353 matches found
OSV-2025-177 Segv on unknown address in chunk_free_object
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=399388655 Crash type: Segv on unknown address Crash state: chunkfreeobject pdfifreedict pdfifreefontcff...
CVE-2024-58013 Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmtremoveadvmonitorsync This fixes the following crash: ================================================================== BUG: KASAN: slab-use-after-free in...
UBUNTU-CVE-2022-49497
In the Linux kernel, the following vulnerability has been resolved: net: remove two BUG from skbchecksumhelp I have a syzbot report that managed to get a crash in skbchecksumhelp If syzbot can trigger these BUG, it makes sense to replace them with more friendly WARNONONCE since skbchecksumhelp ca...
OSV-2025-154 UNKNOWN READ in ndpi_strdup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398060128 Crash type: UNKNOWN READ Crash state: ndpistrdup processndpicollectedinfo nodecleanupwalker...
OSV-2025-149 UNKNOWN READ in processClientServerHello
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398049414 Crash type: UNKNOWN READ Crash state: processClientServerHello processTLSBlock ndpisearchtlsudp...
OSV-2025-147 UNKNOWN WRITE in ndpi_free_flow_data
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=397731142 Crash type: UNKNOWN WRITE Crash state: ndpifreeflowdata ndpiflowfree processndpicollectedinfo...
OSV-2025-131 Heap-buffer-overflow in vips_foreign_save_heif_write_block
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396460413 Crash type: Heap-buffer-overflow WRITE Crash state: vipsforeignsaveheifwriteblock wbufferwritethread vipsthreadsetwork...
OSV-2025-124 Use-of-uninitialized-value in get_word
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396172336 Crash type: Use-of-uninitialized-value Crash state: getword unpacksamples unpacksamplesworkerthread...
OSV-2025-111 Stack-buffer-overflow in absl::debugging_internal::ParseLocalNameSuffix
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=395959258 Crash type: Stack-buffer-overflow WRITE 1 Crash state: absl::debugginginternal::ParseLocalNameSuffix absl::debugginginternal::ParseName absl::debugginginternal::ParseClassEnumType...
OSV-2025-105 Heap-use-after-free in unpack_dsd_samples
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=395207094 Crash type: Heap-use-after-free READ 1 Crash state: unpackdsdsamples unpacksamplesworkerthread unpacksamplesworkerthread...
OSV-2025-68 UNKNOWN READ in std::__1::__function::__func<cv::PngDecoder::compose_frame
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=392318892 Crash type: UNKNOWN READ Crash state: std::1::function::funccv::PngDecoder::composeframe cv::ParallelLoopBodyWrapper::operator cv::ThreadPool::run...
OSV-2025-62 UNKNOWN READ in RDKit::Dict::reset
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391962480 Crash type: UNKNOWN READ Crash state: RDKit::Dict::reset RDKit::Atom::Atom RDKit::QueryAtom::QueryAtom...
OSV-2025-61 Heap-buffer-overflow in oatpp::json::Utils::escapeString
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391916478 Crash type: Heap-buffer-overflow WRITE 1 Crash state: oatpp::json::Utils::escapeString oatpp::json::Serializer::serializeString oatpp::json::Serializer::serializePairs...
OSV-2025-52 Use-of-uninitialized-value in icalmemory_strdup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=390646669 Crash type: Use-of-uninitialized-value Crash state: icalmemorystrdup icaltimezoneinitbuiltintimezones icaltimezonegetutctimezone...
OSV-2025-17 Heap-buffer-overflow in cv::PngDecoder::readHeader
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=387626408 Crash type: Heap-buffer-overflow READ 2 Crash state: cv::PngDecoder::readHeader cv::imdecode cv::imdecode...
OSV-2025-7 Heap-buffer-overflow in oatpp::json::Utils::escapeUtf8Char
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=387626404 Crash type: Heap-buffer-overflow WRITE 1 Crash state: oatpp::json::Utils::escapeUtf8Char oatpp::json::Utils::escapeString oatpp::json::Serializer::serializeString...
PT-2024-40625 · Git +1 · Clamav
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash state includes functions such as yara yyparse, yr lex...
OSV-2022-1288 Stack-buffer-overflow in bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376787368 Crash type: Stack-buffer-overflow READ 1 Crash state: bool SmilesParseOps::parser::parseatomprops bool SmilesParseOps::parser::parseit SmilesParseOps::parseCXExtensions...
OSV-2024-1254 Security exception in org.apache.lucene.util.ArrayUtil.growExact
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376504918 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.growExact org.apache.lucene.util.ArrayUtil.grow org.apache.lucene.util.BytesRefBuilder.grow...