OSV-2023-970 Heap-use-after-free in gx_device_forward_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63013 Crash type: Heap-use-after-free READ 8 Crash state: gxdeviceforwardfinalize gxdevicefinalize allocrestorestepin...

OSV-2023-969 Heap-use-after-free in xmlStaticCopyNode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62996 Crash type: Heap-use-after-free READ 4 Crash state: xmlStaticCopyNode xmlDocCopyNode xmlParseReference...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.compiler.CoreFunction.toString

Detailed Report: https://oss-fuzz.com/testcase?key=6376046783758336 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2023-961 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62959 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal java.base/java.lang.AbstractStringBuilder.append...

OSV-2023-959 Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62943 Crash type: Heap-buffer-overflow READ 8 Crash state: dwarfmemcpynoswapbytes fillinuniarch64 dwarfmachosetup...

OSV-2023-957 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62967 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel...

libredwg:llvmfuzz: Heap-buffer-overflow in bit_TV_to_utf8

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5900860527607808 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

libxslt:xslt: Use-of-uninitialized-value in xmlParseElementStart

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=4584600221122560 Project: libxslt Fuzzing Engine: libFuzzer Fuzz Target: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

OSV-2023-955 Security exception in org.apache.poi.ddf.EscherPropertyFactory$$Lambda$285/ADDRESS.apply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62924 Crash type: Security exception Crash state: org.apache.poi.ddf.EscherPropertyFactory$$Lambda$285/ADDRESS.apply org.apache.poi.ddf.EscherPropertyFactory.createProperties org.apache.poi.ddf.AbstractEscherOptRecord.fillFiel...

OSV-2023-953 Heap-buffer-overflow in xmlDictLookupInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62911 Crash type: Heap-buffer-overflow READ Crash state: xmlDictLookupInternal xmlDictLookup htmlParseNameComplex...

mybatis-3:ResolverUtilFuzzer: Security exception in org.apache.ibatis.io.DefaultVFS.list

Detailed Report: https://oss-fuzz.com/testcase?key=6190912822444032 Project: mybatis-3 Fuzzing Engine: libFuzzer Fuzz Target: ResolverUtilFuzzer Job Type: libfuzzerasanmybatis-3 Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.apache.ibatis.io.DefaultVFS.list...

apache-poi:POIHSLFFuzzer: Security exception in org.apache.poi.ddf.EscherPropertyFactory$$Lambda$285/ADDRESS.apply

Detailed Report: https://oss-fuzz.com/testcase?key=6614960949821440 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIHSLFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2023-948 Global-buffer-overflow in isvce_write_coeff4x4_cavlc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62896 Crash type: Global-buffer-overflow READ 1 Crash state: isvcewritecoeff4x4cavlc isvceencoderesidue isvcewritepslicembcavlc...

opencsv:CSVReaderFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Detailed Report: https://oss-fuzz.com/testcase?key=5409066396286976 Project: opencsv Fuzzing Engine: libFuzzer Fuzz Target: CSVReaderFuzzer Job Type: libfuzzerasanopencsv Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

libxml2:html: Heap-buffer-overflow in xmlDictLookupInternal

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5231780321689600 Project: libxml2 Fuzzing Engine: afl Fuzz Target: html Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x619000014498 Crash Stat...

mbedtls:fuzz_server: Segv on unknown address in mbedtls_free

Project: https://github.com/ARMmbed/mbedtls.git https://github.com/catenacyber/mbedtls.git https://github.com/Mbed-TLS/mbedtls.git Detailed Report: https://oss-fuzz.com/testcase?key=5983027144294400 Project: mbedtls Fuzzing Engine: libFuzzer Fuzz Target: fuzzserver Job Type: libfuzzerasanmbedtls...

libavc:svc_enc_fuzzer: Global-buffer-overflow in isvce_write_coeff4x4_cavlc

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=5940830567006208 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: svcencfuzzer Job Type: libfuzzerasani386libavc Platform Id:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in decoder_context::construct_reference_picture_lists

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6401129057222656 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

OSV-2023-942 Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62864 Crash type: Security exception Crash state: com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer java.base/sun.nio.cs.CESU8$Encoder.encodeArrayLoop java.base/sun.nio.cs.CESU8$Encoder.encodeLoo...

libzip:zip_write_encrypt_pkware_file_fuzzer: Use-of-uninitialized-value in _zip_stdio_op_write

Detailed Report: https://oss-fuzz.com/testcase?key=4874869814460416 Project: libzip Fuzzing Engine: libFuzzer Fuzz Target: zipwriteencryptpkwarefilefuzzer Job Type: libfuzzermsanlibzip Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: zipstdioopwrite readfile...