OSV-2022-250 Heap-buffer-overflow in __covrec_1D46B478ANUMBER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45603 Crash type: Heap-buffer-overflow READ 1 Crash state: covrec1D46B478ANUMBER covrecF49D057CNUMBER covrec5D82FD3F85773DBDu...

OSV-2022-249 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45591 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::EvaluateValue...

OSV-2022-248 Uncaught exception in java.base/java.nio.Bits.reserveMemory

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45563 Crash type: Uncaught exception Crash state: java.base/java.nio.Bits.reserveMemory java.base/java.nio.DirectByteBuffer. java.base/java.nio.ByteBuffer.allocateDirect...

OSV-2022-241 UNKNOWN READ in write_cond_nodes_to_conf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45523 Crash type: UNKNOWN READ Crash state: writecondnodestoconf sepolkernelpolicydbtoconf binpolicy-fuzzer.c...

OSV-2022-238 Segv on unknown address in i_zval_ptr_dtor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45429 Crash type: Segv on unknown address Crash state: izvalptrdtor zendleavehelperSPEC zenddispatchtrycatchfinallyhelperSPEC...

OSV-2022-237 Stack-buffer-overflow in sc_format_oid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45459 Crash type: Stack-buffer-overflow READ Crash state: scformatoid dostoredataobject fuzzpkcs15init.c...

OSV-2022-235 Heap-buffer-overflow in zend_gc_collect_cycles

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45369 Crash type: Heap-buffer-overflow READ 1 Crash state: zendgccollectcycles fuzzerrequestshutdown fuzzerdorequestfrombuffer...

OSV-2022-232 UNKNOWN READ in pdfi_fapi_get_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45439 Crash type: UNKNOWN READ Crash state: pdfifapigetglyph getfapiglyphdata cffslotload...

CVE-2022-0618

CVE-2022-0618 affects the swift-nio-http2 project. A logical error in parsing HTTP/2 HEADERS and PUSH_PROMISE frames containing only padding information can cause a parsing failure, crashing the process and harming availability. The issue affects swift-nio-http2 versions 1.0.0 through 1.19.2 and ...

CVE-2022-0618

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS or HTTP/2 PUSHPROMISE frame where the frame contains padding information...

OSV-2022-229 UNKNOWN READ in spgetcc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45347 Crash type: UNKNOWN READ Crash state: spgetcc pdfireadbyte pdfireadtoken...

OSV-2022-226 Heap-buffer-overflow in vips_rect_intersectrect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45353 Crash type: Heap-buffer-overflow READ 4 Crash state: vipsrectintersectrect vipsforeignloadpdfgenerate vipsregionpreparetogenerate...

OSV-2022-223 Container-overflow in Exiv2::Photoshop::locateIrb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45302 Crash type: Container-overflow READ 4 Crash state: Exiv2::Photoshop::locateIrb Exiv2::Photoshop::setIptcIrb Exiv2::JpegBase::doWriteMetadata...

OSV-2022-222 Heap-use-after-free in cb_stdout_flush

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45251 Crash type: Heap-use-after-free READ Crash state: cbstdoutflush outputprecbflush flb-it-fuzz-filterstdoutfuzzerOSSFUZZ...

OSV-2022-220 Stack-buffer-overflow in load_regex_matcher

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45247 Crash type: Stack-buffer-overflow WRITE 1 Crash state: loadregexmatcher cliloadpdb cliload...

OSV-2022-217 Stack-buffer-overflow in msgpack_sbuffer_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45208 Crash type: Stack-buffer-overflow READ Crash state: msgpacksbufferwrite flbpackmsgpacktojsonformat flbjsonfuzzer.c...

OSV-2022-216 Null-dereference READ in cl_finish_hash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45197 Crash type: Null-dereference READ Crash state: clfinishhash hashimptbl scanpeimp...

OSV-2022-214 Heap-buffer-overflow in cli_bcomp_freemeta

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45194 Crash type: Heap-buffer-overflow READ 8 Crash state: clibcompfreemeta clibcompaddpatt readdbparseldbsubsignature...

OSV-2022-210 UNKNOWN READ in pdfi_count_cff_index

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45173 Crash type: UNKNOWN READ Crash state: pdficountcffindex pdfireadcfffont pdfiloadfont...

OSV-2022-209 Heap-buffer-overflow in dotnet_parse_tilde_2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45161 Crash type: Heap-buffer-overflow READ 4 Crash state: dotnetparsetilde2 dotnetparsetilde dotnetparsecom...