pjsip: Heap-buffer-overflow in pjmedia_rtcp_fb_parse_sli

With the new following fuzz target: include "/src/pjsip/pjmedia/include/pjmedia/rtcpfb.h" include include include int LLVMFuzzerTestOneInputconst uint8t data, sizet size // pjmediartcpfbcommon doesn't have a 'length' member. // We need to ensure enough data for the header at least if size =...

pjsip: Heap-buffer-overflow in pjmedia_rtcp_fb_parse_sli

With the new following fuzz target: include "/src/pjsip/pjmedia/include/pjmedia/rtcpfb.h" include include include int LLVMFuzzerTestOneInputconst uint8t data, sizet size // pjmediartcpfbcommon doesn't have a 'length' member. // We need to ensure enough data for the header at least if size =...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::xtrans_interpolate

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5069350564855808 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_ILBC_fuzzer: Use-of-uninitialized-value in get_codebook

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6322020827070464 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDILBCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_dem_IAMF_fuzzer: Use-of-uninitialized-value in ff_iamf_parse_obu_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6271067079901184 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemIAMFfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

metadata-extractor:ImageMetadataReaderFuzzer: Security exception in com.drew.imaging.quicktime.QuickTimeReader.processAtoms

Project: https://github.com/drewnoakes/metadata-extractor.git Detailed Report: https://oss-fuzz.com/testcase?key=6001142729867264 Project: metadata-extractor Fuzzing Engine: libFuzzer Fuzz Target: ImageMetadataReaderFuzzer Job Type: libfuzzerasanmetadata-extractor Platform Id: linux Crash Type:...

glslang:compile_fuzzer: Crash in glslang::TInfoSinkBase::location

Project: https://github.com/khronosgroup/glslang.git Detailed Report: https://oss-fuzz.com/testcase?key=5021734191824896 Project: glslang Fuzzing Engine: libFuzzer Fuzz Target: compilefuzzer Job Type: libfuzzerasanglslang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff8000...

hdf5:h5_extended_fuzzer: Crash in H5FL_reg_malloc

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=4898041885163520 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzerubsanhdf5 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000ffe00000 Crash Stat...

binutils:fuzz_nm: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5201606398771200 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzznm Job Type: centipedeasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x606000019c15 Crash State: bfdgetl16...

simdutf:conversion: Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_latin1

Project: https://github.com/simdutf/simdutf.git Detailed Report: https://oss-fuzz.com/testcase?key=6249684870430720 Project: simdutf Fuzzing Engine: libFuzzer Fuzz Target: conversion Job Type: libfuzzerasansimdutf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

ghostscript:gstoraster_fuzzer_all_colors: Crash in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=6163264591953920 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzerallcolors Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000045e066 Crash State: chunkfreeobject...

ghostscript:gs_device_pgmraw_fuzzer: Crash in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5789636025188352 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepgmrawfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000045e066 Crash State: chunkfreeobject sfclose...

libjpeg-turbo:libjpeg_turbo_fuzzer_dev: Use-of-uninitialized-value in decompress.cc

Detailed Report: https://oss-fuzz.com/testcase?key=5968469470806016 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: libjpegturbofuzzerdev Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: decompress.cc...

imagemagick:encoder_jxl_fuzzer: Container-overflow in std::__1::enable_if<

Detailed Report: https://oss-fuzz.com/testcase?key=5830813051060224 Project: imagemagick Fuzzing Engine: centipede Fuzz Target: encoderjxlfuzzer Job Type: centipedeasanimagemagick Platform Id: linux Crash Type: Container-overflow WRITE Crash Address: 0x607000032e50 Crash State: std::1::enableif...

ffmpeg:ffmpeg_dem_ARGO_BRP_fuzzer: Use-of-uninitialized-value in argo_brp_read_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4692991866896384 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemARGOBRPfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

binutils:fuzz_objdump: Crash in print_insn

Detailed Report: https://oss-fuzz.com/testcase?key=5187892316536832 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzzobjdump Job Type: centipedeasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7d5d14c459b8 Crash State: printinsn disassemblesection...

libjpeg-turbo:transform_fuzzer_dev: Use-of-uninitialized-value in transform.cc

Detailed Report: https://oss-fuzz.com/testcase?key=5994260413874176 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: transformfuzzerdev Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: transform.cc Sanitizer:...

threetenbp:ThreetenbpFuzzer: Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse

Project: https://github.com/ThreeTen/threetenbp.git Detailed Report: https://oss-fuzz.com/testcase?key=5785260997017600 Project: threetenbp Fuzzing Engine: libFuzzer Fuzz Target: ThreetenbpFuzzer Job Type: libfuzzerasanthreetenbp Platform Id: linux Crash Type: Security exception Crash Address:...

libjpeg-turbo:compress_yuv_fuzzer: Use-of-uninitialized-value in compress_yuv.cc

Detailed Report: https://oss-fuzz.com/testcase?key=4909354476699648 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: compressyuvfuzzer Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: compressyuv.cc...

git:fuzz-commit-graph: Crash in fuzz-commit-graph

Project: https://github.com/git/git.git Detailed Report: https://oss-fuzz.com/testcase?key=5387331404627968 Project: git Fuzzing Engine: libFuzzer Fuzz Target: fuzz-commit-graph Job Type: libfuzzerasangit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61f000001000 Crash State:...

ghostscript:gs_device_psdcmyk_fuzzer: Crash in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5131293984620544 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepsdcmykfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000045e03e Crash State: chunkfreeobject...

karchive:karchive_fuzzer: Heap-buffer-overflow in crc64_clmul

Detailed Report: https://oss-fuzz.com/testcase?key=6102147979083776 Project: karchive Fuzzing Engine: centipede Fuzz Target: karchivefuzzer Job Type: centipedeasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x6290010f8210 Crash State: crc64clmul...

ffmpeg:ffmpeg_SWR_fuzzer: Use-of-uninitialized-value in swri_rematrix

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4905557943713792 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegSWRfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

gpac:fuzz_parse: Heap-use-after-free in gf_isom_box_del

Detailed Report: https://oss-fuzz.com/testcase?key=5951157598486528 Project: gpac Fuzzing Engine: centipede Fuzz Target: fuzzparse Job Type: centipedeasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60b0000002a8 Crash State: gfisomboxdel gfisomboxdel gfisomboxde...

libjpeg-turbo:compress_fuzzer: Use-of-uninitialized-value in encode_mcu_huff

Detailed Report: https://oss-fuzz.com/testcase?key=4654214175850496 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: compressfuzzer Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: encodemcuhuff compressdata...

ffmpeg:ffmpeg_AV_CODEC_ID_NOTCHLC_fuzzer: Use-of-uninitialized-value in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4624502095413248 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDNOTCHLCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_VC1IMAGE_fuzzer: Use-of-uninitialized-value in vc1_put_blocks_clamped

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6188476880453632 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVC1IMAGEfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

simdutf:conversion: Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_utf16be

Project: https://github.com/simdutf/simdutf.git Detailed Report: https://oss-fuzz.com/testcase?key=5299931974270976 Project: simdutf Fuzzing Engine: libFuzzer Fuzz Target: conversion Job Type: libfuzzerasansimdutf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

imagemagick:encoder_label_fuzzer: Crash in ExecuteRPN

Detailed Report: https://oss-fuzz.com/testcase?key=5164539069399040 Project: imagemagick Fuzzing Engine: centipede Fuzz Target: encoderlabelfuzzer Job Type: centipedeasanimagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61a00003d938 Crash State: ExecuteRPN...

perfetto:trace_processor_fuzzer: Container-overflow in std::__1::enable_if<

Detailed Report: https://oss-fuzz.com/testcase?key=4823824917397504 Project: perfetto Fuzzing Engine: centipede Fuzz Target: traceprocessorfuzzer Job Type: centipedeasanperfetto Platform Id: linux Crash Type: Container-overflow WRITE Crash Address: 0x6080005081c0 Crash State: std::1::enableif...

libressl:cryptofuzz: Heap-buffer-overflow in BN_bn2mpi

Detailed Report: https://oss-fuzz.com/testcase?key=6002054236012544 Project: libressl Fuzzing Engine: centipede Fuzz Target: cryptofuzz Job Type: centipedeasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x609000046cd4 Crash State: BNbn2mpi...

libjpeg-turbo:compress12_fuzzer: Use-of-uninitialized-value in compress12.cc

Detailed Report: https://oss-fuzz.com/testcase?key=5194486701948928 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: compress12fuzzer Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: compress12.cc compress12.cc...

hermes:fuzzer-jsi-entry: Container-overflow in std::__1::enable_if<

Detailed Report: https://oss-fuzz.com/testcase?key=5192915280789504 Project: hermes Fuzzing Engine: centipede Fuzz Target: fuzzer-jsi-entry Job Type: centipedeasanhermes Platform Id: linux Crash Type: Container-overflow WRITE 8 Crash Address: 0x60b00000080f Crash State:...

binutils:fuzz_windres: Null-dereference READ in fuzz_windres

Detailed Report: https://oss-fuzz.com/testcase?key=5191830935764992 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzwindres Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: fuzzwindres Sanitizer: memory MS...

libjpeg-turbo:compress12_fuzzer: Use-of-uninitialized-value in encode_mcu_AC_first

Detailed Report: https://oss-fuzz.com/testcase?key=5071676943958016 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: compress12fuzzer Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: encodemcuACfirst...

binutils:fuzz_disassemble: Crash in print_insn

Detailed Report: https://oss-fuzz.com/testcase?key=4845740961103872 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzzdisassemble Job Type: centipedeasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7a82c1fdd9b8 Crash State: printinsn fuzzdisassemble.c...

trafficserver:fuzz_http3frame: Use-of-uninitialized-value in Http3FrameFactory::create

Project: https://github.com/apache/trafficserver.git Detailed Report: https://oss-fuzz.com/testcase?key=4793610426449920 Project: trafficserver Fuzzing Engine: libFuzzer Fuzz Target: fuzzhttp3frame Job Type: libfuzzermsantrafficserver Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

imagemagick:ping_fuzzer: Crash in std::__1::vector<unsigned char, std::__1::allocator<unsigned char> >::__swap_out

Detailed Report: https://oss-fuzz.com/testcase?key=6311812377673728 Project: imagemagick Fuzzing Engine: centipede Fuzz Target: pingfuzzer Job Type: centipedeasanimagemagick Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x60b00000357c Crash State: std::1::vector ::swapout std::1::vector...

binutils:fuzz_disas_ext-bfd_arch_i386: Crash in print_insn

Detailed Report: https://oss-fuzz.com/testcase?key=5198295868178432 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzzdisasext-bfdarchi386 Job Type: centipedeasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000014a8 Crash State: printinsn...

readstat:fuzz_format_sav: Heap-buffer-overflow in sav_process_row

Detailed Report: https://oss-fuzz.com/testcase?key=5196591034597376 Project: readstat Fuzzing Engine: centipede Fuzz Target: fuzzformatsav Job Type: centipedeasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x7c6c13b4b7ff Crash State: savprocessrow savreadda...

readstat:fuzz_format_sas7bcat: Heap-buffer-overflow in sas_read2

Detailed Report: https://oss-fuzz.com/testcase?key=5166334130847744 Project: readstat Fuzzing Engine: centipede Fuzz Target: fuzzformatsas7bcat Job Type: centipedeasanreadstat Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x61d00000127f Crash State: sasread2...

md4c:fuzz-mdhtml: Heap-buffer-overflow in md_analyze_inlines

Detailed Report: https://oss-fuzz.com/testcase?key=5156518251528192 Project: md4c Fuzzing Engine: centipede Fuzz Target: fuzz-mdhtml Job Type: centipedeasanmd4c Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6210000b7cfc Crash State: mdanalyzeinlines...

perfetto:producer_socket_fuzzer: Container-overflow in std::__1::enable_if<

Detailed Report: https://oss-fuzz.com/testcase?key=5086878980702208 Project: perfetto Fuzzing Engine: centipede Fuzz Target: producersocketfuzzer Job Type: centipedeasanperfetto Platform Id: linux Crash Type: Container-overflow WRITE 9 Crash Address: 0x605000066a70 Crash State: std::1::enableif...

libyang:lys_parse_mem: Crash in lysc_update_path

Detailed Report: https://oss-fuzz.com/testcase?key=5084602044055552 Project: libyang Fuzzing Engine: centipede Fuzz Target: lysparsemem Job Type: centipedeasanlibyang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7b61c387a0cf Crash State: lyscupdatepath lyscompilenode lyscompile...

jbig2dec:jbig2_fuzzer: Heap-use-after-free in jbig2_image_release

Detailed Report: https://oss-fuzz.com/testcase?key=5074694829572096 Project: jbig2dec Fuzzing Engine: centipede Fuzz Target: jbig2fuzzer Job Type: centipedeasanjbig2dec Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6050011874d8 Crash State: jbig2imagerelease...

wt:fuzz-eval: Heap-use-after-free in fuzz-eval.C

Project: https://github.com/emweb/wt.git Detailed Report: https://oss-fuzz.com/testcase?key=4904942656094208 Project: wt Fuzzing Engine: afl Fuzz Target: fuzz-eval Job Type: aflasanwt Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x50f000001aa2 Crash State: fuzz-eval.C...

gpac:fuzz_probe_analyze: Stack-buffer-overflow in gf_hevc_parse_nalu_bs

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6203059915522048 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7eb7a122186...

inchi:inchi_input_fuzzer: Stack-buffer-overflow in set_stereo_parity

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=4638498798239744 Project: inchi Fuzzing Engine: afl Fuzz Target: inchiinputfuzzer Job Type: aflasaninchi Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 2 Crash Address: 0x7d7fcdb01e78...

open62541:fuzz_base64_decode: Use-of-uninitialized-value in fuzz_base64_decode.cc

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5038152685780992 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzbase64decode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

rtpproxy:fuzz_rtp_session: Segv on unknown address in rtpp_refcnt_decref

Project: https://github.com/sippy/rtpproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=4736132766564352 Project: rtpproxy Fuzzing Engine: honggfuzz Fuzz Target: fuzzrtpsession Job Type: honggfuzzasanrtpproxy Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...