OSV-2022-590 Heap-use-after-free in .tmpoLlNv4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49166 Crash type: Heap-use-after-free READ 8 Crash state: .tmpoLlNv4 .tmpoLlNv4 wasmtimesetjmp...

OSV-2022-588 Heap-use-after-free in wasmtime_runtime::externref::gc::hcbc8e23ae41614fa

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49171 Crash type: Heap-use-after-free WRITE 8 Crash state: wasmtimeruntime::externref::gc::hcbc8e23ae41614fa wasmtimefuzzing::oracles::tableops::$u7b$$u7b$closure$u7d$$u7d$::hd207e5ffb69...

OSV-2022-586 Heap-use-after-free in op_pci_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49107 Crash type: Heap-use-after-free READ 4 Crash state: oppciwrite genericfuzz fuzz.c...

OSV-2022-585 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49103 Crash type: Memcpy-param-overlap Crash state: repeat pere pere...

OSV-2022-581 Heap-buffer-overflow in megasas_map_sgl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49086 Crash type: Heap-buffer-overflow READ 4 Crash state: megasasmapsgl megasasmmiowrite megasasportwrite...

OSV-2022-578 Heap-buffer-overflow in mrb_bint_to_s

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49045 Crash type: Heap-buffer-overflow WRITE 1 Crash state: mrbbinttos inttos mrbvmexec...

OSV-2022-577 Heap-use-after-free in jsmn_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49033 Crash type: Heap-use-after-free WRITE 4 Crash state: jsmnparse flbjsontokenise flbpackjsonstate...

OSV-2022-573 Heap-buffer-overflow in zim_ReflectionEnumBackedCase_getBackingValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49068 Crash type: Heap-buffer-overflow READ 4 Crash state: zimReflectionEnumBackedCasegetBackingValue executeinternal fuzzerexecuteinternal...

OSV-2022-572 Heap-buffer-overflow in dhcp_reply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49002 Crash type: Heap-buffer-overflow READ 1 Crash state: dhcpreply dhcppacket FuzzDhcp...

OSV-2022-563 Use-of-uninitialized-value in LZ4HC_compress_generic_noDictCtx

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48910 Crash type: Use-of-uninitialized-value Crash state: LZ4HCcompressgenericnoDictCtx LZ4compressHCextStateHCfastReset LZ4FcompressBlockHC...

OSV-2022-562 UNKNOWN WRITE in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48904 Crash type: UNKNOWN WRITE Crash state: udiv mrbbintmod intmod...

OSV-2022-557 Heap-buffer-overflow in emit_goto

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48924 Crash type: Heap-buffer-overflow READ 4 Crash state: emitgoto jsparseforinof jsparsestatementordecl...

OSV-2022-556 UNKNOWN READ in mrb_bint_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48877 Crash type: UNKNOWN READ Crash state: mrbbintcmp cmpnum numgt...

OSV-2022-550 Heap-use-after-free in mrb_bint_new_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48873 Crash type: Heap-use-after-free READ 1 Crash state: mrbbintnewstr mrbvmexec mrbvmrun...

OSV-2022-538 Memcpy-param-overlap in FT_Stream_TryRead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48749 Crash type: Memcpy-param-overlap Crash state: FTStreamTryRead bdfloadfont BDFFaceInit...

OSV-2022-534 Heap-buffer-overflow in json_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48736 Crash type: Heap-buffer-overflow READ 1 Crash state: jsonparse fileisjson filebuffer...

OSV-2022-533 Check failed in CheckUnwind

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48629 Crash type: Check failed Crash state: CheckUnwind vp9loopfilterdealloc vp9decoderremove...

OSV-2022-532 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48658 Crash type: Null-dereference READ Crash state: NULL...

OSV-2022-531 Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48684 Crash type: Heap-buffer-overflow WRITE 4 Crash state: perfetto::traceprocessor::TrackEventParser::ParseTrackDescriptor perfetto::traceprocessor::TrackEventModule::ParsePacket...

OSV-2022-530 Heap-buffer-overflow in string_decoder_getc_utf_8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48589 Crash type: Heap-buffer-overflow READ 1 Crash state: stringdecodergetcutf8 textdecodergetc ReadClause...