joni:AddrListFixFuzzer: Security exception in org.joni.Parser.parseCharClass

Project: https://github.com/jruby/joni.git Detailed Report: https://oss-fuzz.com/testcase?key=5080414119591936 Project: joni Fuzzing Engine: libFuzzer Fuzz Target: AddrListFixFuzzer Job Type: libfuzzerasanjoni Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

libultrahdr:ultrahdr_enc_fuzzer: Use-of-uninitialized-value in ultrahdr::uhdr_gainmap_metadata_frac::encodeGainmapMetadata

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=4823210674159616 Project: libultrahdr Fuzzing Engine: libFuzzer Fuzz Target: ultrahdrencfuzzer Job Type: libfuzzermsanlibultrahdr Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

jackson-dataformat-xml:XmlDeserializerFuzzer: Security exception in com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize

Project: https://github.com/FasterXML/jackson-dataformat-xml.git Detailed Report: https://oss-fuzz.com/testcase?key=4668690686083072 Project: jackson-dataformat-xml Fuzzing Engine: libFuzzer Fuzz Target: XmlDeserializerFuzzer Job Type: libfuzzerasanjackson-dataformat-xml Platform Id: linux Crash...

readstat:fuzz_format_sav: Heap-buffer-overflow in extract_mr_data

Project: https://github.com/WizardMac/ReadStat.git Detailed Report: https://oss-fuzz.com/testcase?key=4906920979267584 Project: readstat Fuzzing Engine: libFuzzer Fuzz Target: fuzzformatsav Job Type: libfuzzerasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

mruby:mruby_fuzzer: Segv on unknown address in udiv

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6700611679092736 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: udiv mpzmdiv...

graphql-java:GraphqlFuzzer: Security exception in graphql.schema.GraphQLTypeUtil.simplePrint

Project: https://github.com/graphql-java/graphql-java.git Detailed Report: https://oss-fuzz.com/testcase?key=6479968740114432 Project: graphql-java Fuzzing Engine: libFuzzer Fuzz Target: GraphqlFuzzer Job Type: libfuzzerasangraphql-java Platform Id: linux Crash Type: Security exception Crash...

ffmpeg:ffmpeg_SWS_fuzzer: Heap-buffer-overflow in ff_rgb24toyv12_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6475823425585152 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegSWSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

docker-client:RegistryAuthFuzzer: Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer

Project: https://github.com/spotify/docker-client.git Detailed Report: https://oss-fuzz.com/testcase?key=6458650569277440 Project: docker-client Fuzzing Engine: libFuzzer Fuzz Target: RegistryAuthFuzzer Job Type: libfuzzerasandocker-client Platform Id: linux Crash Type: Security exception Crash...

unrar:unrar_fuzzer: Use-of-uninitialized-value in DataHash::Cmp

Detailed Report: https://oss-fuzz.com/testcase?key=6234902243115008 Project: unrar Fuzzing Engine: libFuzzer Fuzz Target: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: DataHash::Cmp CmdExtract::ExtractCurrentFile...

maven-model:Xpp3ReaderFuzzer: Security exception in java.base/java.util.Arrays.copyOfRange

Detailed Report: https://oss-fuzz.com/testcase?key=6205429732933632 Project: maven-model Fuzzing Engine: libFuzzer Fuzz Target: Xpp3ReaderFuzzer Job Type: libfuzzerasanmaven-model Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Arrays.copyOfRange...

ffmpeg:ffmpeg_dem_MPEGTS_fuzzer: Use-of-uninitialized-value in parse_MP4SLDescrTag

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6044501804646400 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemMPEGTSfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

mpv:fuzzer_protocol_file: Use-of-uninitialized-value in read_distribution_bundle

Project: https://github.com/mpv-player/mpv.git Detailed Report: https://oss-fuzz.com/testcase?key=6022251122589696 Project: mpv Fuzzing Engine: libFuzzer Fuzz Target: fuzzerprotocolfile Job Type: libfuzzermsanmpv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...

jackson-databind:ObjectReaderRandomClassFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.jj_3R_480

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=5942423769907200 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ObjectReaderRandomClassFuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type:...

gpac:fuzz_probe_analyze: Heap-use-after-free in gsfdmx_finalize

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5906524839411712 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x511000400ff8 Crash State:...

metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.imaging.riff.RiffReader.processChunks

Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=5892493315473408 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...

cpython3:fuzz_ast_literal_eval: Heap-use-after-free in dictkeys_decref

Project: https://github.com/python/cpython.git Detailed Report: https://oss-fuzz.com/testcase?key=5876542813569024 Project: cpython3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzastliteraleval Job Type: libfuzzerasancpython3 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in put_weighted_bipred_8_fallback

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5739271921664000 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

assimp:assimp_fuzzer: Bad-cast to Assimp::LogStream from invalid vptr in LogToCallbackRedirector::~LogToCallbackRedirector

Detailed Report: https://oss-fuzz.com/testcase?key=5651401240281088 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x570dfd37cab0 Crash State: Bad-cast to Assimp::LogStream from invalid vptr...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5625951671615488 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

jackson-dataformat-xml:XmlFuzzer: Security exception in com.sun.xml.stream.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next

Project: https://github.com/FasterXML/jackson-dataformat-xml.git Detailed Report: https://oss-fuzz.com/testcase?key=5380577136541696 Project: jackson-dataformat-xml Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanjackson-dataformat-xml Platform Id: linux Crash Type: Securi...

glslang:compile_fuzzer: Crash in glslang::TInfoSinkBase::location

Detailed Report: https://oss-fuzz.com/testcase?key=5318134116974592 Project: glslang Fuzzing Engine: libFuzzer Fuzz Target: compilefuzzer Job Type: libfuzzerasanglslang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff8000 Crash State: glslang::TInfoSinkBase::location...

assimp:assimp_fuzzer: Heap-use-after-free in LogToCallbackRedirector::~LogToCallbackRedirector

Detailed Report: https://oss-fuzz.com/testcase?key=5244840844001280 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzer Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x505000000040 Crash State:...

gpac:fuzz_m2ts_probe: Heap-buffer-overflow in BS_ReadByte

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5093172722597888 Project: gpac Fuzzing Engine: honggfuzz Fuzz Target: fuzzm2tsprobe Job Type: honggfuzzasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x50700005dbb1 Cra...

mruby:mruby_fuzzer: Segv on unknown address in udiv

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4764129607352320 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: udiv...

mupdf:pdf_fuzzer: Heap-buffer-overflow in eval_sample_func

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=4590883746414592 Project: mupdf Fuzzing Engine: honggfuzz Fuzz Target: pdffuzzer Job Type: honggfuzzasanmupdf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x51400020c9d0...

gpac:fuzz_m2ts_probe: Crash in gf_m2ts_section_complete

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4796518123503616 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzm2tsprobe Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5bab86eda336 Crash State:...

keycloak:ServicesUtilsFuzzer: Security exception in java.base/java.util.regex.Pattern$Branch.match

Project: https://github.com/keycloak/keycloak.git Detailed Report: https://oss-fuzz.com/testcase?key=4854142760189952 Project: keycloak Fuzzing Engine: libFuzzer Fuzz Target: ServicesUtilsFuzzer Job Type: libfuzzerasankeycloak Platform Id: linux Crash Type: Security exception Crash Address: Crash...

libavc:mvc_dec_fuzzer: Heap-buffer-overflow in ih264d_read_coeff4x4_cabac

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=6236538583711744 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: mvcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux...

maven:ProjectArtifactMetadataFuzzer: Security exception in ProjectArtifactMetadataFuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=5075270824951808 Project: maven Fuzzing Engine: libFuzzer Fuzz Target: ProjectArtifactMetadataFuzzer Job Type: libfuzzerasanmaven Platform Id: linux Crash Type: Security exception Crash Address: Crash State: ProjectArtifactMetadataFuzzer Sanitize...

apache-commons-configuration:YAMLConfigurationWriteFuzzer: Security exception in org.yaml.snakeyaml.parser.ParserImpl$ParseBlockMappingValueComment.produce

Detailed Report: https://oss-fuzz.com/testcase?key=6594253961101312 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

apache-commons-net:OS400FTPEntryParserFuzzer: Security exception in java.base/java.util.regex.Pattern$CharPropertyGreedy.match

Detailed Report: https://oss-fuzz.com/testcase?key=5367060203372544 Project: apache-commons-net Fuzzing Engine: libFuzzer Fuzz Target: OS400FTPEntryParserFuzzer Job Type: libfuzzerasanapache-commons-net Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.expr.BinaryExpr.accept

Detailed Report: https://oss-fuzz.com/testcase?key=5203496037580800 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State: com.github.javaparser.ast.expr.BinaryExpr.acce...

sqlite3: heap-buffer-overflow in sqlite3Utf16ByteLen

With the following new fuzz target generated by https://github.com/google/oss-fuzz-gen: include "/src/sqlite3/bld/sqlite3.h" include include include extern "C" int LLVMFuzzerTestOneInputconst uint8t data, sizet size sqlite3 db; if sqlite3open":memory:", &db != SQLITEOK return 0; // Use size...

exiv2: buffer-overflow in Exiv2::Uri::Parse

With the following new fuzz target generated by https://github.com/google/oss-fuzz-gen: include include include include include // Include standard library headers before project-specific headers include "/usr/include/expat.h" include extern "C" int LLVMFuzzerTestOneInputconst uint8t data, sizet...

docker-client:RegistryAuthFuzzer: Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer

Project: https://github.com/spotify/docker-client.git Detailed Report: https://oss-fuzz.com/testcase?key=5977876191576064 Project: docker-client Fuzzing Engine: libFuzzer Fuzz Target: RegistryAuthFuzzer Job Type: libfuzzerasandocker-client Platform Id: linux Crash Type: Security exception Crash...

apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in org.yaml.snakeyaml.parser.ParserImpl$ParseBlockMappingValueComment.produce

Detailed Report: https://oss-fuzz.com/testcase?key=4883712972488704 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

mruby:mruby_fuzzer: Heap-use-after-free in mrb_vm_exec

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5807710761713664 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x51b0000006e8...

qemu:qemu-fuzz-i386-target-generic-fuzz-megaraid: Segv on unknown address in address_space_unmap

Detailed Report: https://oss-fuzz.com/testcase?key=5534266006503424 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-megaraid Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: addressspaceunmap...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Use-of-uninitialized-value in ff_hevc_hls_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5427736120721408 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libical: global-buffer-overflow in icaltime_timegm

With the following new fuzz target: include include include include include "/src/libical/src/libical/icalcomponent.h" extern "C" int LLVMFuzzerTestOneInputconst uint8t data, sizet size char icalstring = char mallocsize + 1; memcpyicalstring, data, size; icalstringsize = '\0'; icalcomponent comp ...

htslib: heap-buffer-overflow in hts_hopen

With the new fuzz target: include include include include include include include include "/src/htslib/htslib/sam.h" include "../../htslib/hfile.h" include "../../htslib/hts.h" static void htscloseoraborthtsFile file if htsclosefile != 0 abort; int LLVMFuzzerTestOneInputconst uint8t data, sizet...

croaring: stack-buffer-overflow in art_insert_at

With the following new fuzz target: include include include include include include int LLVMFuzzerTestOneInputconst uint8t data, sizet size if size == 0 return 0; // Deserialize the provided data as a roaring64bitmapt. roaring64bitmapt r = roaring64bitmapportabledeserializesafe const char data,...

joni:RegexMatcherFuzzer: Security exception in org.joni.Parser.parseCharClass

Project: https://github.com/jruby/joni.git Detailed Report: https://oss-fuzz.com/testcase?key=5189201111351296 Project: joni Fuzzing Engine: libFuzzer Fuzz Target: RegexMatcherFuzzer Job Type: libfuzzerasanjoni Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

openexr:openexr_exrcheck_fuzzer: Crash in Imf_3_3::InputFile::Data::copyCachedBuffer

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5154143415631872 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5124941329006592 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

ffmpeg:ffmpeg_SWS_fuzzer: Heap-buffer-overflow in nv24ToYuv420Wrapper

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5876893532880896 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegSWSfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x52900009a680 Crash...

apache-commons-configuration:XMLConfigurationWriteFuzzer: Security exception in java.xml/com.sun.org.apache.xalan.internal.xsltc.trax.DOM2TO.parse

Detailed Report: https://oss-fuzz.com/testcase?key=5289559036854272 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: XMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

keycloak:ValidatorFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/keycloak/keycloak.git Detailed Report: https://oss-fuzz.com/testcase?key=6364780233818112 Project: keycloak Fuzzing Engine: libFuzzer Fuzz Target: ValidatorFuzzer Job Type: libfuzzerasankeycloak Platform Id: linux Crash Type: Security exception Crash Address: Crash...

jackson-dataformats-binary:DeserializerFuzzer: Security exception in com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize

Detailed Report: https://oss-fuzz.com/testcase?key=6008948677738496 Project: jackson-dataformats-binary Fuzzing Engine: libFuzzer Fuzz Target: DeserializerFuzzer Job Type: libfuzzerasanjackson-dataformats-binary Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-configuration:XMLConfigurationWriteFuzzer: Security exception in java.base/java.util.Collections$UnmodifiableCollection.forEach

Detailed Report: https://oss-fuzz.com/testcase?key=5413049211617280 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: XMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...