javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.expr.BinaryExpr.accept

Detailed Report: https://oss-fuzz.com/testcase?key=5203496037580800 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State: com.github.javaparser.ast.expr.BinaryExpr.acce...

sqlite3: heap-buffer-overflow in sqlite3Utf16ByteLen

With the following new fuzz target generated by https://github.com/google/oss-fuzz-gen: include "/src/sqlite3/bld/sqlite3.h" include include include extern "C" int LLVMFuzzerTestOneInputconst uint8t data, sizet size sqlite3 db; if sqlite3open":memory:", &db != SQLITEOK return 0; // Use size...

exiv2: buffer-overflow in Exiv2::Uri::Parse

With the following new fuzz target generated by https://github.com/google/oss-fuzz-gen: include include include include include // Include standard library headers before project-specific headers include "/usr/include/expat.h" include extern "C" int LLVMFuzzerTestOneInputconst uint8t data, sizet...

docker-client:RegistryAuthFuzzer: Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer

Project: https://github.com/spotify/docker-client.git Detailed Report: https://oss-fuzz.com/testcase?key=5977876191576064 Project: docker-client Fuzzing Engine: libFuzzer Fuzz Target: RegistryAuthFuzzer Job Type: libfuzzerasandocker-client Platform Id: linux Crash Type: Security exception Crash...

apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in org.yaml.snakeyaml.parser.ParserImpl$ParseBlockMappingValueComment.produce

Detailed Report: https://oss-fuzz.com/testcase?key=4883712972488704 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

mruby:mruby_fuzzer: Heap-use-after-free in mrb_vm_exec

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5807710761713664 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x51b0000006e8...

qemu:qemu-fuzz-i386-target-generic-fuzz-megaraid: Segv on unknown address in address_space_unmap

Detailed Report: https://oss-fuzz.com/testcase?key=5534266006503424 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-megaraid Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: addressspaceunmap...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Use-of-uninitialized-value in ff_hevc_hls_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5427736120721408 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libical: global-buffer-overflow in icaltime_timegm

With the following new fuzz target: include include include include include "/src/libical/src/libical/icalcomponent.h" extern "C" int LLVMFuzzerTestOneInputconst uint8t data, sizet size char icalstring = char mallocsize + 1; memcpyicalstring, data, size; icalstringsize = '\0'; icalcomponent comp ...

htslib: heap-buffer-overflow in hts_hopen

With the new fuzz target: include include include include include include include include "/src/htslib/htslib/sam.h" include "../../htslib/hfile.h" include "../../htslib/hts.h" static void htscloseoraborthtsFile file if htsclosefile != 0 abort; int LLVMFuzzerTestOneInputconst uint8t data, sizet...

croaring: stack-buffer-overflow in art_insert_at

With the following new fuzz target: include include include include include include int LLVMFuzzerTestOneInputconst uint8t data, sizet size if size == 0 return 0; // Deserialize the provided data as a roaring64bitmapt. roaring64bitmapt r = roaring64bitmapportabledeserializesafe const char data,...

joni:RegexMatcherFuzzer: Security exception in org.joni.Parser.parseCharClass

Project: https://github.com/jruby/joni.git Detailed Report: https://oss-fuzz.com/testcase?key=5189201111351296 Project: joni Fuzzing Engine: libFuzzer Fuzz Target: RegexMatcherFuzzer Job Type: libfuzzerasanjoni Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

openexr:openexr_exrcheck_fuzzer: Crash in Imf_3_3::InputFile::Data::copyCachedBuffer

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5154143415631872 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5124941329006592 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

ffmpeg:ffmpeg_SWS_fuzzer: Heap-buffer-overflow in nv24ToYuv420Wrapper

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5876893532880896 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegSWSfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x52900009a680 Crash...

apache-commons-configuration:XMLConfigurationWriteFuzzer: Security exception in java.xml/com.sun.org.apache.xalan.internal.xsltc.trax.DOM2TO.parse

Detailed Report: https://oss-fuzz.com/testcase?key=5289559036854272 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: XMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

keycloak:ValidatorFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/keycloak/keycloak.git Detailed Report: https://oss-fuzz.com/testcase?key=6364780233818112 Project: keycloak Fuzzing Engine: libFuzzer Fuzz Target: ValidatorFuzzer Job Type: libfuzzerasankeycloak Platform Id: linux Crash Type: Security exception Crash Address: Crash...

jackson-dataformats-binary:DeserializerFuzzer: Security exception in com.fasterxml.jackson.databind.deser.BeanDeserializer.deserialize

Detailed Report: https://oss-fuzz.com/testcase?key=6008948677738496 Project: jackson-dataformats-binary Fuzzing Engine: libFuzzer Fuzz Target: DeserializerFuzzer Job Type: libfuzzerasanjackson-dataformats-binary Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-configuration:XMLConfigurationWriteFuzzer: Security exception in java.base/java.util.Collections$UnmodifiableCollection.forEach

Detailed Report: https://oss-fuzz.com/testcase?key=5413049211617280 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: XMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

openexr:openexr_exrcorecheck_fuzzer: Crash in MemcmpInterceptorCommon

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5191937005518848 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcorecheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: UNKNOWN READ Crash...

apache-commons-configuration:YAMLConfigurationWriteFuzzer: Security exception in java.base/java.util.LinkedHashMap.forEach

Detailed Report: https://oss-fuzz.com/testcase?key=5105011229523968 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5082974356307968 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.imaging.quicktime.QuickTimeReader.processAtoms

Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=5041921020461056 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.decoder.MapDecoder.decodeFixedLength

Detailed Report: https://oss-fuzz.com/testcase?key=4593808694640640 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: co.nstant.in.cbor.decoder.MapDecoder.decodeFixedLeng...

llamacpp:fuzz_structurally_created: Crash in ggml_free

Detailed Report: https://oss-fuzz.com/testcase?key=4532516021665792 Project: llamacpp Fuzzing Engine: libFuzzer Fuzz Target: fuzzstructurallycreated Job Type: libfuzzerubsanllamacpp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x795757cae008 Crash State: ggmlfree...

libraw:libraw_cr2_fuzzer: Index-out-of-bounds in LibRaw::ppg_interpolate

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6407144088338432 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

joni:AddrListFixFuzzer: Security exception in org.joni.Parser.parseCharClass

Project: https://github.com/jruby/joni.git Detailed Report: https://oss-fuzz.com/testcase?key=6092692956708864 Project: joni Fuzzing Engine: libFuzzer Fuzz Target: AddrListFixFuzzer Job Type: libfuzzerasanjoni Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

mruby:mruby_fuzzer: Segv on unknown address in mrb_bint_reduce

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5825967505866752 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

jackson-dataformats-binary:IonParserFuzzer: Security exception in com.amazon.ion.impl.IonCursorBinary.ensureCapacity

Detailed Report: https://oss-fuzz.com/testcase?key=5744627020267520 Project: jackson-dataformats-binary Fuzzing Engine: libFuzzer Fuzz Target: IonParserFuzzer Job Type: libfuzzerasanjackson-dataformats-binary Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-compress:CompressorSnappyFuzzer: Security exception in org.apache.commons.compress.compressors.snappy.FramedSnappyCompressorInputStream

Detailed Report: https://oss-fuzz.com/testcase?key=5416198160842752 Project: apache-commons-compress Fuzzing Engine: libFuzzer Fuzz Target: CompressorSnappyFuzzer Job Type: libfuzzerasanapache-commons-compress Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-configuration:XMLConfigurationWriteFuzzer: Security exception in java.xml/com.sun.org.apache.xalan.internal.xsltc.trax.DOM2TO.parse

Detailed Report: https://oss-fuzz.com/testcase?key=5159742308155392 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: XMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

clamav:clamav_dbload_PDB_fuzzer: Heap-buffer-overflow in add_hash

Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=5021048003690496 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadPDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

apache-commons-validator:UrlValidator2Fuzzer: Security exception in java.base/java.util.regex.Pattern$Loop.match

Detailed Report: https://oss-fuzz.com/testcase?key=4968137508847616 Project: apache-commons-validator Fuzzing Engine: libFuzzer Fuzz Target: UrlValidator2Fuzzer Job Type: libfuzzerasanapache-commons-validator Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.parser.XPathParser.UnionExpr

Detailed Report: https://oss-fuzz.com/testcase?key=4565950555291648 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in java.base/java.util.AbstractSet.hashCode

Detailed Report: https://oss-fuzz.com/testcase?key=4510425285197824 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

rdf4j:ParserFuzzer: Security exception in org.eclipse.rdf4j.query.parser.sparql.ast.SyntaxTreeBuilder.BrackettedExpression

Detailed Report: https://oss-fuzz.com/testcase?key=5966938285604864 Project: rdf4j Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanrdf4j Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.jj_3R_433

Detailed Report: https://oss-fuzz.com/testcase?key=5538447761145856 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in HeifContext::has_alpha

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5327157381890048 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

joni:AddrListFixFuzzer: Security exception in org.joni.Parser.parseCharClass

Project: https://github.com/jruby/joni.git Detailed Report: https://oss-fuzz.com/testcase?key=5158999639523328 Project: joni Fuzzing Engine: libFuzzer Fuzz Target: AddrListFixFuzzer Job Type: libfuzzerasanjoni Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

docker-client:RegistryAuthFuzzer: Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer

Detailed Report: https://oss-fuzz.com/testcase?key=5021721655050240 Project: docker-client Fuzzing Engine: libFuzzer Fuzz Target: RegistryAuthFuzzer Job Type: libfuzzerasandocker-client Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

openbabel: global-buffer-overflow in OpenBabel::generate_sequence

With the following new fuzz target: include include include include include "/src/openbabel/include/openbabel/inchiformat.h" include "/src/openbabel/include/openbabel/format.h" // Fixed line include extern "C" int LLVMFuzzerTestOneInputconst uint8t Data, sizet Size using namespace std; using...

jettison:JsonFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=6246672525492224 Project: jettison Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjettison Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Arrays.copyOf...

keycloak:SamlMetadataParserFuzzer: Security exception in com.ctc.wstx.util.WordResolver$Builder.constructBranch

Detailed Report: https://oss-fuzz.com/testcase?key=6071792907649024 Project: keycloak Fuzzing Engine: libFuzzer Fuzz Target: SamlMetadataParserFuzzer Job Type: libfuzzerasankeycloak Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

fastjson2:JsonFuzzer: Security exception in com.alibaba.fastjson2.JSONReader.readObject

Detailed Report: https://oss-fuzz.com/testcase?key=5242504851554304 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State: com.alibaba.fastjson2.JSONReader.readObject...

antlr4-java:GrammarFuzzer: Security exception in org.antlr.v4.parse.ANTLRParser.block

Detailed Report: https://oss-fuzz.com/testcase?key=6443142021185536 Project: antlr4-java Fuzzing Engine: libFuzzer Fuzz Target: GrammarFuzzer Job Type: libfuzzerasanantlr4-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.antlr.v4.parse.ANTLRParser.block...

keycloak:SamlMetadataParserFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

Detailed Report: https://oss-fuzz.com/testcase?key=5444241445158912 Project: keycloak Fuzzing Engine: libFuzzer Fuzz Target: SamlMetadataParserFuzzer Job Type: libfuzzerasankeycloak Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-configuration:XMLConfigurationLoadFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

Detailed Report: https://oss-fuzz.com/testcase?key=5000627996917760 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: XMLConfigurationLoadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

apache-commons-lang:SerializationUtilsFuzzer: Security exception in jaz.Zer.reportFinding

Detailed Report: https://oss-fuzz.com/testcase?key=6278700406996992 Project: apache-commons-lang Fuzzing Engine: libFuzzer Fuzz Target: SerializationUtilsFuzzer Job Type: libfuzzerasanapache-commons-lang Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

openssl: heap-buffer-overflow in BN_GF2m_mod_arr

Hi, this is a report from an automatically generated fuzz target, so please let us know if this is wrong! With the following fuzz target: include include include include include "../crypto/ec/ecoct.c" int LLVMFuzzerTestOneInputconst uint8t data, sizet size if size = 16 return 0; const int degree ...

llamacpp:fuzz_structurally_created: Segv on unknown address in fuzz_structurally_created

Detailed Report: https://oss-fuzz.com/testcase?key=5293059938516992 Project: llamacpp Fuzzing Engine: afl Fuzz Target: fuzzstructurallycreated Job Type: aflasanllamacpp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: fuzzstructurallycreated Sanitizer: address AS...