OSV-2023-1104 Heap-buffer-overflow in bit_read_RC

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63814 Crash type: Heap-buffer-overflow READ 1 Crash state: bitreadRC bitreadfixed bitreadTF...

OSV-2023-1103 Heap-buffer-overflow in OpenType::be_u32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63777 Crash type: Heap-buffer-overflow READ 1 Crash state: OpenType::beu32 OpenType::Cmap::subtable OpenType::Font::tryloadfromoffset...

libreoffice:ww8fuzzer: Stack-use-after-return in WW8PLCFMan::GetSprmStart

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6514002530009088 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Stack-use-after-return READ 1 Crash...

OSV-2023-1101 Heap-buffer-overflow in decode_preR13_entities

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63776 Crash type: Heap-buffer-overflow READ 10 Crash state: decodepreR13entities decodepreR13 dwgdecode...

libreoffice:ww2fuzzer: Stack-use-after-return in WW8SprmIter::UpdateMyMembers

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4685123800662016 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: ww2fuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Stack-use-after-return READ 1 Crash...

OSV-2023-1097 Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63766 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst java.base/java.util.stream.ReferencePipeline$3$1.accept...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=5068856647090176 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.compiler.CoreFunction.toString

Detailed Report: https://oss-fuzz.com/testcase?key=5567284464451584 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

php:php-fuzz-tracing-jit: Heap-use-after-free in zend_jit_trace_execute

Detailed Report: https://oss-fuzz.com/testcase?key=6620480725188608 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-tracing-jit Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x60600001bfe8 Crash State: zendjittraceexecute...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5068859130118144 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

OSV-2023-1079 Heap-buffer-overflow in Calc_Length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63648 Crash type: Heap-buffer-overflow READ 1 Crash state: CalcLength RunIns InstanceReset...

OSV-2023-1073 Heap-buffer-overflow in H5D__scatter_mem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63610 Crash type: Heap-buffer-overflow WRITE Crash state: H5Dscattermem H5Dscatgathread H5Dcontigread...

OSV-2023-1071 Heap-use-after-free in igraph_pajek_yyparse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63609 Crash type: Heap-use-after-free READ 11 Crash state: igraphpajekyyparse igraphreadgraphpajek readpajek.cpp...

matio:matio_fuzzer: Heap-buffer-overflow in H5D__scatter_mem

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=4926816491798528 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow WRI...

OSV-2023-1070 Segv on unknown address in igraph_strvector_set_len

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63599 Crash type: Segv on unknown address Crash state: igraphstrvectorsetlen igraphipajekaddstringattribute igraphpajekyyparse...

OSV-2023-1069 Heap-use-after-free in igraph_pajek_yyparse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63590 Crash type: Heap-use-after-free READ 3 Crash state: igraphpajekyyparse igraphreadgraphpajek readpajek.cpp...

OSV-2023-1068 Heap-buffer-overflow in iasecc_parse_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63587 Crash type: Heap-buffer-overflow READ 1 Crash state: iaseccparsesize iaseccparsegettlv iaseccparsedocp...

igraph:read_pajek: Heap-use-after-free in igraph_pajek_yyparse

Project: https://github.com/igraph/igraph.git Detailed Report: https://oss-fuzz.com/testcase?key=4614971801337856 Project: igraph Fuzzing Engine: libFuzzer Fuzz Target: readpajek Job Type: libfuzzerasanigraph Platform Id: linux Crash Type: Heap-use-after-free READ 11 Crash Address: 0x62900000a215...

php:php-fuzz-tracing-jit: Segv on unknown address in cleanup_live_vars

Detailed Report: https://oss-fuzz.com/testcase?key=5580128027279360 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: cleanuplivevars...

igraph:read_pajek: Segv on unknown address in igraph_strvector_set_len

Project: https://github.com/igraph/igraph.git Detailed Report: https://oss-fuzz.com/testcase?key=6410115693281280 Project: igraph Fuzzing Engine: libFuzzer Fuzz Target: readpajek Job Type: libfuzzerasanigraph Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...