OSV-2023-634 Heap-buffer-overflow in bit_read_BB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60993 Crash type: Heap-buffer-overflow READ 1 Crash state: bitreadBB bitreadBS dwgdecodeATTDEFprivate...

jflex:JflexFuzzer: Security exception in jflex.core.NFA.insertNFA

Project: https://github.com/jflex-de/jflex.git Detailed Report: https://oss-fuzz.com/testcase?key=5205865563815936 Project: jflex Fuzzing Engine: libFuzzer Fuzz Target: JflexFuzzer Job Type: libfuzzerasanjflex Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2023-631 Heap-buffer-overflow in test_verify

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60971 Crash type: Heap-buffer-overflow READ Crash state: testverify fuzzpkcs11.c...

OSV-2023-627 Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60964 Crash type: Security exception Crash state: org.apache.lucene.util.automaton.RegExp.toAutomaton java.base/java.util.BitSet.ensureCapacity java.base/java.util.BitSet.expandTo...

opensc:fuzz_pkcs11: Heap-buffer-overflow in test_verify

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6035284045987840 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs11 Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61d00000135c...

sqlite3:ossfuzz: Heap-buffer-overflow in sqlite3VdbeMemGrow

Detailed Report: https://oss-fuzz.com/testcase?key=6677944297455616 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzerasansqlite3 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x623000ccf480 Crash State: sqlite3VdbeMemGrow...

sqlite3:ossfuzz: Heap-buffer-overflow in sqlite3VdbeExec

Detailed Report: https://oss-fuzz.com/testcase?key=5258858447372288 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzerasani386sqlite3 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0xf2d588e8 Crash State: sqlite3VdbeExec sqlite3step...

imagemagick:encoder_wpg_fuzzer: Use-of-uninitialized-value in WPGAddRLEByte

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5490519219503104 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderwpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

OSV-2023-623 Heap-use-after-free in Elf32_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60863 Crash type: Heap-use-after-free READ 8 Crash state: Elf32free destroy rbinfilefree...

fuzzywuzzy:DiffUtilsFuzzer: Security exception in me.xdrop.diffutils.DiffUtils.getEditOps

Project: https://github.com/xdrop/fuzzywuzzy.git Detailed Report: https://oss-fuzz.com/testcase?key=4676574094688256 Project: fuzzywuzzy Fuzzing Engine: libFuzzer Fuzz Target: DiffUtilsFuzzer Job Type: libfuzzerasanfuzzywuzzy Platform Id: linux Crash Type: Security exception Crash Address: Crash...

OSV-2023-619 Security exception in java.base/java.util.regex.Pattern$GroupTail.match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60846 Crash type: Security exception Crash state: java.base/java.util.regex.Pattern$GroupTail.match java.base/java.io.BufferedWriter.ensureOpen java.base/java.io.BufferedWriter.write...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-buffer-overflow in flb_sds_create_len

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6284604297052160 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type:...

OSV-2023-610 Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60782 Crash type: Security exception Crash state: org.apache.lucene.util.automaton.RegExp.toAutomaton java.base/java.util.BitSet.ensureCapacity java.base/java.util.BitSet.expandTo...

OSV-2023-606 Heap-buffer-overflow in ZSTD_decompressMultiFrame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60778 Crash type: Heap-buffer-overflow READ Crash state: ZSTDdecompressMultiFrame ZSTDdecompressusingDDict zstdwrapdecompress...

OSV-2023-604 Segv on unknown address in ucl_object_free_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60789 Crash type: Segv on unknown address Crash state: uclobjectfreeinternal uclparserfree ucladdstringfuzzer.c...

ffmpeg:ffmpeg_dem_FLV_fuzzer: Heap-buffer-overflow in flv_read_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5433076799635456 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemFLVfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in ZSTD_decompressMultiFrame

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5372678956253184 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasani386c-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

OSV-2023-599 Negative-size-param in passDoAction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60723 Crash type: Negative-size-param Crash state: passDoAction translateString loutranslate...

OSV-2023-598 Heap-use-after-free in zval_call_destructor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60734 Crash type: Heap-use-after-free READ 4 Crash state: zvalcalldestructor zendhashreverseapply shutdowndestructors...

OSV-2023-586 Heap-buffer-overflow in setcos_create_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60672 Crash type: Heap-buffer-overflow READ 1 Crash state: setcoscreatekey scpkcs15initgeneratekey dogeneratekey...