OSV-2024-1346 UNKNOWN READ in glslang::HlslTokenStream::advanceToken

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382547706 Crash type: UNKNOWN READ Crash state: glslang::HlslTokenStream::advanceToken glslang::HlslGrammar::acceptLiteral glslang::HlslGrammar::acceptPostfixExpression...

OSV-2024-1336 Security exception in org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategories

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=380409697 Crash type: Security exception Crash state: org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategories UtilCheckerFuzzer.fuzzChecker UtilCheckerFuzzer.fuzzerTestOneInput...

Google's AI-Powered OSS-Fuzz Tool Finds 26 Vulnerabilities in Open-Source Projects

Google has revealed that its AI-powered fuzzing tool, OSS-Fuzz, has been used to help identify 26 vulnerabilities in various open-source code repositories, including a medium-severity flaw in the OpenSSL cryptographic library. "These particular vulnerabilities represent a milestone for automated...

OSV-2024-1332 Negative-size-param in extract_mr_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379768247 Crash type: Negative-size-param Crash state: extractmrdata parsemrstring readstatparsesav...

OSV-2024-1326 Heap-buffer-overflow in ndpi_search_mikrotik

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180960 Crash type: Heap-buffer-overflow READ 16 Crash state: ndpisearchmikrotik checkndpidetectionfunc ndpidetectionprocesspacket...

OSV-2024-1322 Security exception in com.alibaba.fastjson2.JSONReader.readObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180973 Crash type: Security exception Crash state: com.alibaba.fastjson2.JSONReader.readObject java.base/java.nio.charset.CharsetEncoder.replaceWith java.base/java.nio.charset.CharsetEncoder...

OSV-2024-1320 Heap-buffer-overflow in process_page_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379254072 Crash type: Heap-buffer-overflow READ 4 Crash state: processpage FLACoggdecoderaspectskiplink FLACstreamdecoderseekabsolute...

OSV-2024-1313 Security exception in org.apache.commons.codec.language.bm.Rule$Phoneme.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379008019 Crash type: Security exception Crash state: org.apache.commons.codec.language.bm.Rule$Phoneme. org.apache.commons.codec.language.bm.Rule$Phoneme. org.apache.commons.codec.language.bm.PhoneticEngine$PhonemeBuilder.app...

OSV-2024-1297 Heap-buffer-overflow in rijndaelSetupEncrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=377977949 Crash type: Heap-buffer-overflow READ 1 Crash state: rijndaelSetupEncrypt rijndaelSetupDecrypt AESPDFnative::AESPDFnative...

OSV-2024-1293 Use-of-uninitialized-value in k5_hashtab_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=377530685 Crash type: Use-of-uninitialized-value Crash state: k5hashtabadd insertentry fuzzkdc.c...

OSV-2024-1282 Segv on unknown address in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=368729572 Crash type: Segv on unknown address Crash state: udiv mpzmdiv mrbbintdiv...

OSV-2024-1279 Heap-buffer-overflow in opj_j2k_read_tile_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538309 Crash type: Heap-buffer-overflow WRITE 8 Crash state: opjj2kreadtileheader opjj2kdecodetiles opjj2kdecode...

OSV-2024-1274 Segv on unknown address in yara_yyparse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515523 Crash type: Segv on unknown address Crash state: yarayyparse yrlexparserulesfile cliloadyara...

OSV-2024-1272 Segv on unknown address in std::__1::ios_base::~ios_base

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371292576 Crash type: Segv on unknown address Crash state: std::1::iosbase::iosbase Poco::Net::MultipartReader::nextPart Poco::Net::MailMessage::readMultipart...

OSV-2022-1288 Stack-buffer-overflow in bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376787368 Crash type: Stack-buffer-overflow READ 1 Crash state: bool SmilesParseOps::parser::parseatomprops bool SmilesParseOps::parser::parseit SmilesParseOps::parseCXExtensions...

OSV-2024-1266 UNKNOWN READ in llama_output_reserve

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376770771 Crash type: UNKNOWN READ Crash state: llamaoutputreserve llamadecode fuzztokenizer.cpp...

OSV-2024-1254 Security exception in org.apache.lucene.util.ArrayUtil.growExact

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376504918 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.growExact org.apache.lucene.util.ArrayUtil.grow org.apache.lucene.util.BytesRefBuilder.grow...

OSV-2023-1398 Heap-buffer-overflow in load_1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515517 Crash type: Heap-buffer-overflow READ 1 Crash state: load1 apprenticeload fileapprentice...

OSV-2024-1251 UNKNOWN WRITE in s_DCTD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376394519 Crash type: UNKNOWN WRITE Crash state: sDCTDprocess sreadbuf spgetcc...

PT-2024-40554 · Git +1 · File

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash state includes functions such as load 1, apprentice...