Hi!
We were doing some fuzzing using libFuzzer and symbolic execution tool Sydr for fuzz targets from this PR. And we found an interesting issue. Loop at wav_io.cc:233 could be endless under certai...

Hi! I've been fuzzing your project and found heap-buffer-overflow in find_name. In loop in line 1457 of cairo-truetype-subset.c when i = 422 record has 0x6220000014ce address,...

Hi! I've been fuzzing your project and found integer overflow in readPatternDictSeg. In the line 2505 of JBIG2Stream.cc you use (grayMax + 1) * patternW as second arg...

Hi! I've been fuzzing your project and found heap-buffer-overflow in poppler_page_find_text_with_options. In line 858 of poppler-page.cc you use text as first arg of...

While calling pam_start and using some invalid paths in the configuration file included using include/substack, a pointer of a high value address is dereferenced. Steps to reproduce /etc/pam.d/cras...

System information (version) OpenCV version => a42b355 (4.x) Operating System => Ubuntu 20.04 Compiler => clang-14 Detailed denoscription Hi! We've been fuzzing your proj...

Hi! We were doing some fuzzing using AFLplusplus with symbolic execution tool Sydr and found an interesting issue. Here is the ASAN report: AddressSanitizer:DEADLYSIGNAL ===========================...

DO NOT SQUASH
Your checklist for this pull request

I've read the guidelines for contributing to this repository
I made sure to follow the project's coding style
I've documented or u...

Hello, I was fuzzing this project with sydr-fuzz and found SIGSEGV in vision::image::decode_png. It appears when I run target on a slightly corrupted PNG file. The problem occurs in the reader stru...

Fix for #165.

Fix for #331

Our tool Sydr found an overflow. Here is the input:
crash-sydr_1d821e2a398a547fe1aa4a445c8f31d2c51761d6_int_overflow_1_unsigned.txt

Hi! We've been fuzzing https://github.com/nodejs/node and found stack buffer overflow error in icu in icu4c/source/common/uresbund.cpp. More detailed denoscription of error and how to reprod...

Hello there! I found hang during fuzz testing with sydr-fuzz. I suppose, that integer overflow in protocols/dns.c:507:4 leads to infinite loop. nDPI Environment You can use the ready-made environme...