OSV-2023-1358 Heap-buffer-overflow in js_free_function_def

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65317 Crash type: Heap-buffer-overflow READ 4 Crash state: jsfreefunctiondef jsparsefunctiondecl2 jsparsepostfixexpr...

OSV-2023-1357 Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65307 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processtls fuzzquicgetcryptodata.c...

OSV-2023-1356 Heap-buffer-overflow in rawspeed::DngDecoder::parseWhiteBalance

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65309 Crash type: Heap-buffer-overflow READ 4 Crash state: rawspeed::DngDecoder::parseWhiteBalance rawspeed::DngDecoder::decodeMetaDataInternal rawspeed::RawDecoder::decodeMetaData...

OSV-2023-1354 Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65304 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processTLSBlock ndpisearchtlsudp...

OSV-2023-1353 Security exception in org.apache.poi.ddf.EscherContainerRecord.fillFields

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65303 Crash type: Security exception Crash state: org.apache.poi.ddf.EscherContainerRecord.fillFields org.apache.poi.hslf.record.Record.findChildRecords org.apache.poi.hslf.record.DummyPositionSensitiveRecordWithChildren...

OSV-2023-1352 Heap-buffer-overflow in Flow::dissectMDNS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65271 Crash type: Heap-buffer-overflow READ Crash state: Flow::dissectMDNS NetworkInterface::processPacket NetworkInterface::dissectPacket...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in Flow::dissectMDNS

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=5384881550983168 Project: ntopng Fuzzing Engine: afl Fuzz Target: fuzzdissectpacket Job Type: aflasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x615000001900 Crash...

OSV-2023-1344 Heap-buffer-overflow in jv_string_vfmt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65198 Crash type: Heap-buffer-overflow READ 2 Crash state: jvstringvfmt jvstringfmt jvget...

OSV-2023-1338 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65230 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/sun.nio.cs.UTF8.updatePositions java.base/sun.nio.cs.UTF8$Encoder.encodeArrayLoop...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Detailed Report: https://oss-fuzz.com/testcase?key=4758408477409280 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

libssh2:ssh2_client_fuzzer: Heap-buffer-overflow in _libssh2_kex_agree_instr

Project: https://github.com/cmeister2/libssh2.git https://github.com/libssh2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5912608611631104 Project: libssh2 Fuzzing Engine: afl Fuzz Target: ssh2clientfuzzer Job Type: aflasanlibssh2 Platform Id: linux Crash Type:...

libreoffice:tiffuzzer: Heap-buffer-overflow in putcontig8bitYCbCr22tile

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5093649717002240 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: tiffuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

casync:fuzz-compress: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6331205183995904 Project: casync Fuzzing Engine: libFuzzer Fuzz Target: fuzz-compress Job Type: libfuzzerasancasync Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

libavc:svc_dec_fuzzer: Segv on unknown address in isvcd_compute_bs_non_mbaff_target_lyr_no_inter_layer

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=4957873016537088 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: svcdecfuzzer Job Type: libfuzzermsanlibavc Platform Id: linux...

libreoffice:svmfuzzer: Stack-buffer-overflow in BigInt::DivLong

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4560846004813824 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: svmfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash...

ffmpeg:ffmpeg_BSF_VVC_METADATA_fuzzer: Heap-buffer-overflow in cbs_h266_read_nal_unit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4665241535119360 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegBSFVVCMETADATAfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

libucl:ucl_add_string_fuzzer: Heap-use-after-free in ucl_hash_func

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=4598791571111936 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

OSV-2023-1329 Stack-buffer-overflow in decNaNs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65130 Crash type: Stack-buffer-overflow WRITE 2 Crash state: decNaNs decCompareOp decNumberCompare...

OSV-2023-1328 Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65128 Crash type: Stack-buffer-overflow WRITE 1 Crash state: icu75::TZDBTimeZoneNames::getMetaZoneNames icu75::TZDBTimeZoneNames::getMetaZoneDisplayName TestNames...

OSV-2023-1327 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65140 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...