OSV-2023-1008 Heap-use-after-free in gx_image_enum_begin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63185 Crash type: Heap-use-after-free WRITE 8 Crash state: gximageenumbegin gxbeginimage1 gxdefaultbegintypedimage...

OSV-2023-1004 Heap-buffer-overflow in ndpi_snprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63179 Crash type: Heap-buffer-overflow WRITE 11 Crash state: ndpisnprintf ndpiserializestringint32 fuzzserialization.cpp...

binutils:fuzz_objdump_safe: Invalid-free in alpha_ecoff_get_relocated_section_contents

Detailed Report: https://oss-fuzz.com/testcase?key=6396822459121664 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzobjdumpsafe Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Invalid-free Crash Address: 0x6020000000b8 Crash State: alphaecoffgetrelocatedsectioncontents...

ghostscript:gs_device_tiffsep1_fuzzer: Heap-use-after-free in gx_image_enum_begin

Detailed Report: https://oss-fuzz.com/testcase?key=6443257430933504 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address: 0x62b00000e748 Crash State:...

OSV-2023-1001 Security exception in java.base/java.lang.String.repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63154 Crash type: Security exception Crash state: java.base/java.lang.String.repeat org.springframework.expression.spel.ast.OpMultiply.getValueInternal org.springframework.expression.spel.ast.MethodReference.getArguments...

OSV-2023-1000 Heap-use-after-free in xmlParserPrintFileContextInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63157 Crash type: Heap-use-after-free READ 1 Crash state: xmlParserPrintFileContextInternal xmlReportError xmlRaiseError...

opensc:fuzz_pkcs15_crypt: Heap-buffer-overflow in iasecc_parse_get_tlv

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6047128033820672 Project: opensc Fuzzing Engine: honggfuzz Fuzz Target: fuzzpkcs15crypt Job Type: honggfuzzasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

OSV-2023-999 Heap-buffer-overflow in xmlParseCommentComplex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63127 Crash type: Heap-buffer-overflow WRITE 1 Crash state: xmlParseCommentComplex xmlParseComment xmlParseMisc...

apache-poi:POIHSSFFuzzer: Security exception in java.base/java.util.regex.Pattern$Branch.match

Detailed Report: https://oss-fuzz.com/testcase?key=4657005060816896 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSSFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.regex.Pattern$Branch.mat...

libxslt:xslt: Heap-buffer-overflow in xmlCopyCharMultiByte

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5579223492067328 Project: libxslt Fuzzing Engine: libFuzzer Fuzz Target: xslt Job Type: libfuzzerasanlibxslt Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

OSV-2023-993 Stack-buffer-overflow in entersafe_reverse_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63104 Crash type: Stack-buffer-overflow READ 1 Crash state: entersafereversebuffer entersafegenkey entersafecardctlNUMBER...

OSV-2023-990 Heap-use-after-free in __xmlRaiseError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63092 Crash type: Heap-use-after-free READ 8 Crash state: xmlRaiseError xmlFatalErr xmlStringDecodeEntitiesInt...

OSV-2023-989 Heap-buffer-overflow in load_sections_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63074 Crash type: Heap-buffer-overflow READ Crash state: loadsections64 parseclasses64 classes...

OSV-2023-988 Heap-buffer-overflow in xmlCopyCharMultiByte

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63086 Crash type: Heap-buffer-overflow WRITE 1 Crash state: xmlCopyCharMultiByte xmlParseCommentComplex xmlParseComment...

libxml2:xpath: Heap-buffer-overflow in xmlCopyCharMultiByte

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5952232040038400 Project: libxml2 Fuzzing Engine: afl Fuzz Target: xpath Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x6020000001b4 Crash...

libxslt:xslt: Heap-buffer-overflow in xmlParseCommentComplex

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5238655469617152 Project: libxslt Fuzzing Engine: honggfuzz Fuzz Target: xslt Job Type: honggfuzzasanlibxslt Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

OSV-2023-980 UNKNOWN READ in skip_chunk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63051 Crash type: UNKNOWN READ Crash state: skipchunk httpcb fuzz.c...

OSV-2023-978 UNKNOWN READ in google::ParseTemplateArg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63034 Crash type: UNKNOWN READ Crash state: google::ParseTemplateArg google::ParseTemplateArg google::ParseEncoding...

OSV-2023-976 Heap-buffer-overflow in Flow::dissectMDNS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63060 Crash type: Heap-buffer-overflow READ 2 Crash state: Flow::dissectMDNS NetworkInterface::processPacket NetworkInterface::dissectPacket...

OSV-2023-974 UNKNOWN READ in r_str_ncpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63030 Crash type: UNKNOWN READ Crash state: rstrncpy Elf64loadsymbolsfrom Elf64loadsymbols...