PT-2024-40750 · Git +1 · Jq

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash state involves functions such as jvp object free, jv free, and jv equal...

OSV-2024-393 Heap-buffer-overflow in pcpp::BgpLayer::getHeaderLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67346 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::BgpLayer::getHeaderLen pcpp::Packet::shortenLayer pcpp::BgpUpdateMessageLayer::setPathAttributes...

OSV-2024-391 Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68324 Crash type: Security exception Crash state: org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII...

OSV-2024-390 Heap-buffer-overflow in H5O__cache_chk_serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67889 Crash type: Heap-buffer-overflow READ Crash state: H5Ocachechkserialize H5Cgenerateimage H5Cflushsingleentry...

OSV-2024-389 Heap-buffer-overflow in JS_CallInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67611 Crash type: Heap-buffer-overflow READ 1 Crash state: JSCallInternal asyncfuncresume jsasyncfunctionresume...

OSV-2024-384 Heap-use-after-free in json_fixed_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67528 Crash type: Heap-use-after-free WRITE 11 Crash state: jsonfixedstring jsonRNUMBERHeader dwgreadjson...

OSV-2024-382 UNKNOWN READ in pcpp::Packet::destructPacketData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67193 Crash type: UNKNOWN READ Crash state: pcpp::Packet::destructPacketData Packet.h...

OSV-2024-380 Heap-use-after-free in H5FL__blk_gc_list

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67830 Crash type: Heap-use-after-free READ 8 Crash state: H5FLblkgclist H5FLblkfree H5Ofree...

OSV-2024-379 UNKNOWN READ in H5SL_first

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67923 Crash type: UNKNOWN READ Crash state: H5SLfirst H5FSsectfind H5MFfindsect...

OSV-2024-372 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67413 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal java.base/java.lang.AbstractStringBuilder.append...

OSV-2024-371 UNKNOWN READ in jv_array_set

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68056 Crash type: UNKNOWN READ Crash state: jvarrayset jvset jvsetpath...

OSV-2024-370 Heap-buffer-overflow in H5O__chunk_protect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67820 Crash type: Heap-buffer-overflow READ 8 Crash state: H5Ochunkprotect H5Ochunkdelete H5Ocontdelete...

OSV-2024-369 Segv on unknown address in pcpp::IPv6Layer::~IPv6Layer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67967 Crash type: Segv on unknown address Crash state: pcpp::IPv6Layer::IPv6Layer pcpp::IPv6Layer::IPv6Layer pcpp::Packet::destructPacketData...

OSV-2024-360 Heap-buffer-overflow in pcpp::TelnetLayer::getFieldLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67752 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::TelnetLayer::getFieldLen pcpp::TelnetLayer::getFirstCommand readParsedPacket...

OSV-2024-359 Security exception in graphql.schema.GraphQLTypeUtil.simplePrint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67751 Crash type: Security exception Crash state: graphql.schema.GraphQLTypeUtil.simplePrint graphql.schema.GraphQLTypeUtil.simplePrint graphql.schema.GraphQLTypeUtil.unwrapOne...

OSV-2024-357 Use-of-uninitialized-value in pcpp::PcapNgFileReaderDevice::getNextPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68167 Crash type: Use-of-uninitialized-value Crash state: pcpp::PcapNgFileReaderDevice::getNextPacket pcpp::PcapNgFileReaderDevice::getNextPacket pcpp::IFileReaderDevice::getNextPackets...

OSV-2024-352 Heap-buffer-overflow in __parse_options

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68156 Crash type: Heap-buffer-overflow READ Crash state: parseoptions parseoptions parseoptions...

OSV-2024-351 UNKNOWN READ in H5SL__release_common

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67741 Crash type: UNKNOWN READ Crash state: H5SLreleasecommon H5SLclosecommon H5SLdestroy...

OSV-2024-349 Security exception in java.base/java.lang.AbstractStringBuilder.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67525 Crash type: Security exception Crash state: java.base/java.lang.AbstractStringBuilder. java.base/java.lang.StringBuilder. org.apache.commons.codec.language.bm.Rule$Phoneme...

OSV-2024-345 Use-of-uninitialized-value in aesEncryptBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67066 Crash type: Use-of-uninitialized-value Crash state: aesEncryptBlock EncryptStream::lookChar BaseCryptStream::getChar...