OSV-2023-51 Heap-use-after-free in ZSTD_freeDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55673 Crash type: Heap-use-after-free READ Crash state: ZSTDfreeDDict blosc2freectx blosc2schunkfree...

OSV-2023-49 Heap-buffer-overflow in lex_scan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55654 Crash type: Heap-buffer-overflow READ 1 Crash state: lexscan zendlex zendparse...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in put_weighted_bipred_8_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=4752781736280064 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: putweightedbipred8fallback...

OSV-2023-48 Global-buffer-overflow in isvce_write_coeff4x4_cavlc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55643 Crash type: Global-buffer-overflow READ 1 Crash state: isvcewritecoeff4x4cavlc isvceencoderesidue isvcewritepslicembcavlc...

c-blosc2:decompress_frame_fuzzer: Heap-use-after-free in ZSTD_freeDDict

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5263177261907968 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address:...

imagemagick:encoder_png64_fuzzer: Heap-buffer-overflow in read_user_chunk_callback

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6337604804280320 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpng64fuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

imagemagick:encoder_png48_fuzzer: Heap-buffer-overflow in FormatLocaleStringList

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4897160979415040 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpng48fuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 15...

OSV-2023-46 Heap-buffer-overflow in json_cquote

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55607 Crash type: Heap-buffer-overflow WRITE 1 Crash state: jsoncquote jsonpreR13headerwriteprivate dwgwritejson...

libredwg:llvmfuzz: Heap-buffer-overflow in bit_read_BB

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5133156690034688 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2023-38 Heap-use-after-free in zend_generator_dtor_storage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55519 Crash type: Heap-use-after-free WRITE 4 Crash state: zendgeneratordtorstorage zendobjectsstorecalldestructors shutdowndestructors...

OSV-2022-1267 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55390 Crash type: Memcpy-param-overlap Crash state: repeat pere pere...

PT-2023-35517 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Memcpy-param-overlap, according to an OSS-Fuzz report. The crash state includes repeat and p ere, but ...

clamav:clamav_dbload_CDB_fuzzer: Memcpy-param-overlap in repeat

Detailed Report: https://oss-fuzz.com/testcase?key=6192625778819072 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x7f078c1b43f0,0x7f078e5888e0 and 0x7f0789ddff08,...

OSV-2023-31 Heap-use-after-free in zip_source_open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55365 Crash type: Heap-use-after-free READ 1 Crash state: zipsourceopen zipsourceopen zipopen...

libucl:ucl_add_string_fuzzer: Heap-use-after-free in ucl_hash_func

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=6358555802599424 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

libzip:zip_read_fuzzer: Heap-use-after-free in zip_source_open

Project: https://github.com/nih-at/libzip.git Detailed Report: https://oss-fuzz.com/testcase?key=4820171095408640 Project: libzip Fuzzing Engine: honggfuzz Fuzz Target: zipreadfuzzer Job Type: honggfuzzasanlibzip Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

OSV-2023-27 Heap-buffer-overflow in OT::Layout::GPOS_impl::PairSet<OT::Layout::MediumTypes>::apply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55287 Crash type: Heap-buffer-overflow READ 1 Crash state: OT::Layout::GPOSimpl::PairSet::apply OT::Layout::GPOSimpl::PairPosFormat13::apply bool OT::hbacceleratesubtablescontextt::applytoOT::Layout::GPOSimpl::Pair...

OSV-2023-25 Heap-buffer-overflow in blkid_uuid_is_empty

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55318 Crash type: Heap-buffer-overflow READ 1 Crash state: blkiduuidisempty blkidprobesetuuidas probebcachefs...

imagemagick:encoder_wpg_fuzzer: Use-of-uninitialized-value in WPGAddRLEByte

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5809305855328256 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderwpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

harfbuzz:hb-shape-fuzzer: Heap-buffer-overflow in OT::Layout::GPOS_impl::PairSet<OT::Layout::MediumTypes>::apply

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5965759719538688 Project: harfbuzz Fuzzing Engine: afl Fuzz Target: hb-shape-fuzzer Job Type: aflasanharfbuzz Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6190000009...