OSV-2023-188 Global-buffer-overflow in xmlParseQName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57077 Crash type: Global-buffer-overflow READ 1 Crash state: xmlParseQName xmlParseStartTag2 xmlParseElementStart...

OSV-2023-183 UNKNOWN READ in mrb_exc_get_id

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57064 Crash type: UNKNOWN READ Crash state: mrbexcgetid mrbnomethoderror mrbmethodmissing...

OSV-2023-182 Heap-buffer-overflow in FLAC__bitwriter_write_rice_signed_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57071 Crash type: Heap-buffer-overflow WRITE 4 Crash state: FLACbitwriterwritericesignedblock addresidualpartitionedrice FLACsubframeaddfixed...

OSV-2023-181 Heap-double-free in xsltCompileStepPattern

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57061 Crash type: Heap-double-free Crash state: xsltCompileStepPattern xsltCompileRelativePathPattern xsltCompilePatternInternal...

OSV-2023-180 UNKNOWN READ in mrb_obj_iv_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57051 Crash type: UNKNOWN READ Crash state: mrbobjivget classnamestr mrbmodtos...

libxml2:schema: Global-buffer-overflow in xmlDictLookup

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=6314139380482048 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: schema Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

libxml2:html: Global-buffer-overflow in htmlParseDocument

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5680995384033280 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: html Job Type: libfuzzerasani386libxml2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

libxslt:xslt: Global-buffer-overflow in xmlParseContentInternal

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=4577351997718528 Project: libxslt Fuzzing Engine: honggfuzz Fuzz Target: xslt Job Type: honggfuzzasanlibxslt Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

OSV-2023-178 Segv on unknown address in mrb_bint_sub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57037 Crash type: Segv on unknown address Crash state: mrbbintsub intsub mrbvmexec...

OSV-2023-177 Heap-buffer-overflow in mosquitto__strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57002 Crash type: Heap-buffer-overflow READ Crash state: mosquittostrdup configreadfilecore configreadfile...

libxslt:xslt: Heap-double-free in xsltCompileStepPattern

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5277478240518144 Project: libxslt Fuzzing Engine: afl Fuzz Target: xslt Job Type: aflasanlibxslt Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x602000001710 Crash State:...

OSV-2023-176 Heap-use-after-free in mrb_gc_mark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56991 Crash type: Heap-use-after-free READ 4 Crash state: mrbgcmark mrbgcmarkiv gcmarkchildren...

OSV-2023-175 UNKNOWN READ in dissect_oran_c_section

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56990 Crash type: UNKNOWN READ Crash state: dissectorancsection dissectoran calldissectorwork...

OSV-2023-174 Global-buffer-overflow in htmlCurrentChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56964 Crash type: Global-buffer-overflow READ 1 Crash state: htmlCurrentChar htmlParseNameComplex htmlParseName...

imagemagick:encoder_tiff_fuzzer: Use-of-uninitialized-value in TIFFRGBAImageBegin

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5952779941445632 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertifffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

mosquitto:broker_fuzz_test_config: Heap-buffer-overflow in mosquitto__strdup

Project: https://github.com/eclipse/mosquitto.git Detailed Report: https://oss-fuzz.com/testcase?key=4715061584461824 Project: mosquitto Fuzzing Engine: libFuzzer Fuzz Target: brokerfuzztestconfig Job Type: libfuzzerasanmosquitto Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

OSV-2023-170 Invalid-free in hb_free_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56952 Crash type: Invalid-free Crash state: hbfreeimpl OT::glyf::freecompiledsubsetglyphs OT::glyf::populatesubsetglyphs...

mruby:mruby_proto_fuzzer: Heap-use-after-free in mrb_gc_mark

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5450442026123264 Project: mruby Fuzzing Engine: honggfuzz Fuzz Target: mrubyprotofuzzer Job Type: honggfuzzasanmruby Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x62f00001c5...

libxml2:html: Global-buffer-overflow in htmlCurrentChar

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4544440854511616 Project: libxml2 Fuzzing Engine: afl Fuzz Target: html Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000000902283 Crash...

OSV-2023-164 UNKNOWN READ in fp_cmp_mag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56892 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...