OSV-2022-901 Heap-double-free in HashMgr::~HashMgr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51432 Crash type: Heap-double-free Crash state: HashMgr::HashMgr HunspellImpl::HunspellImpl Hunspell::Hunspell...

GHSA-P2G7-XWVR-RRW3 Helm Controller denial of service

Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK allows for specific data inputs to cause high memory consumption, which in some platforms could cause the controller to panic and stop processing reconciliations. Impact In a shared cluster multi-tenanc...

OSV-2022-899 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51390 Crash type: Heap-buffer-overflow READ 7 Crash state: std::1::basicstring, std::1::allocatorch PfxEntry::add AffixMgr::expandrootword...

OSV-2022-896 Segv on unknown address in Sass::unifyComplex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51316 Crash type: Segv on unknown address Crash state: Sass::unifyComplex Sass::Extender::extendCompound Sass::Extender::extendComplex...

OSV-2022-892 Segv on unknown address in ddsi_config_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51292 Crash type: Segv on unknown address Crash state: ddsiconfiginit fuzzconfiginit.c...

OSV-2022-891 Stack-buffer-overflow in flb_env_var_translate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51278 Crash type: Stack-buffer-overflow WRITE Crash state: flbenvvartranslate flbparserconffile configrandomfuzzer.c...

OSV-2022-889 Heap-use-after-free in AffixMgr::prefix_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51277 Crash type: Heap-use-after-free READ 2 Crash state: AffixMgr::prefixcheck AffixMgr::affixcheck HunspellImpl::checkword...

OSV-2022-883 Segv on unknown address in HashMgr::add_word

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51187 Crash type: Segv on unknown address Crash state: HashMgr::addword HashMgr::loadtables HashMgr::HashMgr...

OSV-2022-882 Use-of-uninitialized-value in SfxEntry::test_condition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51218 Crash type: Use-of-uninitialized-value Crash state: SfxEntry::testcondition SfxEntry::add AffixMgr::expandrootword...

OSV-2022-881 Heap-use-after-free in AcquireCodePageWithCapacity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51182 Crash type: Heap-use-after-free READ 8 Crash state: AcquireCodePageWithCapacity CompileElseBlock CompileIf...

OSV-2022-880 Global-buffer-overflow in _getBaseCellNeighbor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51208 Crash type: Global-buffer-overflow READ 4 Crash state: getBaseCellNeighbor localIjkToCell localIjToCell...

OSV-2022-874 UNKNOWN WRITE in from8to16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51128 Crash type: UNKNOWN WRITE Crash state: from8to16 cmsHandleExtraChannels CachedXFORM...

OSV-2022-868 Heap-buffer-overflow in AffixMgr::redundant_condition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51124 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::redundantcondition AffixMgr::parseaffix AffixMgr::parsefile...

OSV-2022-865 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51101 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.lang.StringUTF16.newString java.base/java.lang.String.substring...

OSV-2022-866 Stack-buffer-underflow in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51089 Crash type: Stack-buffer-underflow READ 4 Crash state: gstype2interpret copiedtype1glyphoutline gsdefaultglyphinfo...

OSV-2022-864 Heap-buffer-overflow in SuggestMgr::badcharkey_utf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51102 Crash type: Heap-buffer-overflow READ 2 Crash state: SuggestMgr::badcharkeyutf SuggestMgr::suggest HunspellImpl::suggestinternal...

OSV-2022-863 Heap-use-after-free in user_wrapper_opendir

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51047 Crash type: Heap-use-after-free READ 10 Crash state: userwrapperopendir phpstreamopendir phpdoopendir...

OSV-2022-861 Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51083 Crash type: Heap-use-after-free READ 8 Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypegeos::geom::Coor geos::geomgraph::NodeMap::addNode geos::operation::overlay::OverlayOp::copyPoints...

OSV-2022-859 UNKNOWN READ in write_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51081 Crash type: UNKNOWN READ Crash state: writekey textfileput fuzztextfile.c...

OSV-2022-857 Heap-double-free in fuzz_textfile.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51072 Crash type: Heap-double-free Crash state: fuzztextfile.c fuzztextfile.c...