OSV-2023-1063 Heap-double-free in dwg_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63537 Crash type: Heap-double-free Crash state: dwgfreeobject dwgfree llvmfuzz.c...

OSV-2023-1062 Heap-buffer-overflow in H5MM_xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63566 Crash type: Heap-buffer-overflow READ Crash state: H5MMxstrdup H5Genttolink H5Gnodeiterate...

OSV-2023-1059 Out-of-memory in IndexSearchFuzzer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63512 Crash type: Out-of-memory Crash state: IndexSearchFuzzer...

libredwg:llvmfuzz: Heap-double-free in dwg_free_object

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5787493041307648 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x603000009230 Cra...

libreoffice:tiffuzzer: Heap-buffer-overflow in putcontig8bitYCbCr22tile

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4712256065372160 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: tiffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

matio:matio_fuzzer: Heap-buffer-overflow in H5MM_strdup

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=4716413224615936 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow REA...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in put_weighted_bipred_8_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=6143058888228864 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: putweightedbipred8fallback...

libredwg:llvmfuzz: Heap-buffer-overflow in dwg_json_VPORT_private

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4876616779825152 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Stack-buffer-overflow in read_distribution_bundle

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5967000670961664 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in put_weighted_pred_16_fallback

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4875925659189248 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick:encoder_bmp_fuzzer: Heap-buffer-overflow in ReadBMPImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4672093356425216 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderbmpfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 2...

OSV-2023-1033 Heap-buffer-overflow in Gfx::InputStreamer::read_u32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63357 Crash type: Heap-buffer-overflow READ 1 Crash state: Gfx::InputStreamer::readu32 Gfx::setdibbitmasks Gfx::decodebmpdib...

rdf4j:ParserFuzzer: Security exception in org.eclipse.rdf4j.query.algebra.Join.visit

Project: https://github.com/eclipse/rdf4j.git Detailed Report: https://oss-fuzz.com/testcase?key=5046526902403072 Project: rdf4j Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanrdf4j Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::HMPImporter::CreateOutputFaceList

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5028159340544000 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

OSV-2023-1025 Heap-buffer-overflow in ucl_hash_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63299 Crash type: Heap-buffer-overflow READ 8 Crash state: uclhashdestroy uclobjectdtorunrefsingle uclobjectdtorunref...

OSV-2023-1016 Use-of-uninitialized-value in Render_Single_Pass

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63241 Crash type: Use-of-uninitialized-value Crash state: RenderSinglePass RenderGlyph ftblackrender...

OSV-2023-1014 Security exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63242 Crash type: Security exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$14.handleMissingTr org.jsoup.parser.HtmlTreeBuilderState$14.process...

llvm:clangd-fuzzer: Heap-buffer-overflow in llvm::raw_ostream::copy_to_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=6365487988342784 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clangd-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x625000004900 Crash State: llvm::rawostream::copytobuffer...

OSV-2023-1009 Security exception in net.jsign.bouncycastle.asn1.ASN1StreamParser.readVector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63217 Crash type: Security exception Crash state: net.jsign.bouncycastle.asn1.ASN1StreamParser.readVector net.jsign.bouncycastle.asn1.ASN1StreamParser.loadTaggedIL net.jsign.bouncycastle.asn1.BERTaggedObjectParser.getLoadedObj...

serenity:FuzzRegexECMA262: Stack-buffer-overflow in ak_verification_failed

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5703549306404864 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzRegexECMA262 Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Addres...