OSV-2023-795 Security exception in org.apache.poi.hwpf.converter.AbstractWordConverter.processNoteAnchor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62068 Crash type: Security exception Crash state: org.apache.poi.hwpf.converter.AbstractWordConverter.processNoteAnchor org.apache.poi.hwpf.converter.AbstractWordConverter.processCharacters...

OSV-2023-793 Security exception in org.apache.lucene.util.BytesRefBuilder.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62034 Crash type: Security exception Crash state: org.apache.lucene.util.BytesRefBuilder. org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone...

libxaac:xaac_enc_fuzzer: Global-buffer-overflow in iusace_estimate_scfs_chan

Project: https://github.com/ittiam-systems/libxaac.git Detailed Report: https://oss-fuzz.com/testcase?key=4522498354708480 Project: libxaac Fuzzing Engine: libFuzzer Fuzz Target: xaacencfuzzer Job Type: libfuzzerasanlibxaac Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Addres...

ffmpeg:ffmpeg_dem_JPEGXL_ANIM_fuzzer: Heap-buffer-overflow in jpegxl_anim_read_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5524679648215040 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemJPEGXLANIMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x60d00000033c...

OSV-2023-783 Use-after-poison in parser_yylex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61941 Crash type: Use-after-poison READ 8 Crash state: parseryylex rubyyyparse yycompile0...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.compiler.CoreFunction.toString

Detailed Report: https://oss-fuzz.com/testcase?key=4761020974104576 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6167358723719168 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

curl:curl_fuzzer_ws: Heap-double-free in curl_dbg_free

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5924559340306432 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerws Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: Heap-double-free Crash Address: 0xf5400760 Crash State:...

OSV-2023-776 Heap-buffer-overflow in ndpi_domain_classify_contains

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61882 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpidomainclassifycontains ndpigetcustomcategorymatch ndpimatchhostsubprotocol...

OSV-2023-775 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61895 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

libxaac:xaac_enc_fuzzer: Global-buffer-overflow in iusace_estimate_scfs_chan

Project: https://github.com/ittiam-systems/libxaac.git Detailed Report: https://oss-fuzz.com/testcase?key=6210285227343872 Project: libxaac Fuzzing Engine: honggfuzz Fuzz Target: xaacencfuzzer Job Type: honggfuzzasanlibxaac Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Addres...

OSV-2023-764 Heap-buffer-overflow in pim_pim_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61854 Crash type: Heap-buffer-overflow READ 2 Crash state: pimpimpacket pimmain.c...

pyvex:irsb_fuzzer: Crash in getUInt

Project: https://github.com/angr/pyvex.git Detailed Report: https://oss-fuzz.com/testcase?key=4884710025986048 Project: pyvex Fuzzing Engine: libFuzzer Fuzz Target: irsbfuzzer Job Type: libfuzzerasanpyvex Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x618000220000 Crash State: getUI...

frr:pimd: Heap-buffer-overflow in pim_pim_packet

Project: https://github.com/FRRouting/frr.git Detailed Report: https://oss-fuzz.com/testcase?key=4552675717677056 Project: frr Fuzzing Engine: libFuzzer Fuzz Target: pimd Job Type: libfuzzerasanfrr Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60300000583c Crash Stat...

OSV-2023-758 Heap-double-free in bit_TV_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61818 Crash type: Heap-double-free Crash state: bitTVtoutf8 jsoncquote jsonheaderwriteprivate...

javaparser:parseFuzzer: Security exception in com.github.javaparser.CommentsInserter.insertComments

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4672626906497024 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in ICMPinfo::dissectICMP

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=5847574912040960 Project: ntopng Fuzzing Engine: afl Fuzz Target: fuzzdissectpacket Job Type: aflasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x606000fc6a20 Crash...

llvm:clang-fuzzer: Crash in clang::CharLiteralParser::CharLiteralParser

Detailed Report: https://oss-fuzz.com/testcase?key=4840018089476096 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00270000005f Crash State: clang::CharLiteralParser::CharLiteralParser...

OSV-2023-756 Heap-buffer-overflow in rawspeed::DngDecoder::decodeMetaDataInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61800 Crash type: Heap-buffer-overflow READ 4 Crash state: rawspeed::DngDecoder::decodeMetaDataInternal rawspeed::RawDecoder::decodeMetaData...

libxaac:xaac_enc_fuzzer: Heap-buffer-overflow in ixheaace_process

Project: https://github.com/ittiam-systems/libxaac.git Detailed Report: https://oss-fuzz.com/testcase?key=5412896396673024 Project: libxaac Fuzzing Engine: libFuzzer Fuzz Target: xaacencfuzzer Job Type: libfuzzerasani386libxaac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...