OSV-2023-106 UNKNOWN WRITE in sudo_lbuf_append_quoted_v1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56278 Crash type: UNKNOWN WRITE Crash state: sudolbufappendquotedv1 sudoersformatmemberint sudoersformatmemberint...

OSV-2023-104 Heap-buffer-overflow in H5FS__sect_link

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56234 Crash type: Heap-buffer-overflow READ 8 Crash state: H5FSsectlink H5FSsectadd H5MFaddsect...

OSV-2023-102 Segv on unknown address in ndpi_free_flow_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56272 Crash type: Segv on unknown address Crash state: ndpifreeflowdata ndpifreeflow fuzzprocesspacket.c...

OSV-2023-101 Heap-use-after-free in pci_enum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56243 Crash type: Heap-use-after-free READ 4 Crash state: pcienum gptrarrayforeach genericfuzz...

PT-2023-35532 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash involves the functions ndpi free flow data and ndpi fr...

OSV-2023-98 Heap-buffer-overflow in sc_hsm_write_ef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56213 Crash type: Heap-buffer-overflow READ Crash state: schsmwriteef schsmupdatebinary scupdatebinary...

OSV-2023-96 Heap-buffer-overflow in load_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56208 Crash type: Heap-buffer-overflow READ 8 Crash state: loadbuffer rbinobjectnew rbinfilenewfrombuffer...

PT-2023-36056 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of specif...

OSV-2023-95 Use-of-uninitialized-value in isvcd_interpolate_residual_sse42

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56176 Crash type: Use-of-uninitialized-value Crash state: isvcdinterpolateresidualsse42 isvcdresidualsampmb isvcdprocessresidualresamplemb...

OSV-2023-92 UNKNOWN READ in var_Create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56141 Crash type: UNKNOWN READ Crash state: varCreate Open genericstart...

OSV-2023-90 Heap-buffer-overflow in LibRaw_buffer_datastream::scanf_one

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56160 Crash type: Heap-buffer-overflow READ 1 Crash state: LibRawbufferdatastream::scanfone LibRaw::parsemos LibRaw::parsetiffifd...

OSV-2023-89 Heap-buffer-overflow in H5O__mtime_new_encode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56143 Crash type: Heap-buffer-overflow WRITE 1 Crash state: H5Omtimenewencode H5Omsgflush H5Ochunkserialize...

OSV-2023-88 Stack-buffer-overflow in pdfi_read_cff_dict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56156 Crash type: Stack-buffer-overflow WRITE 1 Crash state: pdfireadcffdict pdfireadcffdict pdfireadcfffont...

OSV-2023-84 Stack-buffer-overflow in parse_regex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56121 Crash type: Stack-buffer-overflow READ 1 Crash state: parseregex parseregex parseregex...

OSV-2023-78 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56054 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2023-72 Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56057 Crash type: Heap-buffer-overflow WRITE 4 Crash state: perfetto::traceprocessor::TrackEventParser::ParseTrackDescriptor perfetto::traceprocessor::TrackEventModule::ParseTracePacketData...

OSV-2023-69 Heap-use-after-free in zend_ast_evaluate_inner

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56021 Crash type: Heap-use-after-free READ 4 Crash state: zendastevaluateinner zendastevaluateex zvalupdateconstantwithctx...

OSV-2023-68 Heap-buffer-overflow in isvcd_residual_samp_mb_dyadic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56023 Crash type: Heap-buffer-overflow READ 2 Crash state: isvcdresidualsampmbdyadic isvcdprocessresidualresamplemb isvcdprocessintermbrsdpredtargetlyr...

OSV-2023-67 Heap-use-after-free in config__cleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56009 Crash type: Heap-use-after-free READ 8 Crash state: configcleanup mosquittofuzzmain runbroker...

OSV-2023-66 Heap-buffer-overflow in mosquitto__strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56008 Crash type: Heap-buffer-overflow READ Crash state: mosquittostrdup configreadfilecore configreadfile...