OSV-2024-326 Heap-buffer-overflow in GfxFont::readFontDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68193 Crash type: Heap-buffer-overflow READ 1 Crash state: GfxFont::readFontDescriptor Gfx8BitFont::Gfx8BitFont GfxFont::makeFont...

OSV-2024-324 Use-of-uninitialized-value in do_callout_jit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68365 Crash type: Use-of-uninitialized-value Crash state: docalloutjit jitmachinestackexec...

OSV-2024-323 Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68346 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst java.base/java.util.stream.ReferencePipeline$3$1.accept...

OSV-2024-322 Container-overflow in strtol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68322 Crash type: Container-overflow READ 3 Crash state: strtol Pistache::Http::Private::BodyStep::Chunk::parse Pistache::Http::Private::BodyStep::parseTransferEncoding...

OSV-2024-319 Stack-buffer-underflow in filter_apply_chain

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68328 Crash type: Stack-buffer-underflow READ 4 Crash state: filterapplychain filterapplychain initializeoutputfilters...

OSV-2024-314 Heap-buffer-overflow in config__add_listener

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68361 Crash type: Heap-buffer-overflow WRITE Crash state: configaddlistener configcreatedefaultlistener configreadfilecore...

OSV-2024-309 Use-of-uninitialized-value in fast_forward_first_n_chars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66944 Crash type: Use-of-uninitialized-value Crash state: fastforwardfirstnchars jitcompile pcre2jitcompile8...

mosquitto:broker_fuzz_test_config: Heap-buffer-overflow in config__add_listener

Project: https://github.com/eclipse/mosquitto.git Detailed Report: https://oss-fuzz.com/testcase?key=4892680610971648 Project: mosquitto Fuzzing Engine: libFuzzer Fuzz Target: brokerfuzztestconfig Job Type: libfuzzerasanmosquitto Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

fwupd:uswid_fuzzer: Heap-buffer-overflow in fu_coswid_firmware_write

Project: https://github.com/fwupd/fwupd.git Detailed Report: https://oss-fuzz.com/testcase?key=5114194035802112 Project: fwupd Fuzzing Engine: libFuzzer Fuzz Target: uswidfuzzer Job Type: libfuzzerasanfwupd Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x604000000938...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in iamf_read_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4665793796177920 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegDEMUXERfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x609000000380 Cras...

libreoffice:schtmlfuzzer: Heap-use-after-free in ScHTMLLayoutParser::Adjust

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4880432454762496 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: schtmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

freerdp:TestFuzzCoreClient: Heap-buffer-overflow in redirection_free

Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=5922955352670208 Project: freerdp Fuzzing Engine: libFuzzer Fuzz Target: TestFuzzCoreClient Job Type: libfuzzerasanfreerdp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

matio:matio_fuzzer: Crash in Mat_VarPrint

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=4739086431617024 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

OSV-2024-294 Segv on unknown address in gx_device_forward_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68051 Crash type: Segv on unknown address Crash state: gxdeviceforwardfinalize gxdevicefinalize pdf14devicefinalize...

imagemagick:encoder_mpo_fuzzer: Use-of-uninitialized-value in LocaleNCompare

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5187143476510720 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermpofuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

exiv2:fuzz-read-print-write: Heap-buffer-overflow in Exiv2::AsfVideo::GUIDTag::GUIDTag

Project: https://github.com/Exiv2/exiv2.git Detailed Report: https://oss-fuzz.com/testcase?key=4822213510365184 Project: exiv2 Fuzzing Engine: afl Fuzz Target: fuzz-read-print-write Job Type: aflasanexiv2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6030000004af Cra...

OSV-2024-288 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68181 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/sun.nio.cs.UTF8.updatePositions java.base/sun.nio.cs.UTF8$Encoder.encodeArrayLoop...

binutils:fuzz_windres: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=4619160064688128 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzwindres Job Type: libfuzzerubsanbinutils Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace Sanitizer:...

xpdf:fuzz_pdfload: Heap-buffer-overflow in Catalog::getPage

Detailed Report: https://oss-fuzz.com/testcase?key=5913847295705088 Project: xpdf Fuzzing Engine: afl Fuzz Target: fuzzpdfload Job Type: aflasanxpdf Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60200001ea08 Crash State: Catalog::getPage PDFDoc::displayPage...

OSV-2024-278 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68092 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.HeapCharBuffer. java.base/java.nio.CharBuffer.wrap...