OSV-2023-279 Heap-use-after-free in filename_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57678 Crash type: Heap-use-after-free READ 3 Crash state: filenamecmp debugstartsource parsestab...

OSV-2023-278 Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_utf32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57670 Crash type: Heap-buffer-overflow WRITE Crash state: simdutf::haswell::implementation::convertutf8toutf32 roundtrip.cc...

mruby:mruby_fuzzer: Heap-use-after-free in mrb_str_hash_m

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5664678188810240 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x60b000004190...

simdutf:roundtrip: Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_utf32

Project: https://github.com/simdutf/simdutf.git Detailed Report: https://oss-fuzz.com/testcase?key=5199727535980544 Project: simdutf Fuzzing Engine: libFuzzer Fuzz Target: roundtrip Job Type: libfuzzerasansimdutf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

OSV-2023-273 Heap-buffer-overflow in add_complete_typeobj

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57614 Crash type: Heap-buffer-overflow READ 8 Crash state: addcompletetypeobj ddsixttypeaddtypeobj ddsitypeaddtypeobj...

assimp:assimp_fuzzer: Heap-use-after-free in aiScene::~aiScene

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5751898438500352 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61a000000c...

simdutf:roundtrip: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6567361061978112 Project: simdutf Fuzzing Engine: libFuzzer Fuzz Target: roundtrip Job Type: libfuzzerubsansimdutf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x003e0000005e Crash State: NULL Sanitizer: undefined UBSAN Recommended...

OSV-2023-271 Heap-buffer-overflow in bit_utf8_to_TU

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57589 Crash type: Heap-buffer-overflow READ 1 Crash state: bitutf8toTU dxfheaderread dwgreaddxf...

OSV-2023-265 Heap-double-free in xmlHashDefaultDeallocator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57551 Crash type: Heap-double-free Crash state: xmlHashDefaultDeallocator xmlHashFree xmlFreeParserCtxt...

OSV-2023-260 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57569 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2023-257 Global-buffer-overflow in read_coding_unit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57566 Crash type: Global-buffer-overflow READ 1 Crash state: readcodingunit readcodingquadtree readcodingquadtree...

fastjson2:JsonFuzzer: Security exception in com.alibaba.fastjson2.writer.ObjectWriterImplMap.write

Project: https://github.com/alibaba/fastjson2.git Detailed Report: https://oss-fuzz.com/testcase?key=4864057160368128 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

PT-2023-35743 · Git +1 · Suricata

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of...

libredwg:llvmfuzz: Heap-buffer-overflow in bit_utf8_to_TU

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5428576051920896 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_object_dtor_unref_single

Detailed Report: https://oss-fuzz.com/testcase?key=5961234968346624 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x603000000530 Crash State: uclobjectdtorunrefsingl...

psqlparse:fuzz_parse: Crash in parser.cpython-38-x86_64-linux-gnu.so

Detailed Report: https://oss-fuzz.com/testcase?key=5442817827930112 Project: psqlparse Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerasanpsqlparse Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6250303d7abb Crash State: parser.cpython-38-x8664-linux-gnu.so...

libxslt:xslt: Heap-double-free in xmlHashDefaultDeallocator

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=6556598008152064 Project: libxslt Fuzzing Engine: libFuzzer Fuzz Target: xslt Job Type: libfuzzerasanlibxslt Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x6130000003c0 Crash...

OSV-2023-252 UNKNOWN READ in iv_put

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57495 Crash type: UNKNOWN READ Crash state: ivput mrbobjivsetforce mrbvmconstset...

OSV-2023-251 Stack-buffer-overflow in ext11_work_out_bundles

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57494 Crash type: Stack-buffer-overflow WRITE 4 Crash state: ext11workoutbundles dissectorancsection dissectoran...

libxml2:html: Use-of-uninitialized-value in htmlParseHTMLAttribute

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4828301205307392 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: html Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...