_strings

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=4857057310146560 Project: grpc Fuzzer: libFuzzergrpchpackparserfuzzertest Fuzz target binary: hpackparserfuzzertest Job Type: libfuzzerubsangrpc Platform Id: linux Crash Type: Index-out-of-bounds Crash...

ffmpeg: Global-buffer-overflow in decode_hq_slice

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4617176877105152 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDDIRACfuzzer Fuzz target binary: ffmpegAVCODECIDDIRACfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4...

gdal: Bad-cast to xercesc_3_1::DOMElement from xercesc_3_1::DOMTextImpl;ILI2Reader::setFieldDefn;ILI2Reader::setFieldDefn

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5314575312355328 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000836a798 Crash State:...

gdal: Heap-buffer-overflow in NASReader::SetFeaturePropertyDirectly

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4908186949648384 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

gdal: Index-out-of-bounds in CPLHexToBinary

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5431926569566208 Project: gdal Fuzzer: libFuzzergdalshapefuzzer Fuzz target binary: shapefuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

gdal: Heap-use-after-free in KMLNode::getType

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6351433500721152 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x607000000ae0 Crash State:...

gdal: Incorrect-function-pointer-type in OGRSurface::CastToPolygon

Detailed report: https://oss-fuzz.com/testcase?key=5709498763182080 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash Address: Crash State: OGRSurface::CastToPolygon...

libreoffice: Heap-buffer-overflow in ImplSearchEntry

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4841213947543552 Project: libreoffice Fuzzer: libFuzzerlibreofficeepsfuzzer Fuzz target binary: epsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

file: Heap-buffer-overflow in mprint

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=6526587098890240 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address:...

pcre2: Index-out-of-bounds in do_callout

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://oss-fuzz.com/testcase?key=5212192485933056 Project: pcre2 Fuzzer: libFuzzerpcre2fuzzer Fuzz target binary: pcre2fuzzer Job Type: libfuzzerubsanpcre2 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

ffmpeg: Heap-buffer-overflow in vp8_decode_mb_row_no_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6314998085189632 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDWEBPfuzzer Fuzz target binary: ffmpegAVCODECIDWEBPfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

json: Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/nlohmann/json.git Detailed report: https://oss-fuzz.com/testcase?key=4618963768049664 Project: json Fuzzer: afljsonparseaflfuzzer Fuzz target binary: parseaflfuzzer Job Type: aflasanjson Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

ffmpeg: Heap-buffer-overflow in xwd_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4866094172995584 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDXWDfuzzer Fuzz target binary: ffmpegAVCODECIDXWDfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

dlplibs: Container-overflow in MarinerWrtText::readRulers

Detailed report: https://oss-fuzz.com/testcase?key=6008099066347520 Project: dlplibs Fuzzer: libFuzzerdlplibsmindwrtfuzzer Fuzz target binary: mindwrtfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address: 0x7ff262f8aa40 Crash State:...

wireshark: Global-buffer-overflow in COM_Parse

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=6033191976566784 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

wireshark: Heap-buffer-overflow in bootp_option

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=4781424697671680 Project: wireshark Fuzzer: aflwiresharkfuzzsharkdissectorip Fuzz target binary: fuzzsharkdissectorip Job Type: aflasanwireshark Platform Id: linux Crash Type:...

wireshark: Heap-buffer-overflow in OALMarshal_UncompressValue

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5462407063273472 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkdissectorip Fuzz target binary: fuzzsharkdissectorip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

dlplibs: Container-overflow in MWAWPictBitmapContainerBool::setRowPacked

Detailed report: https://oss-fuzz.com/testcase?key=4685785548718080 Project: dlplibs Fuzzer: afldlplibsapplepictfuzzer Fuzz target binary: applepictfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address: 0x621000001e12 Crash State:...

libreoffice: Heap-use-after-free in HWPFile::compareCharShape

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5611076525752320 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

dlplibs: Stack-use-after-scope in libmspub::MSPUBCollector::paintShape

Detailed report: https://oss-fuzz.com/testcase?key=6536301065011200 Project: dlplibs Fuzzer: afldlplibspubfuzzer Fuzz target binary: pubfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash Address: 0x7fe2cf0ca9f0 Crash State:...

dlplibs: Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Detailed report: https://oss-fuzz.com/testcase?key=6258184752726016 Project: dlplibs Fuzzer: libFuzzerdlplibszmffuzzer Fuzz target binary: zmffuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x615000000741 Crash State:...

file: Heap-buffer-overflow in cdf_getuint32

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=6390637618266112 Project: file Fuzzer: aflfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: aflasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x611000000641 Cra...

freetype2: Heap-buffer-overflow in t1_builder_add_point

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://oss-fuzz.com/testcase?key=5773760927891456 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow...

lcms: Heap-buffer-overflow in TetrahedralInterpFloat

Project: https://github.com/mm2/Little-CMS.git Detailed report: https://oss-fuzz.com/testcase?key=5595192964939776 Project: lcms Fuzzer: afllcmscmstransformfuzzer Fuzz target binary: cmstransformfuzzer Job Type: aflasanlcms Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

libreoffice: Heap-use-after-free in PPTParagraphObj::GetAttrib

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4532278568943616 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

libreoffice: Container-overflow in inflate

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5887012185833472 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow...

freetype2: Heap-buffer-overflow in TT_Get_MM_Var

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://oss-fuzz.com/testcase?key=5060052572438528 Project: freetype2 Fuzzer: libFuzzerfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow...

libreoffice: Crash in CCIDecompressor::DecompressScanline

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5956342118350848 Project: libreoffice Fuzzer: libFuzzerlibreofficetiffuzzer Fuzz target binary: tiffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN Crash...

file: Heap-buffer-overflow in is_tar

Project: https://github.com/file/file.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5719138181840896 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ Cra...

libarchive: Heap-buffer-overflow in _warc_rdlen

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4850280390721536 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...

ffmpeg: Stack-buffer-overflow in synth_tones

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5737865715646464 Project: ffmpeg Fuzzer: ffmpegAUDIOAVCODECIDDTSfuzzer Job Type: libfuzzerasanffmpeg Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7f440e0a0a20 Crash State...

libarchive: Heap-buffer-overflow in lzx_make_huffman_table

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4538351478636544 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...

lcms: Heap-use-after-free in TetrahedralInterpFloat

Project: https://github.com/mm2/Little-CMS.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5428245918908416 Project: lcms Fuzzer: libFuzzerlcmscmstransformfuzzer Fuzz target binary: cmstransformfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type:...

lcms: Heap-buffer-overflow in TetrahedralInterpFloat

Project: https://github.com/mm2/Little-CMS.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5333448038285312 Project: lcms Fuzzer: libFuzzerlcmscmstransformfuzzer Fuzz target binary: cmstransformfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type:...

libreoffice: Crash in WinMtfOutput::DrawText

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6116030539628544 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type...

libass: Attempting free in reset_render_context

Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6213284067803136 Project: libass Fuzzer: libFuzzerlibassfuzzer Fuzz target binary: libassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Attempting free Crash...

libass: Attempting free in ass_free_track

Project: https://github.com/libass/libass.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5883308542001152 Project: libass Fuzzer: libFuzzerlibassfuzzer Fuzz target binary: libassfuzzer Job Type: libfuzzerasanlibass Platform Id: linux Crash Type: Attempting free Crash...

libreoffice: Heap-buffer-overflow in MetaTextArrayAction::MetaTextArrayAction

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5024791991943168 Project: libreoffice Fuzzer: libFuzzerlibreofficesvmfuzzer Fuzz target binary: svmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type...

libreoffice: Heap-buffer-overflow in XBMReader::ParseDefine

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5027840210763776 Project: libreoffice Fuzzer: libFuzzerlibreofficexbmfuzzer Fuzz target binary: xbmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type...

libjpeg-turbo: Heap-buffer-overflow in gray_extrgb_convert_internal

Project: https://github.com/libjpeg-turbo/libjpeg-turbo.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6448589773471744 Project: libjpeg-turbo Fuzzer: libFuzzerlibjpeg-turbolibjpegturbofuzzer Fuzz target binary: libjpegturbofuzzer Job Type: libfuzzerasanlibjpeg-turbo...

libarchive: Heap-buffer-overflow in lzx_decode_blocks

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5879290751090688 Project: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzz target binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...

libchewing: Heap-buffer-overflow in ChewingIsChiAt

Project: https://github.com/chewing/libchewing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5202002871058432 Target: libchewing Fuzzer: libFuzzerchewingrandominitfuzzer Job Type: libfuzzerasanlibchewing Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

libarchive: Heap-buffer-overflow in cab_read_header

Project: https://github.com/libarchive/libarchive.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4809124822908928 Target: libarchive Fuzzer: libFuzzerlibarchivefuzzer Fuzzer binary: libarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type:...

pcre2: Heap-buffer-overflow in first_significant_code

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5503331300540416 Fuzzer: libFuzzerpcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x614000002bf1 Crash State:...