OSV-2022-458 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47797 Crash type: Uncaught exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.util.HashMap.get com.ctc.wstx.dtd.FullDTDReader.findSharedName...

OSV-2022-457 Heap-buffer-overflow in CFF::Charset::collect_glyph_to_sid_map

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47790 Crash type: Heap-buffer-overflow READ 2 Crash state: CFF::Charset::collectglyphtosidmap cffsubsetplan::plansubsetcharset cffsubsetplan::create...

OSV-2022-456 Null-dereference READ in load_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47798 Crash type: Null-dereference READ Crash state: loadglyph gsfapiftgetcharrastermetrics gsfapidochar...

OSV-2022-455 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47796 Crash type: Uncaught exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.lang.String.getChars java.base/java.io.StringReader.read...

OSV-2022-453 Segv on unknown address in gx_device_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47770 Crash type: Segv on unknown address Crash state: gxdevicefinalize allocrestorestepin dorestore...

OSV-2022-451 Heap-buffer-overflow in myeid_create_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47769 Crash type: Heap-buffer-overflow WRITE Crash state: myeidcreatekey scpkcs15initstoresecretkey dostoresecretkey...

OSV-2022-450 Heap-buffer-overflow in Curl_headers_push

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47767 Crash type: Heap-buffer-overflow WRITE 5 Crash state: Curlheaderspush Curlclientwrite Curlhttpreadwriteheaders...

OSV-2022-447 Heap-buffer-overflow in ndpi_search_http_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47734 Crash type: Heap-buffer-overflow READ 11 Crash state: ndpisearchhttptcp ndpisearchhttptcpagain ndpidetectionprocesspacket...

OSV-2022-446 Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47737 Crash type: Uncaught exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression com.github.javaparser.Range.range com.github.javaparser.JavaToken...

OSV-2022-445 Stack-buffer-overflow in tlsCheckUncommonALPN

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47730 Crash type: Stack-buffer-overflow WRITE Crash state: tlsCheckUncommonALPN processClientServerHello processTLSBlock...

OSV-2022-443 Heap-buffer-overflow in ndpi_search_http_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47724 Crash type: Heap-buffer-overflow READ 12 Crash state: ndpisearchhttptcp checkndpidetectionfunc ndpicheckflowfunc...

OSV-2022-439 Stack-use-after-return in test_update

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47676 Crash type: Stack-use-after-return READ 1 Crash state: testupdate main fuzzpkcs15tool.c...

OSV-2022-437 Stack-buffer-overflow in sc_asn1_read_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47675 Crash type: Stack-buffer-overflow READ 1 Crash state: scasn1readtag scasn1findtag cardoslistfiles...

OSV-2022-436 Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47684 Crash type: Stack-buffer-overflow READ 8 Crash state: spvtools::opt::CompositeInsertToCompositeConstruct std::1::function::funcbool spvtools::opt::InstructionFolder::FoldInstructionInternal...

OSV-2021-1815 Global-buffer-overflow in xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47626 Crash type: Global-buffer-overflow READ 1 Crash state: xstrdup scanopenobjfile scanobjfile...

OPENSUSE-SU-2022:0155-1 Security update for libredwg

This update for libredwg fixes the following issues: Update to release 0.12.5 boo1193372 CVE-2021-28237 Restricted accepted DXF objects to all stable and unstable classes, minus MATERIAL, ARCDIMENSION, SUN, PROXY. I.e. most unstable objects do not allow unknown DXF codes anymore. This fixed most...

Security update for libredwg (moderate)

SUSE Security Update: Security update for libredwg Announcement ID: openSUSE-SU-2022:0149-1 Rating: moderate References: 1193372 1194767 Cross-References: CVE-2021-28237 CVE-2022-21658 CVSS scores: CVE-2022-21658 NVD : 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H CVE-2022-21658 SUSE: 6.2...

OSV-2022-432 Stack-use-after-return in conversation_match_element_list

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47624 Crash type: Stack-use-after-return READ 4 Crash state: conversationmatchelementlist wmemmaplookup findconversationbyid...

OSV-2022-431 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47616 Crash type: Uncaught exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/jdk.internal.org.objectweb.asm.SymbolTable$Entry. java.base/jdk.internal.org.objectweb.asm.SymbolTable.addConstantUtf8...

OSV-2022-430 UNKNOWN READ in fp_cmp_mag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47586 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...