CVE-2022-0618

CVE-2022-0618 affects the swift-nio-http2 project. A logical error in parsing HTTP/2 HEADERS and PUSH_PROMISE frames containing only padding information can cause a parsing failure, crashing the process and harming availability. The issue affects swift-nio-http2 versions 1.0.0 through 1.19.2 and ...

CVE-2022-0618

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS or HTTP/2 PUSHPROMISE frame where the frame contains padding information...

OSV-2022-229 UNKNOWN READ in spgetcc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45347 Crash type: UNKNOWN READ Crash state: spgetcc pdfireadbyte pdfireadtoken...

OSV-2022-226 Heap-buffer-overflow in vips_rect_intersectrect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45353 Crash type: Heap-buffer-overflow READ 4 Crash state: vipsrectintersectrect vipsforeignloadpdfgenerate vipsregionpreparetogenerate...

OSV-2022-223 Container-overflow in Exiv2::Photoshop::locateIrb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45302 Crash type: Container-overflow READ 4 Crash state: Exiv2::Photoshop::locateIrb Exiv2::Photoshop::setIptcIrb Exiv2::JpegBase::doWriteMetadata...

OSV-2022-222 Heap-use-after-free in cb_stdout_flush

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45251 Crash type: Heap-use-after-free READ Crash state: cbstdoutflush outputprecbflush flb-it-fuzz-filterstdoutfuzzerOSSFUZZ...

OSV-2022-220 Stack-buffer-overflow in load_regex_matcher

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45247 Crash type: Stack-buffer-overflow WRITE 1 Crash state: loadregexmatcher cliloadpdb cliload...

OSV-2022-217 Stack-buffer-overflow in msgpack_sbuffer_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45208 Crash type: Stack-buffer-overflow READ Crash state: msgpacksbufferwrite flbpackmsgpacktojsonformat flbjsonfuzzer.c...

OSV-2022-216 Null-dereference READ in cl_finish_hash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45197 Crash type: Null-dereference READ Crash state: clfinishhash hashimptbl scanpeimp...

OSV-2022-214 Heap-buffer-overflow in cli_bcomp_freemeta

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45194 Crash type: Heap-buffer-overflow READ 8 Crash state: clibcompfreemeta clibcompaddpatt readdbparseldbsubsignature...

OSV-2022-210 UNKNOWN READ in pdfi_count_cff_index

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45173 Crash type: UNKNOWN READ Crash state: pdficountcffindex pdfireadcfffont pdfiloadfont...

OSV-2022-209 Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45161 Crash type: Heap-buffer-overflow READ 4 Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...

OSV-2022-206 Heap-buffer-overflow in spgetcc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45049 Crash type: Heap-buffer-overflow READ Crash state: spgetcc gsscantoken gsinterpret...

OSV-2022-199 Stack-buffer-overflow in check_user_password_preR5

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44983 Crash type: Stack-buffer-overflow READ Crash state: checkuserpasswordpreR5 pdfiinitialiseDecryption pdfisetinputstream...

OSV-2022-197 Heap-buffer-overflow in doemit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44978 Crash type: Heap-buffer-overflow WRITE 8 Crash state: doemit doinsert pere...

OSV-2022-193 UNKNOWN READ in GC_generic_malloc_many

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44961 Crash type: UNKNOWN READ Crash state: GCgenericmallocmany GCmallockind Strnewsize...

OSV-2022-191 Heap-buffer-overflow in ndpi_handle_ipv6_extension_headers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44942 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpihandleipv6extensionheaders ndpiworkflowprocesspacket fuzzndpireader.c...

OSV-2022-188 Incorrect-function-pointer-type in cv::split

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44937 Crash type: Incorrect-function-pointer-type Crash state: cv::split cv::split TestSplitAndMerge...

OSV-2022-185 Heap-use-after-free in Segment::write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44951 Crash type: Heap-use-after-free READ 1 Crash state: Segment::write Doublewrite::writepages Doublewrite::flushtodisk...

OSV-2022-183 Heap-buffer-overflow in evax_bfd_print_dst

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44864 Crash type: Heap-buffer-overflow READ 1 Crash state: evaxbfdprintdst evaxbfdprintimage vmsbfdprintprivatebfddata...