helm:fuzz_parse_message_block: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6446693029904384 Project: helm Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsemessageblock Job Type: libfuzzerasanhelm Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN...

OSV-2022-926 Heap-buffer-overflow in Ins_PUSHW

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51618 Crash type: Heap-buffer-overflow READ 1 Crash state: InsPUSHW RunIns InstanceReset...

binutils:fuzz_objdump_safe: Heap-use-after-free in bfd_close_all_done

Detailed Report: https://oss-fuzz.com/testcase?key=6410665702588416 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjdumpsafe Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x615000001008 Crash State: bfdclosealldone...

kimageformats:kimgio_raw_fuzzer: Index-out-of-bounds in LibRaw::parse_tiff_ifd

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5487398057803776 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiorawfuzzer Job Type: libfuzzerubsankimageformats Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

OSV-2022-924 Heap-buffer-overflow in file_zmagic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51608 Crash type: Heap-buffer-overflow READ 1 Crash state: filezmagic filebuffer magicbuffer...

spring-security:StrictHttpFirewallFuzzer: Security exception in StrictHttpFirewallFuzzer.validate

Project: https://github.com/spring-projects/spring-security.git Detailed Report: https://oss-fuzz.com/testcase?key=5070561985822720 Project: spring-security Fuzzing Engine: libFuzzer Fuzz Target: StrictHttpFirewallFuzzer Job Type: libfuzzerasanspring-security Platform Id: linux Crash Type: Securi...

OSV-2022-916 Container-overflow in wabt::interp::BinaryReaderInterp::BeginFunctionBody

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51565 Crash type: Container-overflow WRITE 4 Crash state: wabt::interp::BinaryReaderInterp::BeginFunctionBody wabt::ReadBinary wabt::interp::ReadBinaryInterp...

OSV-2022-915 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51552 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.io.StringReader.read com.ctc.wstx.io.MergedReader.read...

go-toml:fuzz_toml: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5513195443322880 Project: go-toml Fuzzing Engine: libFuzzer Fuzz Target: fuzztoml Job Type: libfuzzerasango-toml Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000201350 Crash State: NULL Sanitizer: address ASAN Recommended...

OSV-2022-914 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51492 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.metamodel.BaseNodeMetaModel.getDeclaredPropertyMetaModels...

apache-commons-configuration:YAMLConfigurationWriteFuzzer: Security exception in org.apache.commons.configuration2.AbstractYAMLBasedConfiguration.lambda$parseCol

Detailed Report: https://oss-fuzz.com/testcase?key=4505461327527936 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

OSV-2022-908 Heap-buffer-overflow in element_end

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51480 Crash type: Heap-buffer-overflow READ 4 Crash state: elementend emitendelement gmarkupparsecontextparse...

hunspell:affdicfuzzer: Stack-buffer-overflow in HashMgr::lookup

Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=5122351003467776 Project: hunspell Fuzzing Engine: libFuzzer Fuzz Target: affdicfuzzer Job Type: libfuzzerasanhunspell Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

imagemagick:encoder_tiff64_fuzzer: Use-of-uninitialized-value in WritePixelCachePixels

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5081194177363968 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertiff64fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

tint:tint_spirv_tools_hlsl_writer_fuzzer: Heap-buffer-overflow in tint::reader::spirv::FunctionEmitter::GetEnclosingScope

Detailed Report: https://oss-fuzz.com/testcase?key=5261258064003072 Project: tint Fuzzing Engine: libFuzzer Fuzz Target: tintspirvtoolshlslwriterfuzzer Job Type: libfuzzerasani386tint Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0xf5903d2c Crash State:...

OSV-2022-904 Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51406 Crash type: Heap-use-after-free READ 8 Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypegeos::geom::Coor geos::geomgraph::NodeMap::addNode geos::geomgraph::GeometryGraph::addSelfIntersectionNode...

OSV-2022-901 Heap-double-free in HashMgr::~HashMgr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51432 Crash type: Heap-double-free Crash state: HashMgr::HashMgr HunspellImpl::HunspellImpl Hunspell::Hunspell...

janino:ExpressionEvaluatorFuzzer: Security exception in org.codehaus.janino.util.AbstractTraverser$4.visitLvalue

Project: https://github.com/janino-compiler/janino.git Detailed Report: https://oss-fuzz.com/testcase?key=5159970655567872 Project: janino Fuzzing Engine: libFuzzer Fuzz Target: ExpressionEvaluatorFuzzer Job Type: libfuzzerasanjanino Platform Id: linux Crash Type: Security exception Crash Address...

GHSA-P2G7-XWVR-RRW3 Helm Controller denial of service

Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK allows for specific data inputs to cause high memory consumption, which in some platforms could cause the controller to panic and stop processing reconciliations. Impact In a shared cluster multi-tenanc...

hunspell:affdicfuzzer: Heap-double-free in HashMgr::~HashMgr

Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=4907609198559232 Project: hunspell Fuzzing Engine: afl Fuzz Target: affdicfuzzer Job Type: aflasanhunspell Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x6020000000b0 Crash State...