OSV-2022-647 Heap-use-after-free in cmsFreeNamedColorList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49546 Crash type: Heap-use-after-free READ 4 Crash state: cmsFreeNamedColorList TypeNamedColorFree cmsCloseProfile...

OSV-2022-644 Global-buffer-overflow in decode_CABAC_bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49538 Crash type: Global-buffer-overflow READ 1 Crash state: decodeCABACbit readcodingunit readcodingquadtree...

OSV-2022-643 Heap-use-after-free in gs_tifsSeekProc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49528 Crash type: Heap-use-after-free READ 8 Crash state: gstifsSeekProc TIFFWriteDirectorySec TIFFRewriteDirectory...

OSV-2022-642 Segv on unknown address in cmsNamedColorInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49501 Crash type: Segv on unknown address Crash state: cmsNamedColorInfo TypeNamedColorWrite SaveTags...

OSV-2022-640 Stack-use-after-return in rc_free_text_enum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49530 Crash type: Stack-use-after-return READ 8 Crash state: rcfreetextenum gstextrelease pdftextrelease...

OSV-2022-639 Heap-buffer-overflow in _cmsWriteXYZNumber

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49505 Crash type: Heap-buffer-overflow READ 8 Crash state: cmsWriteXYZNumber TypeViewingConditionsWrite SaveTags...

OSV-2022-638 Use-of-uninitialized-value in ComputeConversion

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49495 Crash type: Use-of-uninitialized-value Crash state: ComputeConversion DefaultICCintents cmsLinkProfiles...

OSV-2022-636 UNKNOWN READ in fp_cmp_mag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49510 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...

OSV-2022-632 Segv on unknown address in mrb_bint_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49470 Crash type: Segv on unknown address Crash state: mrbbintcmp inteql mrbfuncallwithblock...

OSV-2022-628 Segv on unknown address in mpz_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49453 Crash type: Segv on unknown address Crash state: mpzadd mpzsub mrbbintsub...

OSV-2022-627 Heap-buffer-overflow in cmsMLUgetASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49475 Crash type: Heap-buffer-overflow READ 2 Crash state: cmsMLUgetASCII WriteCountAndString TypeCrdInfoWrite...

OSV-2022-626 Heap-buffer-overflow in Write16bitTables

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49461 Crash type: Heap-buffer-overflow READ 2 Crash state: Write16bitTables TypeLUT16Write SaveTags...

OSV-2022-624 Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49422 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5Parser::ParseHeader Assimp::MD5::MD5Parser::MD5Parser Assimp::MD5Importer::LoadMD5MeshFile...

OSV-2022-622 Segv on unknown address in urshift

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49429 Crash type: Segv on unknown address Crash state: urshift mpzdiv2exp mrbbintrshift...

OSV-2022-621 Segv on unknown address in mpz_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49427 Crash type: Segv on unknown address Crash state: mpzadd mrbbintadd intadd...

OSV-2022-619 Heap-buffer-overflow in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49425 Crash type: Heap-buffer-overflow READ 4 Crash state: udiv mrbbintmod intmod...

OSV-2022-618 Heap-buffer-overflow in Type_MLU_Write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49433 Crash type: Heap-buffer-overflow READ 4 Crash state: TypeMLUWrite SaveTags cmsSaveProfileToIOhandler...

OSV-2022-616 Timeout in JsonFuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49401 Crash type: Timeout Crash state: JsonFuzzer...

OSV-2022-614 UNKNOWN READ in std::__1::basic_filebuf<char, std::__1::char_traits<char> >::underflow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49381 Crash type: UNKNOWN READ Crash state: std::1::basicfilebuf ::underflow std::1::basicstreambuf ::uflow std::1::basicstreambuf ::xsgetn...

OSV-2022-613 UNKNOWN READ in OT::avar::map_coords

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49407 Crash type: UNKNOWN READ Crash state: OT::avar::mapcoords hbotvarnormalizevariations test-ot-face.c...