FUZZING TROPHIES
The following list shows fuzzing vulnerabilities and bugs found inside customer projects and open source software. Targeted projects are mainly written in Rust, Golang, C/C++ and JavaScript.
WebAssembly VM/Libraries/Tools
These bugs were found while fuzzing customers projects and during development of WARF (WebAssembly Runtimes Fuzzing project)
- [Rust] wasmer – 22 issues
- [Rust] cranelift – 2 issues
- [Rust] wasmparser – 3 issues
- [Rust] wasmtime – 17 issues
- [Rust] wain – 4 issues
- [Rust] lucet – 2 issues
- [C/C++] wasm-micro-runtime – 38 issues
- [C/C++] radare2 – 3 issues
- [C/C++] wabt – 9 issues
- [C/C++] binaryen – 1 issue
- [C/C++] wasm3 – 8 issues
- [JS] webassemblyjs – 1 issue
Other Softwares
These bugs were found while fuzzing softwares in free time or while doing bug bounty.