OSV-2022-522 Heap-buffer-overflow in Interp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48526 Crash type: Heap-buffer-overflow READ 4 Crash state: Interp InsIUP RunIns...

OSV-2022-519 Stack-buffer-overflow in LookupThousands

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48470 Crash type: Stack-buffer-overflow WRITE Crash state: LookupThousands LookupNum3 TranslateNumber...

OSV-2022-515 Uncaught exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48408 Crash type: Uncaught exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.TreeMap.compare java.base/java.util.TreeMap.addEntryToEmptyMap...

OSV-2022-514 Heap-use-after-free in AK::HashTable<AK::StringView, AK::Traits<AK::StringView>, false>::try_lookup_for

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48405 Crash type: Heap-use-after-free READ 2 Crash state: AK::HashTable, false::trylookupfor JS::Parser::isprivateidentifiervalid JS::Parser::parseprimaryexpression...

OSV-2022-511 UNKNOWN READ in zfp_getcell

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48372 Crash type: UNKNOWN READ Crash state: zfpgetcell bloscd bloscgetitem...

OSV-2022-510 Heap-buffer-overflow in read_blob_signed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48329 Crash type: Heap-buffer-overflow READ 4 Crash state: readblobsigned parsesignaturetype parsesignaturetype...

OSV-2022-508 Heap-buffer-overflow in coap_split_uri_sub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48362 Crash type: Heap-buffer-overflow READ 1 Crash state: coapspliturisub coapgeturipath...

OSV-2022-507 Heap-use-after-free in psi_device_ref_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48305 Crash type: Heap-use-after-free READ 8 Crash state: psidevicereffinalize gsgcreclaim ireclaim...

OSV-2022-501 UNKNOWN WRITE in grk::TileLengthMarkers::seek

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48224 Crash type: UNKNOWN WRITE Crash state: grk::TileLengthMarkers::seek grk::CodeStreamDecompress::skipNonScheduledTLM grk::CodeStreamDecompress::parseTileParts...

OSV-2022-494 Heap-buffer-overflow in ucl_hash_search

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48156 Crash type: Heap-buffer-overflow READ 1 Crash state: uclhashsearch uclparserprocessobjectelement uclstatemachine...

OSV-2022-492 Heap-buffer-overflow in jxl::BitsCoder::Read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48123 Crash type: Heap-buffer-overflow READ 8 Crash state: jxl::BitsCoder::Read jxl::ReadVisitor::Bits jxl::jpeg::JPEGData::VisitFields...

OSV-2022-490 Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48060 Crash type: Stack-buffer-overflow READ 4 Crash state: spvtools::opt::CompositeInsertToCompositeConstruct std::1::function::funcbool spvtools::opt::InstructionFolder::FoldInstructionInternal...

OSV-2022-489 Heap-buffer-overflow in fr_size_from_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48069 Crash type: Heap-buffer-overflow READ 1 Crash state: frsizefromstr frvalueboxfromsubstr frvalueboxfromstr...

OSV-2022-487 Heap-use-after-free in duckdb::Planner::CreatePlan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48062 Crash type: Heap-use-after-free READ 1 Crash state: duckdb::Planner::CreatePlan duckdb::Planner::CreatePlan duckdb::ClientContext::CreatePreparedStatement...

OSV-2022-484 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48043 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...

OSV-2022-483 Heap-buffer-overflow in ndpi_search_dns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48034 Crash type: Heap-buffer-overflow READ 4 Crash state: ndpisearchdns checkndpidetectionfunc ndpicheckflowfunc...

OSV-2022-481 UNKNOWN READ in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48020 Crash type: UNKNOWN READ Crash state: ndpistrdup processndpicollectedinfo ndpiworkflowprocesspacket...

OSV-2022-480 Heap-buffer-overflow in jxl::JxlBoxContentDecoder::Process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48029 Crash type: Heap-buffer-overflow READ Crash state: jxl::JxlBoxContentDecoder::Process HandleBoxes JxlDecoderProcessInput...

OSV-2022-478 Segv on unknown address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48005 Crash type: Segv on unknown address Crash state: NULL...

OSV-2022-475 Heap-double-free in nft_set_context_free_many

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47973 Crash type: Heap-double-free Crash state: nftsetcontextfreemany networkunref networkloadone...