Fuzzing beyond memory corruption: Finding broader classes of vulnerabilities automatically

Posted by Jonathan Metzman, Dongge Liu and Oliver Chang, Google Open Source Security Team

Recently, OSS-Fuzz—our community fuzzing service that regularly checks 700 critical open source projects for bugs—detected a serious vulnerability (CVE-2022-3008): a bug in the TinyGLTF project that could have allowed attackers to execute malicious code in projects using TinyGLTF as a dependency.

The bug was soon patched, but the wider significance remains: OSS-Fuzz caught a trivially exploitable command injection vulnerability. This discovery shows that fuzzing …

beyond fuzzing memory memory corruption vulnerabilities