OSV-2023-1325 UNKNOWN WRITE in zero

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65135 Crash type: UNKNOWN WRITE Crash state: zero zendexecute fuzzerdorequestfrombuffer...

OSV-2023-1322 UNKNOWN READ in ih264d_filter_boundary_left_nonmbaff

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65132 Crash type: UNKNOWN READ Crash state: ih264dfilterboundaryleftnonmbaff ih264ddeblockmbnonmbaff ih264ddecoderecontfrnmb...

OSV-2023-1320 Heap-use-after-free in memory_bstat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65108 Crash type: Heap-use-after-free READ 8 Crash state: memorybstat bfdgetsize bfdgetfilesize...

OSV-2023-1315 Heap-use-after-free in htmlParseDocument

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65112 Crash type: Heap-use-after-free READ 1 Crash state: htmlParseDocument htmlDoRead htmlCtxtReadMemory...

OSV-2023-1312 Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65059 Crash type: Heap-buffer-overflow WRITE Crash state: ih264dformatconvert isvcdvideodecode isvcdapifunction...

OSV-2023-1311 Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65057 Crash type: Heap-buffer-overflow WRITE Crash state: ih264dformatconvert ih264ddecodepicturethread...

OSV-2023-1307 UNKNOWN READ in init_struct_ops_maps

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65047 Crash type: UNKNOWN READ Crash state: initstructopsmaps bpfobjectinitmaps bpfobjectopen...

OSV-2023-1306 Heap-use-after-free in pcpp::TLVRecordReader<pcpp::DhcpOption>::getTLVRecord

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65051 Crash type: Heap-use-after-free READ 1 Crash state: pcpp::TLVRecordReader::getTLVRecord pcpp::DhcpLayer::toString pcpp::Packet::toStringList...

OSV-2023-1305 Check failed in CheckUnwind

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65035 Crash type: Check failed Crash state: CheckUnwind ivalignedfree ih264dfreedynamicbufs...

OSV-2023-1303 Heap-use-after-free in htmlCurrentChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65043 Crash type: Heap-use-after-free READ 1 Crash state: htmlCurrentChar htmlParseComment htmlParseDocument...

OSV-2023-1302 Global-buffer-overflow in pcre_get_compiled_regex_cache_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65030 Crash type: Global-buffer-overflow READ 1 Crash state: pcregetcompiledregexcacheex phpreplaceinsubject pregreplacecommon...

OSV-2023-1300 Security exception in com.fasterxml.jackson.core.JsonParser.currentName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65024 Crash type: Security exception Crash state: com.fasterxml.jackson.core.JsonParser.currentName com.fasterxml.jackson.dataformat.yaml.YAMLParser.currentName com.fasterxml.jackson.dataformat.yaml.YAMLParser.getCurrentName...

OSV-2023-1299 Global-buffer-overflow in pcre_get_compiled_regex_cache_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65021 Crash type: Global-buffer-overflow READ 1 Crash state: pcregetcompiledregexcacheex phpdopcrematch zifpregmatch...

OSV-2023-1298 Heap-buffer-overflow in loongarch_split_args_by_comma

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65018 Crash type: Heap-buffer-overflow READ 1 Crash state: loongarchsplitargsbycomma printinsnloongarch disassemblesection...

OSV-2023-1295 Global-buffer-overflow in libraw_tagtype_dataunit_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65027 Crash type: Global-buffer-overflow READ 4 Crash state: librawtagtypedataunitbytes checkedbuffert::tiffsget LibRaw::parseSonySR2...

OSV-2023-1294 Heap-buffer-overflow in ih264d_compute_bs_non_mbaff

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65031 Crash type: Heap-buffer-overflow READ 1 Crash state: ih264dcomputebsnonmbaff ih264dmvpredreftfrnby2pmb isvcdmarkerrsliceskip...

OSV-2023-1291 Security exception in org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64979 Crash type: Security exception Crash state: org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock...

OSV-2023-1276 Heap-use-after-free in authentic_emu_update_tokeninfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64898 Crash type: Heap-use-after-free READ 8 Crash state: authenticemuupdatetokeninfo scpkcs15initupdatetokeninfo scpkcs15initupdatelastupdate...

OSV-2023-1272 Heap-buffer-overflow in OT::cff2::accelerator_templ_t<CFF::cff2_private_dict_opset_t, CFF::cff2_private_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64859 Crash type: Heap-buffer-overflow READ 2 Crash state: OT::cff2::acceleratortempltCFF::cff2privatedictopsett, CFF::cff2private hbotdrawglyph hbfontdrawglyph...

OSV-2023-1271 Heap-buffer-overflow in is_decl_requires_met

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64849 Crash type: Heap-buffer-overflow READ 8 Crash state: isdeclrequiresmet enableavrules linkmodules...