OSV-2022-755 Global-buffer-overflow in chunk_obj_alloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50436 Crash type: Global-buffer-overflow READ 8 Crash state: chunkobjalloc chunkallocbytearrayimmovable szliballoc...

OSV-2022-751 Heap-buffer-overflow in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50448 Crash type: Heap-buffer-overflow READ 1 Crash state: gstype2interpret copiedtype1glyphoutline gsdefaultglyphinfo...

OSV-2022-749 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50393 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.nio.charset.CharsetEncoder.replaceWith java.base/java.nio.charset.CharsetEncoder...

OSV-2022-744 Stack-buffer-overflow in gs_glyph_data_from_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50326 Crash type: Stack-buffer-overflow WRITE 8 Crash state: gsglyphdatafrombytes pdficffsubrdata gstype1piececodes...

OSV-2022-738 Security exception in DatatypeFuzzer.fuzzerTestOneInput

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50379 Crash type: Security exception Crash state: DatatypeFuzzer.fuzzerTestOneInput com.codeintelligence.jazzer.driver.FuzzTargetRunner.runOne com.codeintelligence.jazzer.driver.FuzzTargetRunner.startLibFuzzer...

OSV-2022-736 Heap-buffer-overflow in copy_glyph_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50321 Crash type: Heap-buffer-overflow READ Crash state: copyglyphdata copyglyphtype1 gscopyglyphoptions...

OSV-2022-729 Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50372 Crash type: Security exception Crash state: org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue...

OSV-2022-727 Heap-buffer-overflow in s_file_write_flush

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50370 Crash type: Heap-buffer-overflow READ 8 Crash state: sfilewriteflush sclose streamfinalize...

OSV-2022-725 Heap-buffer-overflow in jxl::N_EMU128::WriteToU8Stage::ProcessRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295 Crash type: Heap-buffer-overflow WRITE 1 Crash state: jxl::NEMU128::WriteToU8Stage::ProcessRow jxl::LowMemoryRenderPipeline::RenderRect jxl::LowMemoryRenderPipeline::ProcessBuffers...

OSV-2022-724 Stack-buffer-underflow in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50306 Crash type: Stack-buffer-underflow READ 4 Crash state: gstype2interpret copiedtype1glyphoutline gsdefaultglyphinfo...

OSV-2022-719 Stack-buffer-overflow in gs_glyph_data_from_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50267 Crash type: Stack-buffer-overflow WRITE 8 Crash state: gsglyphdatafromstring copiedtype1subrdata gstype2interpret...

OSV-2022-715 Segv on unknown address in jpeg_read_scanlines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50217 https://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.htmldecode-jpeg-compressed-blp1-data-in-original-mode Crash type: Segv on unknown address Crash state: jpegreadscanlines ImagingJpegDecode decode...

OSV-2022-714 Heap-buffer-overflow in dynapi_set_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50194 Crash type: Heap-buffer-overflow WRITE 16 Crash state: dynapisethelper dwgdynapiheadersetvalue jsonHEADER...

OSV-2022-712 Heap-buffer-overflow in ndpi_search_florensia

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50110 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpisearchflorensia checkndpidetectionfunc ndpidetectionprocesspacket...

OSV-2022-711 Heap-buffer-overflow in _cmsMAT3per

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50115 Crash type: Heap-buffer-overflow READ 8 Crash state: cmsMAT3per OptimizeMatrixShaper cmsOptimizePipeline...

OSV-2022-710 Heap-buffer-overflow in pdfi_read_cff_dict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50099 Crash type: Heap-buffer-overflow READ 1 Crash state: pdfireadcffdict pdfireadcffdict pdfireadcfffont...

OSV-2022-708 UNKNOWN READ in kh_resize_ucl_hash_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50120 Crash type: UNKNOWN READ Crash state: khresizeuclhashnode khputuclhashnode uclhashinsert...

OSV-2022-706 Heap-buffer-overflow in find_jump_target

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50077 Crash type: Heap-buffer-overflow READ 1 Crash state: findjumptarget resolvelabels jscreatefunction...

OSV-2022-705 Heap-buffer-overflow in netsnmp_memdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50096 Crash type: Heap-buffer-overflow READ Crash state: netsnmpmemdup snmpapifuzzer.c...

OSV-2022-704 UNKNOWN READ in fp_cmp_mag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50012 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...