OSV-2023-38 Heap-use-after-free in zend_generator_dtor_storage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55519 Crash type: Heap-use-after-free WRITE 4 Crash state: zendgeneratordtorstorage zendobjectsstorecalldestructors shutdowndestructors...

OSV-2022-1267 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55390 Crash type: Memcpy-param-overlap Crash state: repeat pere pere...

PT-2023-35517 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Memcpy-param-overlap, according to an OSS-Fuzz report. The crash state includes repeat and p ere, but ...

OSV-2023-31 Heap-use-after-free in zip_source_open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55365 Crash type: Heap-use-after-free READ 1 Crash state: zipsourceopen zipsourceopen zipopen...

OSV-2023-27 Heap-buffer-overflow in OT::Layout::GPOS_impl::PairSet<OT::Layout::MediumTypes>::apply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55287 Crash type: Heap-buffer-overflow READ 1 Crash state: OT::Layout::GPOSimpl::PairSet::apply OT::Layout::GPOSimpl::PairPosFormat13::apply bool OT::hbacceleratesubtablescontextt::applytoOT::Layout::GPOSimpl::Pair...

OSV-2023-25 Heap-buffer-overflow in blkid_uuid_is_empty

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55318 Crash type: Heap-buffer-overflow READ 1 Crash state: blkiduuidisempty blkidprobesetuuidas probebcachefs...

OSV-2023-19 Heap-buffer-overflow in ndpi_search_bittorrent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55218 Crash type: Heap-buffer-overflow READ Crash state: ndpisearchbittorrent checkndpidetectionfunc ndpicheckflowfunc...

OSV-2023-16 Heap-buffer-overflow in wc_AesFeedbackEncrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55174 Crash type: Heap-buffer-overflow WRITE 1 Crash state: wcAesFeedbackEncrypt wcAesOfbEncrypt evpCipherBlock...

OSV-2023-14 Stack-buffer-overflow in AffixMgr::compound_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55191 Crash type: Stack-buffer-overflow READ 1 Crash state: AffixMgr::compoundcheck SuggestMgr::checkword SuggestMgr::testsug...

OSV-2023-13 Heap-buffer-overflow in wc_AesCbcEncrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55161 Crash type: Heap-buffer-overflow WRITE 16 Crash state: wcAesCbcEncrypt evpCipherBlock wolfSSLEVPCipherUpdate...

OSV-2023-11 Heap-buffer-overflow in node_from_openstep

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55146 Crash type: Heap-buffer-overflow READ 1 Crash state: nodefromopenstep nodefromopenstep plistfromopenstep...

OSV-2023-6 Heap-buffer-overflow in parse_skip_ws

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55035 Crash type: Heap-buffer-overflow READ 1 Crash state: parseskipws nodefromopenstep parsedictdata...

XStream can cause a Denial of Service by injecting deeply nested objects raising a stack overflow

Impact The vulnerability may allow a remote attacker to terminate the application with a stack overflow error resulting in a denial of service only by manipulating the processed input stream. Patches XStream 1.4.20 handles the stack overflow and raises an InputManipulationException instead...

OSV-2022-1265 Heap-buffer-overflow in BITLK_read_sb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54548 Crash type: Heap-buffer-overflow READ Crash state: BITLKreadsb cryptloadbitlk cryptload...

OSV-2022-1263 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54424 Crash type: Null-dereference READ Crash state: NULL...

OSV-2022-1262 Heap-use-after-free in HEIFHandler::ensureDecoder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54246 Crash type: Heap-use-after-free READ 3 Crash state: HEIFHandler::ensureDecoder HEIFHandler::read kimgiofuzzer.cc...

OSV-2022-1261 UNKNOWN WRITE in void std::__1::allocator_traits<std::__1::allocator<wabt::interp::HandlerDesc> >

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54245 Crash type: UNKNOWN WRITE Crash state: void std::1::allocatortraits void std::1::vectorwabt::interp::HandlerDesc, std::1::allocatorwabt::inter std::1::vectorwabt::interp::HandlerDesc, std::1::allocatorwabt::interp::Ha...

OSV-2022-1259 Heap-buffer-overflow in dwg_decode_INSERT_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228 Crash type: Heap-buffer-overflow READ 1 Crash state: dwgdecodeINSERTprivate dwgdecodeINSERT dwgdecodeaddobject...

OSV-2022-1258 Heap-buffer-overflow in Assimp::ObjFileImporter::createVertexArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54187 Crash type: Heap-buffer-overflow WRITE 12 Crash state: Assimp::ObjFileImporter::createVertexArray Assimp::ObjFileImporter::createTopology Assimp::ObjFileImporter::createNodes...

OSV-2022-1252 Heap-buffer-overflow in bit_read_BB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54163 Crash type: Heap-buffer-overflow READ 1 Crash state: bitreadBB bitreadBD dwgdecodeheadervariables...