openexr:openexr_exrcorecheck_fuzzer: Crash in MemcmpInterceptorCommon

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5191937005518848 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcorecheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: UNKNOWN READ Crash...

apache-commons-configuration:YAMLConfigurationWriteFuzzer: Security exception in java.base/java.util.LinkedHashMap.forEach

Detailed Report: https://oss-fuzz.com/testcase?key=5105011229523968 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5082974356307968 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.imaging.quicktime.QuickTimeReader.processAtoms

Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=5041921020461056 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.decoder.MapDecoder.decodeFixedLength

Detailed Report: https://oss-fuzz.com/testcase?key=4593808694640640 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: co.nstant.in.cbor.decoder.MapDecoder.decodeFixedLeng...

llamacpp:fuzz_structurally_created: Crash in ggml_free

Detailed Report: https://oss-fuzz.com/testcase?key=4532516021665792 Project: llamacpp Fuzzing Engine: libFuzzer Fuzz Target: fuzzstructurallycreated Job Type: libfuzzerubsanllamacpp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x795757cae008 Crash State: ggmlfree...

libraw:libraw_cr2_fuzzer: Index-out-of-bounds in LibRaw::ppg_interpolate

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6407144088338432 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

joni:AddrListFixFuzzer: Security exception in org.joni.Parser.parseCharClass

Project: https://github.com/jruby/joni.git Detailed Report: https://oss-fuzz.com/testcase?key=6092692956708864 Project: joni Fuzzing Engine: libFuzzer Fuzz Target: AddrListFixFuzzer Job Type: libfuzzerasanjoni Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

mruby:mruby_fuzzer: Segv on unknown address in mrb_bint_reduce

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5825967505866752 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

jackson-dataformats-binary:IonParserFuzzer: Security exception in com.amazon.ion.impl.IonCursorBinary.ensureCapacity

Detailed Report: https://oss-fuzz.com/testcase?key=5744627020267520 Project: jackson-dataformats-binary Fuzzing Engine: libFuzzer Fuzz Target: IonParserFuzzer Job Type: libfuzzerasanjackson-dataformats-binary Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-compress:CompressorSnappyFuzzer: Security exception in org.apache.commons.compress.compressors.snappy.FramedSnappyCompressorInputStream

Detailed Report: https://oss-fuzz.com/testcase?key=5416198160842752 Project: apache-commons-compress Fuzzing Engine: libFuzzer Fuzz Target: CompressorSnappyFuzzer Job Type: libfuzzerasanapache-commons-compress Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-configuration:XMLConfigurationWriteFuzzer: Security exception in java.xml/com.sun.org.apache.xalan.internal.xsltc.trax.DOM2TO.parse

Detailed Report: https://oss-fuzz.com/testcase?key=5159742308155392 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: XMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

clamav:clamav_dbload_PDB_fuzzer: Heap-buffer-overflow in add_hash

Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=5021048003690496 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadPDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

apache-commons-validator:UrlValidator2Fuzzer: Security exception in java.base/java.util.regex.Pattern$Loop.match

Detailed Report: https://oss-fuzz.com/testcase?key=4968137508847616 Project: apache-commons-validator Fuzzing Engine: libFuzzer Fuzz Target: UrlValidator2Fuzzer Job Type: libfuzzerasanapache-commons-validator Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.parser.XPathParser.UnionExpr

Detailed Report: https://oss-fuzz.com/testcase?key=4565950555291648 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in java.base/java.util.AbstractSet.hashCode

Detailed Report: https://oss-fuzz.com/testcase?key=4510425285197824 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

rdf4j:ParserFuzzer: Security exception in org.eclipse.rdf4j.query.parser.sparql.ast.SyntaxTreeBuilder.BrackettedExpression

Detailed Report: https://oss-fuzz.com/testcase?key=5966938285604864 Project: rdf4j Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanrdf4j Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.jj_3R_433

Detailed Report: https://oss-fuzz.com/testcase?key=5538447761145856 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in HeifContext::has_alpha

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5327157381890048 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

joni:AddrListFixFuzzer: Security exception in org.joni.Parser.parseCharClass

Project: https://github.com/jruby/joni.git Detailed Report: https://oss-fuzz.com/testcase?key=5158999639523328 Project: joni Fuzzing Engine: libFuzzer Fuzz Target: AddrListFixFuzzer Job Type: libfuzzerasanjoni Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

docker-client:RegistryAuthFuzzer: Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer

Detailed Report: https://oss-fuzz.com/testcase?key=5021721655050240 Project: docker-client Fuzzing Engine: libFuzzer Fuzz Target: RegistryAuthFuzzer Job Type: libfuzzerasandocker-client Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

openbabel: global-buffer-overflow in OpenBabel::generate_sequence

With the following new fuzz target: include include include include include "/src/openbabel/include/openbabel/inchiformat.h" include "/src/openbabel/include/openbabel/format.h" // Fixed line include extern "C" int LLVMFuzzerTestOneInputconst uint8t Data, sizet Size using namespace std; using...

jettison:JsonFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=6246672525492224 Project: jettison Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjettison Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Arrays.copyOf...

keycloak:SamlMetadataParserFuzzer: Security exception in com.ctc.wstx.util.WordResolver$Builder.constructBranch

Detailed Report: https://oss-fuzz.com/testcase?key=6071792907649024 Project: keycloak Fuzzing Engine: libFuzzer Fuzz Target: SamlMetadataParserFuzzer Job Type: libfuzzerasankeycloak Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

fastjson2:JsonFuzzer: Security exception in com.alibaba.fastjson2.JSONReader.readObject

Detailed Report: https://oss-fuzz.com/testcase?key=5242504851554304 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State: com.alibaba.fastjson2.JSONReader.readObject...

antlr4-java:GrammarFuzzer: Security exception in org.antlr.v4.parse.ANTLRParser.block

Detailed Report: https://oss-fuzz.com/testcase?key=6443142021185536 Project: antlr4-java Fuzzing Engine: libFuzzer Fuzz Target: GrammarFuzzer Job Type: libfuzzerasanantlr4-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.antlr.v4.parse.ANTLRParser.block...

keycloak:SamlMetadataParserFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

Detailed Report: https://oss-fuzz.com/testcase?key=5444241445158912 Project: keycloak Fuzzing Engine: libFuzzer Fuzz Target: SamlMetadataParserFuzzer Job Type: libfuzzerasankeycloak Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-configuration:XMLConfigurationLoadFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

Detailed Report: https://oss-fuzz.com/testcase?key=5000627996917760 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: XMLConfigurationLoadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

apache-commons-lang:SerializationUtilsFuzzer: Security exception in jaz.Zer.reportFinding

Detailed Report: https://oss-fuzz.com/testcase?key=6278700406996992 Project: apache-commons-lang Fuzzing Engine: libFuzzer Fuzz Target: SerializationUtilsFuzzer Job Type: libfuzzerasanapache-commons-lang Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

openssl: heap-buffer-overflow in BN_GF2m_mod_arr

Hi, this is a report from an automatically generated fuzz target, so please let us know if this is wrong! With the following fuzz target: include include include include include "../crypto/ec/ecoct.c" int LLVMFuzzerTestOneInputconst uint8t data, sizet size if size = 16 return 0; const int degree ...

llamacpp:fuzz_structurally_created: Segv on unknown address in fuzz_structurally_created

Detailed Report: https://oss-fuzz.com/testcase?key=5293059938516992 Project: llamacpp Fuzzing Engine: afl Fuzz Target: fuzzstructurallycreated Job Type: aflasanllamacpp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: fuzzstructurallycreated Sanitizer: address AS...

libyang: heap-buffer-overflow in lyd_lyb_data_length

With the following auto-generated fuzz target: include "/src/libyang/src/treedata.h" include include int LLVMFuzzerTestOneInputconst uint8t data, sizet size if !size return 0; const char dataptr = const char data; // Ensure the data is null-terminated. char nullterminateddata = mallocsize + 1; if...

libucl:ucl_add_string_fuzzer: Crash in ucl_hash_func

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=4794779500609536 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff...

capstone:fuzz_disasmnext: Heap-buffer-overflow in readBytes48

Detailed Report: https://oss-fuzz.com/testcase?key=4815842800369664 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzerasancapstone Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x5020000000b6 Crash State: readBytes48...

openexr:openexr_exrcorecheck_fuzzer: Crash in internal_exr_validate_shared_attrs

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5169495038033920 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcorecheckfuzzer Job Type: libfuzzerubsanopenexr Platform Id: linux Crash Type: UNKNOWN READ Crash...

libheif:file_fuzzer: Heap-buffer-overflow in Op_RGB_to_YCbCr<unsigned char>::convert_colorspace

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5087089471848448 Project: libheif Fuzzing Engine: afl Fuzz Target: filefuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x52500000c10f Cra...

libjpeg-turbo:decompress_yuv_fuzzer_dev: Use-of-uninitialized-value in decompress_yuv.cc

Detailed Report: https://oss-fuzz.com/testcase?key=6185125941936128 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: decompressyuvfuzzerdev Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: decompressyuv.cc...

edk2:TestFileName: Heap-buffer-overflow in StrLen

Detailed Report: https://oss-fuzz.com/testcase?key=5251909353537536 Project: edk2 Fuzzing Engine: libFuzzer Fuzz Target: TestFileName Job Type: libfuzzerasanedk2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x521000006100 Crash State: StrLen MangleFileName...

envoy:ext_authz_grpc_fuzz_test: Segv on unknown address in Envoy::Extensions::HttpFilters::ExtAuthz::Filter::updateLoggingInfo

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5836362295607296 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: extauthzgrpcfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

sound-open-firmware:sof-ipc3: Crash in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5904359311867904 Project: sound-open-firmware Fuzzing Engine: libFuzzer Fuzz Target: sof-ipc3 Job Type: libfuzzerasani386sound-open-firmware Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00002fe6 Crash State: pthreadcreate...

poco:jwt_decode_fuzzer: Use-of-uninitialized-value in Poco::Dynamic::Var::~Var

Project: https://github.com/pocoproject/poco.git Detailed Report: https://oss-fuzz.com/testcase?key=5129032620900352 Project: poco Fuzzing Engine: libFuzzer Fuzz Target: jwtdecodefuzzer Job Type: libfuzzermsanpoco Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash Stat...

ffmpeg:ffmpeg_dem_QCP_fuzzer: Use-of-uninitialized-value in qcp_read_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4647386712965120 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemQCPfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_EATGQ_fuzzer: Use-of-uninitialized-value in tgq_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5607656650244096 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDEATGQfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

binutils:fuzz_windres: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=5323261395664896 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzwindres Job Type: libfuzzerubsanbinutils Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace Sanitizer:...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Segv on unknown address in tsk_img_free

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4797449401597952 Project: sleuthkit Fuzzing Engine: honggfuzz Fuzz Target: sleuthkitflsapfsfuzzer Job Type: honggfuzzasansleuthkit Platform Id: linux Crash Type: Segv on unknown address Crash...

openjpeg:opj_decompress_fuzzer_JP2: Heap-buffer-overflow in opj_j2k_read_tile_header

Project: https://github.com/uclouvain/openjpeg.git https://github.com/uclouvain/openjpeg-data.git Detailed Report: https://oss-fuzz.com/testcase?key=5963662542569472 Project: openjpeg Fuzzing Engine: afl Fuzz Target: opjdecompressfuzzerJP2 Job Type: aflasanopenjpeg Platform Id: linux Crash Type:...

edk2:TestFileName: Heap-buffer-overflow in StrLen

Project: https://github.com/tianocore/edk2.git Detailed Report: https://oss-fuzz.com/testcase?key=6304711178256384 Project: edk2 Fuzzing Engine: libFuzzer Fuzz Target: TestFileName Job Type: libfuzzerasanedk2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x521000006100...

icu:message_formatter_fuzzer: Heap-use-after-free in icu_76::message2::MessageFormatter::~MessageFormatter

Detailed Report: https://oss-fuzz.com/testcase?key=5004888403148800 Project: icu Fuzzing Engine: afl Fuzz Target: messageformatterfuzzer Job Type: aflasanicu Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x504000000920 Crash State:...

graphicsmagick:coder_AVIF_fuzzer: Use-of-uninitialized-value in HeifContext::has_alpha

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4820668783329280 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderAVIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

libreoffice:docxfuzzer: Container-overflow in SvMemoryStream::GetData

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4788719863791616 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: docxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow WRITE Crash...