Replying to this email means your email address will be shared with the
team that works on this product.
https://issues.oss-fuzz.com/issues/442161254

Reference Info: 442161254 elfutils:fuzz-libdwfl: Crash in load_shdr_wrlock
component:  Public Trackers > 1362134 > OSS Fuzz
status:  New
reporter:  [email protected]
cc:  [email protected], [email protected], [email protected],
and 1 more
collaborators:  [email protected]
type:  Vulnerability
access level:  Default access
priority:  P2
severity:  S2
hotlist:  Reproducible, Stability-UndefinedBehaviorSanitizer
retention:  Component default
Project:  elfutils
Reported:  Aug 31, 2025

[email protected] added comment #1:
Detailed Report: https://oss-fuzz.com/testcase?key=5773761388544000

Project: elfutils
Fuzzing Engine: libFuzzer
Fuzz Target: fuzz-libdwfl
Job Type: libfuzzer_ubsan_elfutils
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x7e8ec315b9b4
Crash State:
  load_shdr_wrlock
  gelf_getshdr
  scn_dwarf_type

Sanitizer: undefined (UBSAN)

Recommended Security Severity: Medium

Regressed:
https://oss-fuzz.com/revisions?job=libfuzzer_ubsan_elfutils&range=202508201802:202508210000

Reproducer Testcase:
https://oss-fuzz.com/download?testcase_id=5773761388544000

Issue filed automatically.

See https://google.github.io/oss-fuzz/advanced-topics/reproducing for
instructions to reproduce this bug locally.
When you fix this bug, please
  * mention the fix revision(s).
  * state whether the bug was a short-lived regression or an old bug in any
stable releases.
  * add any other useful information.
This information can help downstream consumers.

If you need to contact the OSS-Fuzz team with a question, concern, or any
other feedback, please file an issue at
https://github.com/google/oss-fuzz/issues. Comments on individual Monorail
issues are not monitored.


Generated by Google IssueTracker notification system.

Reply via email to