OSV-2024-9 Stack-buffer-overflow in _canonicalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65635 Crash type: Stack-buffer-overflow READ Crash state: canonicalize ulocimpgetBaseName75 uresopenWithType...

icu:date_format_fuzzer: Stack-buffer-overflow in _canonicalize

Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=5173052832808960 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: dateformatfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ffe8e5824...

libjxl:icc_codec_fuzzer: Heap-buffer-overflow in jxl::PredictICC

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5493844342800384 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: icccodecfuzzer Job Type: libfuzzerasani386libjxl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

upx:test_packed_file_fuzzer: Stack-buffer-overflow in PackLinuxElf64::unpack

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=5290502832324608 Project: upx Fuzzing Engine: afl Fuzz Target: testpackedfilefuzzer Job Type: aflasanupx Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7ffc75eac2f0 Crash State...

upx:test_packed_file_fuzzer: Heap-buffer-overflow in acc_safe_hread

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=4983061775187968 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: testpackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7adadecf86e4...

OSV-2024-4 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65484 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.CharBuffer.wrap java.base/sun.nio.cs.StreamEncoder.implWrite...

libavc:svc_dec_fuzzer: Segv on unknown address in ih264d_compute_bs_non_mbaff

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=4750234416644096 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: svcdecfuzzer Job Type: libfuzzermsanlibavc Platform Id: linux...

OSV-2023-1382 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65429 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/sun.nio.cs.UTF8.updatePositions java.base/sun.nio.cs.UTF8$Encoder.encodeArrayLoop...

OSV-2023-1381 Heap-buffer-overflow in NetworkInterface::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65428 Crash type: Heap-buffer-overflow READ 10 Crash state: NetworkInterface::processPacket NetworkInterface::dissectPacket fuzzdissectpacket.cpp...

PT-2024-40552 · Git +1 · Ntopng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap buffer overflow read issue is identified, related to the processing of packets by the NetworkInterface. The crash occurs in the processPacket and...

OSV-2023-1377 UNKNOWN READ in FuzzedFileProvider::seek

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65417 Crash type: UNKNOWN READ Crash state: FuzzedFileProvider::seek IOdowrite IOfilecloseit...

OSV-2023-1375 Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65402 Crash type: Heap-buffer-overflow READ 1 Crash state: IEC104Stats::processPacket Flow::processIEC60870Packet NetworkInterface::processPacket...

OSV-2023-1373 Heap-use-after-free in xmlRemoveID

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65409 Crash type: Heap-use-after-free READ 8 Crash state: xmlRemoveID xmlFreeProp xmlFreeNodeList...

OSV-2023-1372 Heap-use-after-free in JS_NewObjectFromShape

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65393 Crash type: Heap-use-after-free WRITE 8 Crash state: JSNewObjectFromShape jsparsetemplate jsparsepostfixexpr...

OSV-2023-1370 Heap-buffer-overflow in process_one_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65383 Crash type: Heap-buffer-overflow READ 1 Crash state: processoneread cramencodecontainer cramflushcontainermt...

OSV-2023-1365 Heap-use-after-free in xmlStaticCopyNode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65363 Crash type: Heap-use-after-free READ 8 Crash state: xmlStaticCopyNode xmlDocCopyNode xmlParseReference...

OSV-2023-1363 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65361 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

OSV-2023-1361 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65333 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/sun.nio.cs.UTF8.updatePositions java.base/sun.nio.cs.UTF8$Encoder.encodeArrayLoop...

OSV-2023-1360 Heap-buffer-overflow in NetworkInterface::dissectPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65332 Crash type: Heap-buffer-overflow READ 2 Crash state: NetworkInterface::dissectPacket fuzzdissectpacket.cpp...

PT-2023-35671 · Git +1 · Ntopng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue was identified, potentially causing a crash. The crash occurs in the NetworkInterface::dissectPacket function, as...