OSV-2022-931 Heap-buffer-overflow in file_magwarn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51674 Crash type: Heap-buffer-overflow READ Crash state: filemagwarn load1 apprenticeload...

OSV-2022-915 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51552 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.io.StringReader.read com.ctc.wstx.io.MergedReader.read...

OSV-2022-914 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51492 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.metamodel.BaseNodeMetaModel.getDeclaredPropertyMetaModels...

OSV-2022-908 Heap-buffer-overflow in element_end

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51480 Crash type: Heap-buffer-overflow READ 4 Crash state: elementend emitendelement gmarkupparsecontextparse...

OSV-2022-882 Use-of-uninitialized-value in SfxEntry::test_condition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51218 Crash type: Use-of-uninitialized-value Crash state: SfxEntry::testcondition SfxEntry::add AffixMgr::expandrootword...

OSV-2022-865 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51101 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.lang.StringUTF16.newString java.base/java.lang.String.substring...

OSV-2022-835 Use-of-uninitialized-value in json_buildv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50949 Crash type: Use-of-uninitialized-value Crash state: jsonbuildv jsonbuild showbootentries...

OSV-2022-819 Use-of-uninitialized-value in init_main_qtable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50835 Crash type: Use-of-uninitialized-value Crash state: initmainqtable LibRaw::fujidecodestrip LibRaw::fujidecodeloop...

OSV-2022-799 Incorrect-function-pointer-type in grk::BufferedStream::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50661 Crash type: Incorrect-function-pointer-type Crash state: grk::BufferedStream::read grk::FileFormatDecompress::readboxhdr grk::FileFormatDecompress::readHeaderProcedureImpl...

OSV-2022-795 UNKNOWN READ in pcl::PLYReader::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50663 Crash type: UNKNOWN READ Crash state: pcl::PLYReader::read plyio.h...

OSV-2022-786 Heap-double-free in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50645 Crash type: Heap-double-free Crash state: readconfig readglob readconfig...

OSV-2022-782 Security exception in java.base/java.lang.StringBuffer.append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50600 Crash type: Security exception Crash state: java.base/java.lang.StringBuffer.append org.apache.commons.jxpath.ri.compiler.CoreFunction.toString java.base/java.lang.String.valueOf...

OSV-2022-781 Segv on unknown address in wasmtime_runtime::traphandlers::catch_traps::call_closure::hec711b3339636b04

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50596 Crash type: Segv on unknown address Crash state: wasmtimeruntime::traphandlers::catchtraps::callclosure::hec711b3339636b04 wasmtimesetjmp wasmtime::linker::Linker$LT$T$GT$::instantiate::h7e42baf4a320e0da...

OSV-2022-780 Index-out-of-bounds in is_same_net6

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50599 Crash type: Index-out-of-bounds Crash state: issamenet6 dhcp6mayberelay dhcp6mayberelay...

OSV-2022-763 Heap-buffer-overflow in sqlite3VdbeExec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50466 Crash type: Heap-buffer-overflow READ Crash state: sqlite3VdbeExec sqlite3step osquery::readRows...

OSV-2022-759 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50428 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/sun.nio.cs.CESU8.updatePositions java.base/sun.nio.cs.CESU8$Encoder.encodeArrayLoop...

OSV-2022-757 UNKNOWN WRITE in pdfi_free_array

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50406 Crash type: UNKNOWN WRITE Crash state: pdfifreearray pdfifreeobject pdficleartomark...

OSV-2022-749 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50393 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.nio.charset.CharsetEncoder.replaceWith java.base/java.nio.charset.CharsetEncoder...

OSV-2022-715 Segv on unknown address in jpeg_read_scanlines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50217 https://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.htmldecode-jpeg-compressed-blp1-data-in-original-mode Crash type: Segv on unknown address Crash state: jpegreadscanlines ImagingJpegDecode decode...

OSV-2022-708 UNKNOWN READ in kh_resize_ucl_hash_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50120 Crash type: UNKNOWN READ Crash state: khresizeuclhashnode khputuclhashnode uclhashinsert...