CVE-2022-40157

Removed by vendor...

ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_search_irc_tcp

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4761844585988096 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireader Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 9 Crash Address: 0x60600068fed9 Crash State:...

hunspell:affdicfuzzer: Heap-use-after-free in AffixMgr::defcpd_check

Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=4737692206497792 Project: hunspell Fuzzing Engine: libFuzzer Fuzz Target: affdicfuzzer Job Type: libfuzzerasani386hunspell Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...

OSV-2022-1018 Index-out-of-bounds in LibRaw::kodak_radc_load_raw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52139 Crash type: Index-out-of-bounds Crash state: LibRaw::kodakradcloadraw LibRaw::unpack LoadRAW...

CVE-2022-40159

CVE-2022-40159 concerns a DoS due to a stack-based buffer overflow in parsing XPath by JXPath. The CVE entry is explicitly marked as DISPUTED/invalid in multiple sources (NVD OSV/GHSA withdrawals), and no confirmatory public technical details are provided beyond the described overflow. IBM bullet...

CVE-2022-40159 Stack Overflow in JXPath

DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...

CVE-2022-40160

CVE-2022-40160 describes a Denial of Service in JXPath due to a stack-based buffer overflow while parsing XPath. Connected IBM bulletins note this affects IBM Content Navigator components (JXPath package) and provide remediation: upgrade to IBM Content Navigator 3.0.12 IF004 or 3.0.11 IF008 plus ...

CVE-2022-40160 Stack Overflow in JXPath

DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...

CVE-2022-40159

DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...

CVE-2022-40159

Removed by vendor...

CVE-2022-40160

Removed by vendor...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-underflow in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=5215827964329984 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7ffcea12c39c Crash State:...

OSV-2022-1015 Heap-use-after-free in msFreeMap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52102 Crash type: Heap-use-after-free READ 8 Crash state: msFreeMap msLoadMap mapfuzzer.c...

protobuf-java has a potential Denial of Service issue

Summary A potential Denial of Service issue in protobuf-java core and lite was discovered in the parsing procedure for binary and text format data. Input streams containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted...

graphicsmagick:coder_ICB_fuzzer: Heap-buffer-overflow in ReadBlob

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6148981382316032 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderICBfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

junrar:JunrarFuzzer: Security exception in com.github.junrar.io.RawDataIo.read

Project: https://github.com/junrar/junrar.git Detailed Report: https://oss-fuzz.com/testcase?key=6063114919739392 Project: junrar Fuzzing Engine: libFuzzer Fuzz Target: JunrarFuzzer Job Type: libfuzzerasanjunrar Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

libucl:ucl_add_string_fuzzer: Segv on unknown address in kh_get_ucl_hash_caseless_node

Detailed Report: https://oss-fuzz.com/testcase?key=5487912297037824 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: khgetuclhashcaselessnode uclhashsearch...

OSV-2022-1008 Heap-buffer-overflow in cli_js_parse_done

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52038 Crash type: Heap-buffer-overflow READ 4 Crash state: clijsparsedone clihtmlnormalise htmlnormalisemap...

ruby:fuzz_ruby_gems: Use-after-poison in /mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_ruby_e5a0a396033f4deba21

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4999828282671104 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzrubygems Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x7fcf2a184bf0 Crash...

haproxy:fuzz_cfg_parser: Heap-buffer-overflow in parse_line

Project: https://github.com/haproxy/haproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=4952538231472128 Project: haproxy Fuzzing Engine: afl Fuzz Target: fuzzcfgparser Job Type: aflasanhaproxy Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x619000000b14 Cra...