PT-2022-36719 · Git +1 · Ruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported due to a use-after-poison READ 1 error. The issue was identified through an OSS-Fuzz report. No information is available about...

OSV-2022-1106 Heap-buffer-overflow in APFSJObject::add_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52764 Crash type: Heap-buffer-overflow READ Crash state: APFSJObject::addentry APFSJObject::APFSJObject APFSJObject::APFSJObject...

OSV-2022-1104 Stack-buffer-overflow in LibRaw::xtrans_interpolate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52775 Crash type: Stack-buffer-overflow WRITE 4 Crash state: LibRaw::xtransinterpolate LibRaw::dcrawprocess RAWHandler::read...

OSV-2022-1102 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52783 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

OSV-2022-1101 UNKNOWN READ in APFSBtreeNodeIterator<APFSJObjBtreeNode> APFSJObjBtreeNode::find<unsigned long,

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52740 Crash type: UNKNOWN READ Crash state: APFSBtreeNodeIterator APFSJObjBtreeNode::find, APFSBtreeNodeIteratorA APFSJObjTree::obj...

spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.standard.InternalSpelExpressionParser.eatExp

Project: https://github.com/spring-projects/spring-data-mongodb.git Detailed Report: https://oss-fuzz.com/testcase?key=5107868882042880 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linu...

suricata:fuzz_mimedecparseline: Segv on unknown address with empty stacktrace

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5183788250693632 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzmimedecparseline Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: Segv on unknown address Crash Address: Cra...

PT-2022-36711 · Git +1 · Openexr

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash state involves several functions: fasthuf initialize,...

libraw:libraw_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5021655269507072 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawfuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

clickhouse:lz4_decompress_fuzzer: Heap-buffer-overflow in lz4_decompress_fuzzer

Project: https://github.com/ClickHouse/ClickHouse.git Detailed Report: https://oss-fuzz.com/testcase?key=6308134134349824 Project: clickhouse Fuzzing Engine: libFuzzer Fuzz Target: lz4decompressfuzzer Job Type: libfuzzerasanclickhouse Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8...

openexr:openexr_exrcorecheck_fuzzer: Heap-buffer-overflow in fasthuf_initialize

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5679909544001536 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcorecheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflo...

fluxcd:fuzz_gitlab: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4621828840882176 Project: fluxcd Fuzzing Engine: libFuzzer Fuzz Target: fuzzgitlab Job Type: libfuzzerasanfluxcd Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

OSV-2022-1097 Stack-use-after-return in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52691 Crash type: Stack-use-after-return READ 4 Crash state: gstype2interpret pdficffglyphoutline gsdefaultglyphinfo...

OSV-2022-1096 Security exception in jaz.Zer.<clinit>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52699 Crash type: Security exception Crash state: jaz.Zer. java.base/java.lang.Class.forName0 java.base/java.lang.Class.forName...

OSV-2022-1094 Security exception in com.google.common.hash.Hashing$ConcatenatedHashFunction.makeHash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52693 Crash type: Security exception Crash state: com.google.common.hash.Hashing$ConcatenatedHashFunction.makeHash com.google.common.hash.AbstractCompositeHashFunction$1.hash HashingFuzzer.testHash...

h2database:SqlPreparedStatementFuzzer: Security exception in java.base/java.util.ArrayList.grow

Detailed Report: https://oss-fuzz.com/testcase?key=4808538665123840 Project: h2database Fuzzing Engine: libFuzzer Fuzz Target: SqlPreparedStatementFuzzer Job Type: libfuzzerasanh2database Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2022-1093 Heap-buffer-overflow in LibRaw::kodak_rgb_load_raw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52672 Crash type: Heap-buffer-overflow WRITE 2 Crash state: LibRaw::kodakrgbloadraw LibRaw::kodakthumbloader LibRaw::unpackthumb...

OSV-2022-1089 Heap-buffer-overflow in parse_subrip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52634 Crash type: Heap-buffer-overflow READ 1 Crash state: parsesubrip parsewebvtt gstsubparsechain...

guava:HashingFuzzer: Security exception in com.google.common.hash.Hashing$ConcatenatedHashFunction.makeHash

Project: https://github.com/google/guava.git Detailed Report: https://oss-fuzz.com/testcase?key=4555451249590272 Project: guava Fuzzing Engine: libFuzzer Fuzz Target: HashingFuzzer Job Type: libfuzzerasanguava Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2022-1087 Heap-buffer-overflow in parse_classes_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52644 Crash type: Heap-buffer-overflow READ 1 Crash state: parseclasses64 classes rbinobjectsetitems...