flac:fuzzer_tool_flac: Heap-use-after-free in FLAC__metadata_object_delete_data

Detailed Report: https://oss-fuzz.com/testcase?key=5957218564898816 Project: flac Fuzzing Engine: afl Fuzz Target: fuzzertoolflac Job Type: aflasanflac Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x50f000007930 Crash State: FLACmetadataobjectdeletedata...

log4j2:log4j-layout-template-json-fuzz-test-JsonTemplateLayoutCodecFuzzer: Security exception in org.apache.logging.log4j.layout.template.json.util.JsonReader.readToken

Detailed Report: https://oss-fuzz.com/testcase?key=5866173562945536 Project: log4j2 Fuzzing Engine: libFuzzer Fuzz Target: log4j-layout-template-json-fuzz-test-JsonTemplateLayoutCodecFuzzer Job Type: libfuzzerasanlog4j2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

jstl-api:ParserFuzzer: Security exception in ParserFuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=5817500162392064 Project: jstl-api Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanjstl-api Platform Id: linux Crash Type: Security exception Crash Address: Crash State: ParserFuzzer Sanitizer: address ASAN Recommended...

imagemagick:encoder_tiff64_fuzzer: Use-of-uninitialized-value in PixarLogDecode

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5749361525456896 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertiff64fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

libjpeg-turbo:decompress_yuv_fuzzer_dev: Use-of-uninitialized-value in decompress_yuv.cc

Detailed Report: https://oss-fuzz.com/testcase?key=5483929245646848 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: decompressyuvfuzzerdev Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: decompressyuv.cc...

ffmpeg:ffmpeg_dem_MXF_fuzzer: Use-of-uninitialized-value in mxf_read_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5448597561212928 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemMXFfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libjpeg-turbo:transform_fuzzer_2_1_x: Heap-buffer-overflow in write_marker_byte

Detailed Report: https://oss-fuzz.com/testcase?key=5194053023498240 Project: libjpeg-turbo Fuzzing Engine: afl Fuzz Target: transformfuzzer21x Job Type: aflasanlibjpeg-turbo Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x52d000fef000 Crash State: writemarkerbyte...

poppler:annot_fuzzer: Crash in std::__1::recursive_mutex::lock

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5184111583494144 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.util.ArrayUtil.copyOfSubArray

Detailed Report: https://oss-fuzz.com/testcase?key=5156969554444288 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.lucene.util.ArrayUtil.copyOfSubArray...

gpac:fuzz_probe_analyze: Crash in gf_m3u8_to_mpd

Detailed Report: https://oss-fuzz.com/testcase?key=5150445264240640 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x50510001b6af Crash State: gfm3u8tompd gfdashopen dashdmxconfigurepid Sanitizer:...

gdal:gdal_fuzzer: Heap-use-after-free in Page::getAnnots

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5116903314489344 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address: 0xf3601d44 Crash...

tarantool:luaL_loadbuffer_fuzzer: Crash in parse_chunk

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=5091141278564352 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferfuzzer Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

ghostscript:gs_device_tiffsep1_fuzzer: Crash in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5084782411710464 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000045e03e Crash State: chunkfreeobject...

mruby:mruby_fuzzer: Segv on unknown address in mrb_bint_reduce

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5084180629749760 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

libzmq:test_bind_fuzzer: Segv on unknown address in test_bind_fuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=5083360966279168 Project: libzmq Fuzzing Engine: libFuzzer Fuzz Target: testbindfuzzer Job Type: libfuzzerasanlibzmq Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: testbindfuzzer Sanitizer: address ASAN Crash...

apache-poi:POIVisioFuzzer: Security exception in org.apache.poi.hdgf.streams.CompressedStreamStore.decompress

Detailed Report: https://oss-fuzz.com/testcase?key=5080115023773696 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIVisioFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

libheif:file_fuzzer: Heap-buffer-overflow in HeifPixelImage::fill_RGB_16bit

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5031427882680320 Project: libheif Fuzzing Engine: afl Fuzz Target: filefuzzer Job Type: aflasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x52900155828f Cras...

poppler:qt_textbox_fuzzer: Heap-use-after-free in Page::loadStandaloneFields

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=4887369122119680 Project: poppler Fuzzing Engine: honggfuzz Fuzz Target:...

php:php-fuzz-execute: Crash in i_zval_ptr_dtor

Detailed Report: https://oss-fuzz.com/testcase?key=4860195954556928 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerubsanphp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x569798ffa010 Crash State: izvalptrdtor zhoitdtor zendobjectsstoredel...

libreoffice:fodtfuzzer: Bad-cast to SwDrawFrameFormat from SwFlyFrameFormat in SwContact::GetFormat

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4853648008478720 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: fodtfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address:...

binutils:fuzz_addr2line: Crash in bfd_elf_get_str_section

Detailed Report: https://oss-fuzz.com/testcase?key=4829344768262144 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzaddr2line Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7d3445d16bff Crash State: bfdelfgetstrsection...

libultrahdr:ultrahdr_dec_fuzzer: Heap-buffer-overflow in ultrahdr::getYuv444Pixel

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=4812956699787264 Project: libultrahdr Fuzzing Engine: afl Fuzz Target: ultrahdrdecfuzzer Job Type: aflasanlibultrahdr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

assimp:assimp_fuzzer: Bad-cast to Assimp::LogStream from invalid vptr in CallbackToLogRedirector

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4550823252656128 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5ad54fb106e0 Crash State:...

llamacpp:fuzz_inference: Heap-buffer-overflow in gguf_get_tensor_offset

Detailed Report: https://oss-fuzz.com/testcase?key=4527906179579904 Project: llamacpp Fuzzing Engine: libFuzzer Fuzz Target: fuzzinference Job Type: libfuzzerasanllamacpp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x518000000de8 Crash State: ggufgettensoroffset...

openbabel: heap-use-after-free in OpenBabel::FreeBondExpr

With the following new fuzz target: include "/src/openbabel/include/openbabel/rotor.h" include "/src/openbabel/include/openbabel/phmodel.h" include include extern "C" int LLVMFuzzerTestOneInputconst uint8t Data, sizet Size FuzzedDataProvider fuzzeddataproviderData, Size; std::string buffer =...

libucl: Heap-buffer-overflow in ucl_maybe_parse_number

With the following harness: include include include include "ucl.h" int uclmaybeparsenumber uclobjectt obj, const char start, const char end, const char pos, bool allowdouble, bool numberbytes, bool allowtime; int LLVMFuzzerTestOneInputconst uint8t data, sizet size if size == 0 return 0; uclobjec...

pjsip: Heap-buffer-overflow in pjmedia_rtcp_fb_parse_rpsi

With the new following fuzz target: include "/src/pjsip/pjmedia/include/pjmedia/rtcpfb.h" include include int LLVMFuzzerTestOneInputconst uint8t data, sizet size if size & /src/llvm-project/compiler-r...

pjsip: Heap-buffer-overflow in pjmedia_rtcp_fb_parse_sli

With the new following fuzz target: include "/src/pjsip/pjmedia/include/pjmedia/rtcpfb.h" include include include int LLVMFuzzerTestOneInputconst uint8t data, sizet size // pjmediartcpfbcommon doesn't have a 'length' member. // We need to ensure enough data for the header at least if size =...

pjsip: Heap-buffer-overflow in pjmedia_rtcp_fb_parse_sli

With the new following fuzz target: include "/src/pjsip/pjmedia/include/pjmedia/rtcpfb.h" include include include int LLVMFuzzerTestOneInputconst uint8t data, sizet size // pjmediartcpfbcommon doesn't have a 'length' member. // We need to ensure enough data for the header at least if size =...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::xtrans_interpolate

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5069350564855808 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_ILBC_fuzzer: Use-of-uninitialized-value in get_codebook

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6322020827070464 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDILBCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_dem_IAMF_fuzzer: Use-of-uninitialized-value in ff_iamf_parse_obu_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6271067079901184 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemIAMFfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.imaging.quicktime.QuickTimeReader.processAtoms

Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=6001142729867264 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...

glslang:compile_fuzzer: Crash in glslang::TInfoSinkBase::location

Project: https://github.com/khronosgroup/glslang.git Detailed Report: https://oss-fuzz.com/testcase?key=5021734191824896 Project: glslang Fuzzing Engine: libFuzzer Fuzz Target: compilefuzzer Job Type: libfuzzerasanglslang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff8000...

hdf5:h5_extended_fuzzer: Crash in H5FL_reg_malloc

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=4898041885163520 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzerubsanhdf5 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000ffe00000 Crash Stat...

binutils:fuzz_nm: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5201606398771200 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzznm Job Type: centipedeasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x606000019c15 Crash State: bfdgetl16...

simdutf:conversion: Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_latin1

Project: https://github.com/simdutf/simdutf.git Detailed Report: https://oss-fuzz.com/testcase?key=6249684870430720 Project: simdutf Fuzzing Engine: libFuzzer Fuzz Target: conversion Job Type: libfuzzerasansimdutf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

ghostscript:gstoraster_fuzzer_all_colors: Crash in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=6163264591953920 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzerallcolors Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000045e066 Crash State: chunkfreeobject...

ghostscript:gs_device_pgmraw_fuzzer: Crash in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5789636025188352 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepgmrawfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000045e066 Crash State: chunkfreeobject sfclose...

libjpeg-turbo:libjpeg_turbo_fuzzer_dev: Use-of-uninitialized-value in decompress.cc

Detailed Report: https://oss-fuzz.com/testcase?key=5968469470806016 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: libjpegturbofuzzerdev Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: decompress.cc...

imagemagick:encoder_jxl_fuzzer: Container-overflow in std::__1::enable_if<

Detailed Report: https://oss-fuzz.com/testcase?key=5830813051060224 Project: imagemagick Fuzzing Engine: centipede Fuzz Target: encoderjxlfuzzer Job Type: centipedeasanimagemagick Platform Id: linux Crash Type: Container-overflow WRITE Crash Address: 0x607000032e50 Crash State: std::1::enableif...

ffmpeg:ffmpeg_dem_ARGO_BRP_fuzzer: Use-of-uninitialized-value in argo_brp_read_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4692991866896384 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemARGOBRPfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

binutils:fuzz_objdump: Crash in print_insn

Detailed Report: https://oss-fuzz.com/testcase?key=5187892316536832 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzzobjdump Job Type: centipedeasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7d5d14c459b8 Crash State: printinsn disassemblesection...

libjpeg-turbo:transform_fuzzer_dev: Use-of-uninitialized-value in transform.cc

Detailed Report: https://oss-fuzz.com/testcase?key=5994260413874176 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: transformfuzzerdev Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: transform.cc Sanitizer:...

threetenbp:ThreetenbpFuzzer: Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse

Project: https://github.com/ThreeTen/threetenbp.git Detailed Report: https://oss-fuzz.com/testcase?key=5785260997017600 Project: threetenbp Fuzzing Engine: libFuzzer Fuzz Target: ThreetenbpFuzzer Job Type: libfuzzerasanthreetenbp Platform Id: linux Crash Type: Security exception Crash Address:...

libjpeg-turbo:compress_yuv_fuzzer: Use-of-uninitialized-value in compress_yuv.cc

Detailed Report: https://oss-fuzz.com/testcase?key=4909354476699648 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: compressyuvfuzzer Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: compressyuv.cc...

git:fuzz-commit-graph: Crash in fuzz-commit-graph

Project: https://github.com/git/git.git Detailed Report: https://oss-fuzz.com/testcase?key=5387331404627968 Project: git Fuzzing Engine: libFuzzer Fuzz Target: fuzz-commit-graph Job Type: libfuzzerasangit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61f000001000 Crash State:...

ghostscript:gs_device_psdcmyk_fuzzer: Crash in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5131293984620544 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepsdcmykfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000045e03e Crash State: chunkfreeobject...

karchive:karchive_fuzzer: Heap-buffer-overflow in crc64_clmul

Detailed Report: https://oss-fuzz.com/testcase?key=6102147979083776 Project: karchive Fuzzing Engine: centipede Fuzz Target: karchivefuzzer Job Type: centipedeasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x6290010f8210 Crash State: crc64clmul...

ffmpeg:ffmpeg_SWR_fuzzer: Use-of-uninitialized-value in swri_rematrix

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4905557943713792 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegSWRfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...