llvm: Heap-buffer-overflow in llvm::StringMapImpl::FindKey

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5653990445416448 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

gdal: Crash in CADHandle::CADHandle

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5237823683690496 Project: gdal Fuzzer: libFuzzergdalcadfuzzer Fuzz target binary: cadfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00000000e88e Crash...

ffmpeg: Memcpy-param-overlap in xan_wc3_copy_pixel_run

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6393461273001984 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDXANWC3fuzzer Fuzz target binary: ffmpegAVCODECIDXANWC3fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

open62541: Negative-size-param in UA_SecureChannel_processChunk

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5797976103452672 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type:...

libpng: Heap-buffer-overflow in OSS_FUZZ_png_combine_row

Project: https://github.com/glennrp/libpng.git Detailed report: https://oss-fuzz.com/testcase?key=5466114885681152 Project: libpng Fuzzer: libFuzzerlibpngreadfuzzer Fuzz target binary: libpngreadfuzzer Job Type: libfuzzerasanlibpng Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

libpng: Heap-buffer-overflow in OSS_FUZZ_png_combine_row

Detailed report: https://oss-fuzz.com/testcase?key=4838858534420480 Project: libpng Fuzzer: afllibpngreadfuzzer Fuzz target binary: libpngreadfuzzer Job Type: aflasanlibpng Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x608000000080 Crash State: OSSFUZZpngcombinerow...

open62541: Stack-use-after-return in UA_Subscription_answerPublishRequestsNoSubscription

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5994055084277760 Project: open62541 Fuzzer: aflopen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Stack-use-after-return...

curl: Heap-buffer-overflow in Curl_client_write

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5836302881652736 Project: curl Fuzzer: libFuzzercurlfuzzer Fuzz target binary: curlfuzzer Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60c000000173...

gdal: Heap-double-free in Selafin::Header::~Header

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5292629949415424 Project: gdal Fuzzer: libFuzzergdalmitabtabfuzzer Fuzz target binary: mitabtabfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-double-free Crash Address:...

proj4: Heap-use-after-free in pj_projection_specific_setup_geos

Detailed report: https://oss-fuzz.com/testcase?key=4742466918940672 Project: proj4 Fuzzer: libFuzzerproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: libfuzzerasanproj4 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6170000001c8 Crash State:...

wpantund: Global-buffer-overflow in nlpt_select_update_fd_set

Detailed report: https://oss-fuzz.com/testcase?key=5512201428271104 Project: wpantund Fuzzer: libFuzzerwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: libfuzzerasanwpantund Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000001809b60 Crash State:...

dlplibs: Global-buffer-overflow in QuattroSpreadsheet::readFormula

Detailed report: https://oss-fuzz.com/testcase?key=6450112764051456 Project: dlplibs Fuzzer: libFuzzerdlplibswqfuzzer Fuzz target binary: wqfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000e20e88 Crash State:...

librawspeed: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4964831197134848 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-NefDecoder Fuzz target binary: TiffDecoderFuzzer-NefDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

harfbuzz: Use-of-uninitialized-value in hb_buffer_t::set_cluster

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5617496443846656 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

harfbuzz: Use-of-uninitialized-value in hb_buffer_t::merge_out_clusters

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=6424351550210048 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

Bad-cast to boost::detail::sp_counted_base from invalid vptr;boost::detail::shared_count::~shared_count;boost::match_results<std::__1::__wrap_iter<char const*>, std::__1::allocator<boost::sub_match<std::__1::__wrap_iter<char const*> > > >::~match_results

Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=6313446367821824 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerubsanboost Platform Id: linux Crash Type: Bad-cast Crash Address:...

llvm: Heap-buffer-overflow in llvm::DataExtractor::getCStr

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6309856848904192 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

librawspeed: Heap-buffer-overflow in rawspeed::NikonDecompressor::createCurve

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6484242584305664 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-NefDecoder Fuzz target binary: TiffDecoderFuzzer-NefDecoder Job Type: libfuzzerasanlibrawspeed Platform Id:...

wireshark: Global-buffer-overflow in dissect_gtpv2_ie_common

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5241250057814016 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type:...

boost: Heap-buffer-overflow in boost::detail::shared_count::~shared_count

Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=6641095329972224 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerasanboost Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

libreoffice: Heap-use-after-free in SwNumRule::GetNumFormat

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4591319768891392 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

librawspeed: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6413887396118528 Project: librawspeed Fuzzer: libFuzzerlibrawspeedCiffParserFuzzer-GetDecoder-Decode Fuzz target binary: CiffParserFuzzer-GetDecoder-Decode Job Type: libfuzzermsanlibrawspeed...

librawspeed: Use-after-poison in void rawspeed::SamsungV2Decompressor::decompressRow<

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6137765290835968 Project: librawspeed Fuzzer: afllibrawspeedTiffDecoderFuzzer-SrwDecoder Fuzz target binary: TiffDecoderFuzzer-SrwDecoder Job Type: aflasanlibrawspeed Platform Id: linux Crash...

libreoffice: Heap-use-after-free in rtl::OUString::OUString

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5504242112528384 Project: libreoffice Fuzzer: libFuzzerlibreofficeww6fuzzer Fuzz target binary: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

zstd: Heap-buffer-overflow in ZSTD_storeLastLiterals

Project: https://github.com/facebook/zstd.git Detailed report: https://oss-fuzz.com/testcase?key=4855313356292096 Project: zstd Fuzzer: libFuzzerzstdblockroundtrip Fuzz target binary: blockroundtrip Job Type: libfuzzerasanzstd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Addres...

ffmpeg: Crash in gmc_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4608518562775040 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMPEG4fuzzer Job Type: libfuzzerasanffmpeg Crash Type: UNKNOWN READ Crash Address: 0x620ffffffbf8 Crash State: gmcmmx gmcmotion...

boost: Crash in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo

Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=4946144398409728 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerasanboost Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

librawspeed: Use-after-poison in void rawspeed::LJpegDecompressor::decodeN<2>

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6010819949101056 Project: librawspeed Fuzzer: afllibrawspeedFiffParserFuzzer-GetDecoder-Decode Fuzz target binary: FiffParserFuzzer-GetDecoder-Decode Job Type: aflasanlibrawspeed Platform Id:...

librawspeed: Use-after-poison in void rawspeed::SamsungV2Decompressor::decompressRow<

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5856496673882112 Project: librawspeed Fuzzer: afllibrawspeedTiffDecoderFuzzer-SrwDecoder Fuzz target binary: TiffDecoderFuzzer-SrwDecoder Job Type: aflasanlibrawspeed Platform Id: linux Crash...

librawspeed: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5848500820508672 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffParserFuzzer-GetDecoder-Decode Fuzz target binary: TiffParserFuzzer-GetDecoder-Decode Job Type: libfuzzermsanlibrawspeed...

wpantund: Heap-use-after-free in in6_addr_to_string

Project: https://github.com/openthread/wpantund.git Detailed report: https://oss-fuzz.com/testcase?key=5244068697210880 Project: wpantund Fuzzer: libFuzzerwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: libfuzzerasanwpantund Platform Id: linux Crash Type: Heap-use-after-free REA...

ffmpeg: Global-buffer-overflow in InverseQuantizeBand

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4573445423628288 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBFDKAACfuzzer Fuzz target binary: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

boost: Stack-buffer-overflow in boost::re_detail_NUMBER::perl_matcher<std::__1::__wrap_iter<char const*>, std::_

Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=6390503111131136 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerasanboost Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash...

openssl: Index-out-of-bounds in tls1_set_ec_id

Project: https://github.com/openssl/openssl.git Detailed report: https://oss-fuzz.com/testcase?key=5555118181187584 Project: openssl Fuzzer: libFuzzeropensslclient Fuzz target binary: client Job Type: libfuzzerubsanopenssl Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

librawspeed: Use-after-poison in rawspeed::NikonDecompressor::decompress

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5062035266076672 Project: librawspeed Fuzzer: afllibrawspeedTiffDecoderFuzzer-NefDecoder Fuzz target binary: TiffDecoderFuzzer-NefDecoder Job Type: aflasanlibrawspeed Platform Id: linux Crash...

gdal: Index-out-of-bounds in unpk_g2ncep

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5096432585408512 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Index-out-of-bounds Crash Address...

libreoffice: Crash in wwSprmParser::GetSprmId

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5055253344944128 Project: libreoffice Fuzzer: libFuzzerlibreofficeww2fuzzer Fuzz target binary: ww2fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash...

ffmpeg: Global-buffer-overflow in initSlotBasedRotation

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4898065225875456 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBFDKAACfuzzer Fuzz target binary: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

librawspeed: Heap-buffer-overflow in rawspeed::RawImageData::transferBadPixelsToMap

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5564224854032384 Project: librawspeed Fuzzer: afllibrawspeedTiffDecoderFuzzer-DngDecoder Fuzz target binary: TiffDecoderFuzzer-DngDecoder Job Type: aflasanlibrawspeed Platform Id: linux Crash...

dlplibs: Index-out-of-bounds in WKS4Chart::updateChart

Detailed report: https://oss-fuzz.com/testcase?key=4881481551839232 Project: dlplibs Fuzzer: libFuzzerdlplibswdbfuzzer Fuzz target binary: wdbfuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: WKS4Chart::updateChart...

librawspeed: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6414741255749632 Project: librawspeed Fuzzer: libFuzzerlibrawspeedFiffParserFuzzer-GetDecoder-Decode Fuzz target binary: FiffParserFuzzer-GetDecoder-Decode Job Type: libfuzzermsanlibrawspeed...

llvm: Heap-buffer-overflow in llvm::DataExtractor::getUnsigned

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=4760511113592832 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

libreoffice: Crash in FT_Done_Glyph

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6110726827540480 Project: libreoffice Fuzzer: libFuzzerlibreofficecgmfuzzer Fuzz target binary: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash...

openthread: Stack-buffer-overflow in ot::NetworkData::PrefixTlv::GetSubTlvs

Detailed report: https://oss-fuzz.com/testcase?key=5490815742771200 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fb823a8eb22 Crash...

libreoffice: Crash in FT_Glyph_Get_CBox

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6067912982921216 Project: libreoffice Fuzzer: libFuzzerlibreofficecgmfuzzer Fuzz target binary: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN READ Crash...

llvm: Heap-buffer-overflow in llvm::DataExtractor::getU32

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5615216987471872 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

dlplibs: Index-out-of-bounds in WKS4Chart::sendCharts

Detailed report: https://oss-fuzz.com/testcase?key=5151574194126848 Project: dlplibs Fuzzer: libFuzzerdlplibswksfuzzer Fuzz target binary: wksfuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: WKS4Chart::sendCharts WKS4Parser::par...

libreoffice: Heap-buffer-overflow in ScColumnsRange::Iterator::operator*

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5159374995587072 Project: libreoffice Fuzzer: libFuzzerlibreofficeslkfuzzer Fuzz target binary: slkfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

librawspeed: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4854170727219200 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-ThreefrDecoder Fuzz target binary: TiffDecoderFuzzer-ThreefrDecoder Job Type: libfuzzermsanlibrawspeed...

llvm: Heap-buffer-overflow in llvm::DataExtractor::getCStr

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5474306626682880 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...