OSV-2022-572 Heap-buffer-overflow in dhcp_reply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49002 Crash type: Heap-buffer-overflow READ 1 Crash state: dhcpreply dhcppacket FuzzDhcp...

OSV-2022-563 Use-of-uninitialized-value in LZ4HC_compress_generic_noDictCtx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48910 Crash type: Use-of-uninitialized-value Crash state: LZ4HCcompressgenericnoDictCtx LZ4compressHCextStateHCfastReset LZ4FcompressBlockHC...

OSV-2022-562 UNKNOWN WRITE in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48904 Crash type: UNKNOWN WRITE Crash state: udiv mrbbintmod intmod...

OSV-2022-557 Heap-buffer-overflow in emit_goto

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48924 Crash type: Heap-buffer-overflow READ 4 Crash state: emitgoto jsparseforinof jsparsestatementordecl...

OSV-2022-556 UNKNOWN READ in mrb_bint_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48877 Crash type: UNKNOWN READ Crash state: mrbbintcmp cmpnum numgt...

OSV-2022-550 Heap-use-after-free in mrb_bint_new_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48873 Crash type: Heap-use-after-free READ 1 Crash state: mrbbintnewstr mrbvmexec mrbvmrun...

OSV-2022-538 Memcpy-param-overlap in FT_Stream_TryRead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48749 Crash type: Memcpy-param-overlap Crash state: FTStreamTryRead bdfloadfont BDFFaceInit...

OSV-2022-534 Heap-buffer-overflow in json_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48736 Crash type: Heap-buffer-overflow READ 1 Crash state: jsonparse fileisjson filebuffer...

OSV-2022-533 Check failed in CheckUnwind

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48629 Crash type: Check failed Crash state: CheckUnwind vp9loopfilterdealloc vp9decoderremove...

OSV-2022-532 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48658 Crash type: Null-dereference READ Crash state: NULL...

OSV-2022-531 Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48684 Crash type: Heap-buffer-overflow WRITE 4 Crash state: perfetto::traceprocessor::TrackEventParser::ParseTrackDescriptor perfetto::traceprocessor::TrackEventModule::ParsePacket...

OSV-2022-530 Heap-buffer-overflow in string_decoder_getc_utf_8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48589 Crash type: Heap-buffer-overflow READ 1 Crash state: stringdecodergetcutf8 textdecodergetc ReadClause...

OSV-2022-522 Heap-buffer-overflow in Interp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48526 Crash type: Heap-buffer-overflow READ 4 Crash state: Interp InsIUP RunIns...

OSV-2022-519 Stack-buffer-overflow in LookupThousands

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48470 Crash type: Stack-buffer-overflow WRITE Crash state: LookupThousands LookupNum3 TranslateNumber...

OSV-2022-515 Uncaught exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48408 Crash type: Uncaught exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.TreeMap.compare java.base/java.util.TreeMap.addEntryToEmptyMap...

OSV-2022-514 Heap-use-after-free in AK::HashTable<AK::StringView, AK::Traits<AK::StringView>, false>::try_lookup_for

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48405 Crash type: Heap-use-after-free READ 2 Crash state: AK::HashTable, false::trylookupfor JS::Parser::isprivateidentifiervalid JS::Parser::parseprimaryexpression...

OSV-2022-511 UNKNOWN READ in zfp_getcell

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48372 Crash type: UNKNOWN READ Crash state: zfpgetcell bloscd bloscgetitem...

OSV-2022-510 Heap-buffer-overflow in read_blob_signed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48329 Crash type: Heap-buffer-overflow READ 4 Crash state: readblobsigned parsesignaturetype parsesignaturetype...

OSV-2022-508 Heap-buffer-overflow in coap_split_uri_sub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48362 Crash type: Heap-buffer-overflow READ 1 Crash state: coapspliturisub coapgeturipath...

OSV-2022-507 Heap-use-after-free in psi_device_ref_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48305 Crash type: Heap-use-after-free READ 8 Crash state: psidevicereffinalize gsgcreclaim ireclaim...