OSV-2023-705 Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61493 Crash type: Security exception Crash state: org.apache.lucene.util.automaton.RegExp.toAutomaton java.base/java.util.BitSet.ensureCapacity java.base/java.util.BitSet.expandTo...

lwan:template_fuzzer: Crash in template_fuzzer.cc

Detailed Report: https://oss-fuzz.com/testcase?key=6200763800748032 Project: lwan Fuzzing Engine: afl Fuzz Target: templatefuzzer Job Type: aflasanlwan Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7c1149f675e0 Crash State: templatefuzzer.cc LLVMFuzzerRunDriver Sanitizer: address...

flex:fuzz-main: Crash in sf_push

Project: https://github.com/westes/flex.git Detailed Report: https://oss-fuzz.com/testcase?key=4918187777720320 Project: flex Fuzzing Engine: libFuzzer Fuzz Target: fuzz-main Job Type: libfuzzerubsanflex Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000001fa81cc Crash State: sfpush...

OSV-2023-697 Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61443 Crash type: Heap-buffer-overflow READ 1 Crash state: IEC104Stats::processPacket Flow::processIEC60870Packet NetworkInterface::processPacket...

OSV-2023-696 Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61423 Crash type: Security exception Crash state: org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone org.apache.lucene.analysis.tokenattributes.PackedTokenAttributeImpl.clone...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in IEC104Stats::processPacket

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=5311671464493056 Project: ntopng Fuzzing Engine: afl Fuzz Target: fuzzdissectpacket Job Type: aflasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6120000200ff Crash...

OSV-2023-693 Security exception in org.json.JSONArray.writeTo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61399 Crash type: Security exception Crash state: org.json.JSONArray.writeTo org.json.JSONStringer.value org.json.JSONStringer.peek...

OSV-2023-692 Invalid-free in reset_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61397 Crash type: Invalid-free Crash state: resetcontext finishmetric cmtdecodeprometheusparse...

OSV-2023-689 Use-of-uninitialized-value

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61380 Crash type: Use-of-uninitialized-value Crash state: NULL...

OSV-2023-688 Invalid-free in Flow::~Flow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61361 Crash type: Invalid-free Crash state: Flow::Flow Flow::Flow GenericHash::cleanup...

OSV-2023-685 Invalid-free in reset_context

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61339 Crash type: Invalid-free Crash state: resetcontext cmtdecodeprometheuscreate cmetricsdecodefuzz.c...

OSV-2023-684 Heap-use-after-free in __xmlRaiseError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61337 Crash type: Heap-use-after-free READ 2 Crash state: xmlRaiseError htmlParseErr htmlCurrentChar...

OSV-2023-680 Security exception in org.apache.poi.hdgf.streams.PointerContainingStream.findChildren

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61372 Crash type: Security exception Crash state: org.apache.poi.hdgf.streams.PointerContainingStream.findChildren...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value with empty stacktrace

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=6230520521162752 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

threetenbp:ThreetenbpFuzzer: Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse

Project: https://github.com/ThreeTen/threetenbp.git Detailed Report: https://oss-fuzz.com/testcase?key=4541705087746048 Project: threetenbp Fuzzing Engine: libFuzzer Fuzz Target: ThreetenbpFuzzer Job Type: libfuzzerasanthreetenbp Platform Id: linux Crash Type: Security exception Crash Address:...

OSV-2023-676 Security exception in com.github.javaparser.ast.visitor.CloneVisitor.visit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61313 Crash type: Security exception Crash state: com.github.javaparser.ast.visitor.CloneVisitor.visit com.github.javaparser.ast.type.ClassOrInterfaceType.accept com.github.javaparser.ast.visitor.CloneVisitor.cloneNode...

libxslt:xslt: Use-of-uninitialized-value in xmlDetectEncoding

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5241550479949824 Project: libxslt Fuzzing Engine: libFuzzer Fuzz Target: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libxml2:html: Heap-use-after-free in __xmlRaiseError

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5987253640626176 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: html Job Type: libfuzzerasani386libxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0xf50006...

libxslt:xslt: Use-of-uninitialized-value in xmlDetectEncoding

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=4994680088297472 Project: libxslt Fuzzing Engine: libFuzzer Fuzz Target: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

OSV-2023-675 Heap-use-after-free in parse_options

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61292 Crash type: Heap-use-after-free WRITE 4 Crash state: parseoptions appendnewoperation parseoptions...