OSV-2022-374 Stack-use-after-scope in RefCopyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47001 Crash type: Stack-use-after-scope READ Crash state: RefCopyBytes dngstream::Put tagdataptr::Put...

OSV-2022-372 Heap-buffer-overflow in dwg_encode_VERTEX_2D

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46994 Crash type: Heap-buffer-overflow READ 8 Crash state: dwgencodeVERTEX2D dwgencodeaddobject dwgencode...

OSV-2022-368 Heap-buffer-overflow in exif_get_long

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46917 Crash type: Heap-buffer-overflow READ 1 Crash state: exifgetlong exifmnotedatafujiload exifmnotedataload...

OSV-2022-363 Heap-use-after-free in dwg_free_TABLEGEOMETRY_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46847 Crash type: Heap-use-after-free READ 8 Crash state: dwgfreeTABLEGEOMETRYprivate dwgfreeTABLEGEOMETRY dwgfreevariablenoclass...

OSV-2022-361 UNKNOWN READ in sc_pkcs15_decode_pubkey_ec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46852 Crash type: UNKNOWN READ Crash state: scpkcs15decodepubkeyec scpkcs15decodepubkey fuzzpkcs15decode.c...

OSV-2022-360 Invalid-free in igl::MshLoader::~MshLoader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46818 Crash type: Invalid-free Crash state: igl::MshLoader::MshLoader iglfuzzer.cpp...

OSV-2022-359 Heap-use-after-free in Segment::write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46788 Crash type: Heap-use-after-free READ 1 Crash state: Segment::write Doublewrite::writepages Doublewrite::flushtodisk...

OSV-2022-351 UNKNOWN READ in ref_stack_counttomark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46705 Crash type: UNKNOWN READ Crash state: refstackcounttomark zcounttomark gsinterpret...

OSV-2022-349 Heap-buffer-overflow in JS_CallInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46701 Crash type: Heap-buffer-overflow READ 1 Crash state: JSCallInternal JSEvalFunctionInternal JSEvalInternal...

OSV-2022-348 Heap-buffer-overflow in doemit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46692 Crash type: Heap-buffer-overflow WRITE 8 Crash state: doemit doinsert pere...

OSV-2022-347 Heap-buffer-overflow in cli_bcomp_freemeta

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46687 Crash type: Heap-buffer-overflow READ 8 Crash state: clibcompfreemeta clibcompaddpatt readdbparseldbsubsignature...

OSV-2022-346 Heap-buffer-overflow in cli_sigopts_handler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46680 Crash type: Heap-buffer-overflow READ 1 Crash state: clisigoptshandler readdbparseldbsubsignature loadoneldb...

OSV-2022-345 Stack-buffer-overflow in sc_hsm_list_files

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46679 Crash type: Stack-buffer-overflow READ Crash state: schsmlistfiles sclistfiles fuzzcard.c...

OSV-2022-344 Heap-use-after-free in init_tdb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46685 Crash type: Heap-use-after-free READ 4 Crash state: inittdb loadoneldb cliloadldb...

OSV-2022-343 Uncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46696 Crash type: Uncaught exception Crash state: com.alibaba.fastjson.JSONPath.getPropertyValue java.base/jdk.internal.math.FDBigInteger.multByPow52 java.base/jdk.internal.math.FloatingDecimal$ASCIIToBinaryBuffer.floatValue...

OSV-2022-341 Heap-buffer-overflow in krb_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46670 Crash type: Heap-buffer-overflow READ 2 Crash state: krbparse ndpisearchkerberos checkndpidetectionfunc...

OSV-2022-340 Heap-buffer-overflow in cli_ac_addsig

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46646 Crash type: Heap-buffer-overflow READ 2 Crash state: cliacaddsig cliaddcontentmatchpattern readdbparseldbsubsignature...

OSV-2022-339 Heap-use-after-free in gc_trace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46672 Crash type: Heap-use-after-free READ 2 Crash state: gctrace gsgcreclaim ireclaim...

OSV-2022-337 Heap-double-free in cli_extract_xlm_macros_and_images

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46586 Crash type: Heap-double-free Crash state: cliextractxlmmacrosandimages cliole2scantempdir climagicscan...

OSV-2022-331 Stack-buffer-overflow in void unwindstack::Symbols::BuildRemapTable<Elf64_Sym>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46546 Crash type: Stack-buffer-overflow READ Crash state: void unwindstack::Symbols::BuildRemapTable bool unwindstack::Symbols::GetName unwindstack::ElfInterfaceImpl::GetFunctionName...