javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6527502233174016 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

jackson-databind:ObjectReaderRandomClassFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=5819542208053248 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ObjectReaderRandomClassFuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type:...

libxml2:api: Heap-use-after-free in dropNode

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5078336398229504 Project: libxml2 Fuzzing Engine: afl Fuzz Target: api Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60c0000007e8 Crash Stat...

dng_sdk:dng_validate_fuzzer: Stack-use-after-scope in RefCopyBytes

Detailed Report: https://oss-fuzz.com/testcase?key=5284982659547136 Project: dngsdk Fuzzing Engine: honggfuzz Fuzz Target: dngvalidatefuzzer Job Type: honggfuzzasandngsdk Platform Id: linux Crash Type: Stack-use-after-scope READ Crash Address: 0x7ffff5c4ad74 Crash State: RefCopyBytes dngstream::P...

quickjs:fuzz_eval: Use-of-uninitialized-value in build_backtrace

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=6545928146190336 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzeval Job Type: libfuzzermsanquickjs Platform Id: linux Crash Type:...

jackson-databind:ObjectReaderRandomClassFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=5059702041935872 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ObjectReaderRandomClassFuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type:...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5766245455560704 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

lua:luaL_loadbuffer_proto_test: Heap-use-after-free in luaV_finishget

Detailed Report: https://oss-fuzz.com/testcase?key=5350818532360192 Project: lua Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferprototest Job Type: libfuzzerasanlua Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x61b000004338 Crash State: luaVfinishget luaVexecute...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in GetTgroupInfoFromInChI

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=4978673696768000 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: inchiinputfuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6694893533593600 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

Detailed Report: https://oss-fuzz.com/testcase?key=5558938017792000 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: co.nstant.in.cbor.CborDecoder.decodeNext...

quickjs:fuzz_compile: Heap-buffer-overflow in JS_CallInternal

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=6426980671094784 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzerasanquickjs Platform Id: linux Crash Type:...

lwan:template_fuzzer: Segv on unknown address in murmur3_simple

Project: git://github.com/lpereira/lwan https://github.com/lpereira/lwan.git Detailed Report: https://oss-fuzz.com/testcase?key=6208074244227072 Project: lwan Fuzzing Engine: libFuzzer Fuzz Target: templatefuzzer Job Type: libfuzzerasanlwan Platform Id: linux Crash Type: Segv on unknown address...

libreoffice:fodsfuzzer: Heap-use-after-free in cppu::idestroySequence

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6045390006714368 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: fodsfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash...

skia:skp: Heap-buffer-overflow in SkRecorder::onDrawEdgeAAImageSet2

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6236545515323392 Project: skia Fuzzing Engine: honggfuzz Fuzz Target: skp Job Type: honggfuzzasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6130000001a7 Crash...

gdal:gdal_translate_fuzzer: Heap-buffer-overflow in std::__1::__wrap_iter<std::__1::basic_string<char, std::__1::char_traits<char>,

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5752107544150016 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdaltranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

samba:fuzz_ndr_spoolss_TYPE_OUT: Segv on unknown address in ndr_print_and_forget

Detailed Report: https://oss-fuzz.com/testcase?key=5465351317946368 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrspoolssTYPEOUT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: ndrprintandforget ndrprintstring...

libxml2:api: Heap-use-after-free in xmlCopyPropInternal

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5371461389844480 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: api Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60400000016...

libspdm:test_spdm_responder_chunk_send_ack: Heap-buffer-overflow in libspdm_copy_mem

Project: https://github.com/DMTF/libspdm.git Detailed Report: https://oss-fuzz.com/testcase?key=5274620108275712 Project: libspdm Fuzzing Engine: libFuzzer Fuzz Target: testspdmresponderchunksendack Job Type: libfuzzerasanlibspdm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

Detailed Report: https://oss-fuzz.com/testcase?key=6446891267063808 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

wasmtime:cranelift-fuzzgen: Invalid-free in cranelift_fuzzgen::_::run::hdfcd291918ee1fdd

Project: https://github.com/bytecodealliance/wasmtime.git Detailed Report: https://oss-fuzz.com/testcase?key=4887316214644736 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: cranelift-fuzzgen Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: Invalid-free Crash Address:...

libxml2:api: Heap-use-after-free in xmlDOMWrapNSNormAcquireNormalizedNs

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5491171101048832 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: api Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60400000016...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6664564840136704 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

libxml2:api: Use-of-uninitialized-value in api.c

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5203165176725504 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: api Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

radare2:ia_fuzz: Heap-buffer-overflow in buf_bytes_write

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=5149294791294976 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

pcre2:pcre2_fuzzer_32_3l: Heap-buffer-overflow in pcre2_fuzzsupport.c

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed Report: https://oss-fuzz.com/testcase?key=5601726646255616 Project: pcre2 Fuzzing Engine: afl Fuzz Target: pcre2fuzzer323l Job Type: aflasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow REA...

libreoffice:schtmlfuzzer: Heap-buffer-overflow in ScHTMLLayoutParser::SetWidths

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4905380662542336 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: schtmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

libspdm:test_spdm_responder_chunk_send_ack: Heap-buffer-overflow in libspdm_copy_mem

Project: https://github.com/DMTF/libspdm.git Detailed Report: https://oss-fuzz.com/testcase?key=6677017594494976 Project: libspdm Fuzzing Engine: libFuzzer Fuzz Target: testspdmresponderchunksendack Job Type: libfuzzerasanlibspdm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

igraph:vertex_separators: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4680147175276544 Project: igraph Fuzzing Engine: libFuzzer Fuzz Target: vertexseparators Job Type: libfuzzerubsanigraph Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000100029b86 Crash State: NULL Sanitizer: undefined UBSAN...

libredwg:llvmfuzz: Heap-use-after-free in json_fixed_string

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6080267090460672 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-use-after-free WRITE 11 Crash Address:...

apache-commons-codec:PhoneticEngineFuzzer: Security exception in java.base/java.lang.AbstractStringBuilder.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5078600585904128 Project: apache-commons-codec Fuzzing Engine: libFuzzer Fuzz Target: PhoneticEngineFuzzer Job Type: libfuzzerasanapache-commons-codec Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

serenity:FuzzTIFFLoader: Crash in void Gfx::Detail::ExifOrientedBitmap<Gfx::Bitmap>::set_pixel<unsigned int>

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5573144360321024 Project: serenity Fuzzing Engine: afl Fuzz Target: FuzzTIFFLoader Job Type: aflasanserenity Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7f80ac8475f0 Crash Stat...

glslang:compile_fuzzer: Segv on unknown address in glslang::TInfoSinkBase::location

Project: https://github.com/khronosgroup/glslang.git Detailed Report: https://oss-fuzz.com/testcase?key=5490109455597568 Project: glslang Fuzzing Engine: libFuzzer Fuzz Target: compilefuzzer Job Type: libfuzzerasanglslang Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

mysql-server:fuzz_real_query: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5128598837067776 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzrealquery Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

igraph:vertex_separators: Heap-buffer-overflow in igraph_cohesive_blocks

Project: https://github.com/igraph/igraph.git Detailed Report: https://oss-fuzz.com/testcase?key=5213632730300416 Project: igraph Fuzzing Engine: libFuzzer Fuzz Target: vertexseparators Job Type: libfuzzerasanigraph Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

zstd: Heap-buffer-overflow in ZSTD_generateSequences

Hi! This is a manual report, different from the robot-generated ones you've probably seen in the past. With the following new fuzz target and NDEBUG set to disable assertions: include include include include define ZSTDSTATICLINKINGONLY include "fuzzhelpers.h" include "zstd.h" include...

libdwarf:fuzz_srcfiles: Heap-buffer-overflow in _dwarf_decode_line_udata_form

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5195296927711232 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzsrcfiles Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

gdbm: stack-buffer-underflow in get_dump_line

Hi! This is a manual report, different from the robot-generated ones you've probably seen in the past. With the following fuzz target which tests gdbmloadfromfile: include include include include include include include include static char dbname = "a.db"; int LLVMFuzzerTestOneInputconst uint8t...

libxslt:xslt: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6539835332427776 Project: libxslt Fuzzing Engine: libFuzzer Fuzz Target: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x798c2660e040 Crash State: NULL Sanitizer: memory MSAN Recommended Security...

pcre2:pcre2_fuzzer_32_4l: Heap-buffer-overflow in pcre2_fuzzsupport.c

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed Report: https://oss-fuzz.com/testcase?key=5076600573984768 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer324l Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type:...

jsoup:HtmlFuzzer: Security exception in java.base/java.util.regex.Pattern$Loop.match

Project: https://github.com/jhy/jsoup.git Detailed Report: https://oss-fuzz.com/testcase?key=5846721227718656 Project: jsoup Fuzzing Engine: libFuzzer Fuzz Target: HtmlFuzzer Job Type: libfuzzerasanjsoup Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

checkstyle:CheckstyleFuzzer: Security exception in org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=6097271970136064 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

trafficserver:fuzz_http3frame: Heap-buffer-overflow in QUICVariableInt::size

Project: https://github.com/apache/trafficserver.git Detailed Report: https://oss-fuzz.com/testcase?key=5203966637965312 Project: trafficserver Fuzzing Engine: libFuzzer Fuzz Target: fuzzhttp3frame Job Type: libfuzzerasantrafficserver Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cra...

fluent-bit:flb-it-fuzz-flb_json_fuzzer_OSSFUZZ: Heap-buffer-overflow in msgpack2json

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4787867169652736 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-flbjsonfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow...

espeak-ng:ssml-fuzzer: Stack-buffer-overflow in TranslateLetter

Detailed Report: https://oss-fuzz.com/testcase?key=6008047111569408 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7d92b336b130 Crash State: TranslateLetter...

threetenbp:ThreetenbpFuzzer: Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse

Project: https://github.com/ThreeTen/threetenbp.git Detailed Report: https://oss-fuzz.com/testcase?key=6418466804400128 Project: threetenbp Fuzzing Engine: libFuzzer Fuzz Target: ThreetenbpFuzzer Job Type: libfuzzerasanthreetenbp Platform Id: linux Crash Type: Security exception Crash Address:...

htslib:hts_open_fuzzer: Negative-size-param in vcf_parse_format

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6224153222905856 Project: htslib Fuzzing Engine: honggfuzz Fuzz Target: htsopenfuzzer Job Type: honggfuzzasanhtslib Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

qt:qtbase_gui_text_qtextdocument_setmarkdown: Heap-buffer-overflow in QUtf8::convertFromUnicode

Detailed Report: https://oss-fuzz.com/testcase?key=5182328190074880 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguitextqtextdocumentsetmarkdown Job Type: libfuzzerasanqt Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6040000009b2 Crash State:...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5369419582734336 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

threetenbp:ThreetenbpFuzzer: Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse

Project: https://github.com/ThreeTen/threetenbp.git Detailed Report: https://oss-fuzz.com/testcase?key=5072165164613632 Project: threetenbp Fuzzing Engine: libFuzzer Fuzz Target: ThreetenbpFuzzer Job Type: libfuzzerasanthreetenbp Platform Id: linux Crash Type: Security exception Crash Address:...