OSV-2022-835 Use-of-uninitialized-value in json_buildv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50949 Crash type: Use-of-uninitialized-value Crash state: jsonbuildv jsonbuild showbootentries...

OSV-2022-828 UNKNOWN READ in stream_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50898 Crash type: UNKNOWN READ Crash state: streamfinalize ifreeobject coswritestreamalloc...

OSV-2022-821 Heap-buffer-overflow in ttfOutliner__BuildGlyphOutlineAux

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50847 Crash type: Heap-buffer-overflow READ 4 Crash state: ttfOutlinerBuildGlyphOutlineAux ttfOutlinerOutline gxttfoutline...

OSV-2022-819 Use-of-uninitialized-value in init_main_qtable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50835 Crash type: Use-of-uninitialized-value Crash state: initmainqtable LibRaw::fujidecodestrip LibRaw::fujidecodeloop...

OSV-2022-818 Heap-buffer-overflow in Ins_NPUSHW

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50834 Crash type: Heap-buffer-overflow READ 1 Crash state: InsNPUSHW RunIns InstanceReset...

OSV-2022-815 Negative-size-param in PackChunkyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50832 Crash type: Negative-size-param Crash state: PackChunkyBytes PrecalculatedXFORM cmsDoTransform...

PT-2022-37235 · Git +1 · Lcms

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a negative-size-param, as reported by OSS-Fuzz. The crash involves the functions PackChunkyBytes,...

OSV-2022-808 Use-of-uninitialized-value in _dbus_marshal_write_basic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50762 Crash type: Use-of-uninitialized-value Crash state: dbusmarshalwritebasic dbustypewriterwritebasic writebasicfield...

OSV-2022-805 Global-buffer-overflow in get_unpack_proc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50731 Crash type: Global-buffer-overflow READ 8 Crash state: getunpackproc xpsbegintypedimage defaultsubclassbegintypedimage...

OSV-2022-804 Heap-buffer-overflow in _cmsMAT3per

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50725 Crash type: Heap-buffer-overflow READ 8 Crash state: cmsMAT3per OptimizeMatrixShaper cmsOptimizePipeline...

OSV-2022-803 Segv on unknown address in gs_fapi_ft_get_scaled_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50720 Crash type: Segv on unknown address Crash state: gsfapiftgetscaledfont gsfapipreparefont gsfapipassfont...

OSV-2022-802 Heap-use-after-free in UA_Server_networkCallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50699 Crash type: Heap-use-after-free READ 4 Crash state: UAServernetworkCallback fuzzbinarymessage.cc UAmemoryManagerfree...

OSV-2022-799 Incorrect-function-pointer-type in grk::BufferedStream::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50661 Crash type: Incorrect-function-pointer-type Crash state: grk::BufferedStream::read grk::FileFormatDecompress::readboxhdr grk::FileFormatDecompress::readHeaderProcedureImpl...

OSV-2022-798 Heap-use-after-free in cmsFreeNamedColorList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50665 Crash type: Heap-use-after-free READ 8 Crash state: cmsFreeNamedColorList TypeNamedColorFree cmsCloseProfile...

OSV-2022-795 UNKNOWN READ in pcl::PLYReader::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50663 Crash type: UNKNOWN READ Crash state: pcl::PLYReader::read plyio.h...

OSV-2022-791 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50631 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal java.base/java.lang.AbstractStringBuilder.append...

OSV-2022-786 Heap-double-free in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50645 Crash type: Heap-double-free Crash state: readconfig readglob readconfig...

OSV-2022-785 Heap-buffer-overflow in resize_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50617 Crash type: Heap-buffer-overflow WRITE Crash state: resizepacket FuzzResizePacket fuzzrfc1035.c...

OSV-2022-784 Segv on unknown address in FreeCodePages

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50593 Crash type: Segv on unknown address Crash state: FreeCodePages m3FreeEnvironment fuzzer.c...

OSV-2022-782 Security exception in java.base/java.lang.StringBuffer.append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50600 Crash type: Security exception Crash state: java.base/java.lang.StringBuffer.append org.apache.commons.jxpath.ri.compiler.CoreFunction.toString java.base/java.lang.String.valueOf...