OSV-2022-840 Negative-size-param in wc_Sha3_256_Final

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50953 Crash type: Negative-size-param Crash state: wcSha3256Final wcHash wcRsaPadex...

OSV-2022-837 Heap-buffer-overflow in DetectGetLastSMFromMpmLists

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50929 Crash type: Heap-buffer-overflow READ 8 Crash state: DetectGetLastSMFromMpmLists DetectFastPatternSetup SigParse...

OSV-2022-835 Use-of-uninitialized-value in json_buildv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50949 Crash type: Use-of-uninitialized-value Crash state: jsonbuildv jsonbuild showbootentries...

OSV-2022-828 UNKNOWN READ in stream_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50898 Crash type: UNKNOWN READ Crash state: streamfinalize ifreeobject coswritestreamalloc...

kimageformats:kimgio_heif_fuzzer: Global-buffer-overflow in decode_CABAC_bit

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6680981809004544 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash...

OSV-2022-821 Heap-buffer-overflow in ttfOutliner__BuildGlyphOutlineAux

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50847 Crash type: Heap-buffer-overflow READ 4 Crash state: ttfOutlinerBuildGlyphOutlineAux ttfOutlinerOutline gxttfoutline...

OSV-2022-819 Use-of-uninitialized-value in init_main_qtable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50835 Crash type: Use-of-uninitialized-value Crash state: initmainqtable LibRaw::fujidecodestrip LibRaw::fujidecodeloop...

OSV-2022-818 Heap-buffer-overflow in Ins_NPUSHW

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50834 Crash type: Heap-buffer-overflow READ 1 Crash state: InsNPUSHW RunIns InstanceReset...

OSV-2022-815 Negative-size-param in PackChunkyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50832 Crash type: Negative-size-param Crash state: PackChunkyBytes PrecalculatedXFORM cmsDoTransform...

PT-2022-37235 · Git +1 · Lcms

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a negative-size-param, as reported by OSS-Fuzz. The crash involves the functions PackChunkyBytes,...

spring-framework:AspectJExpressionPointcutFuzzer: Security exception in org.aspectj.weaver.tools.PointcutParser.validateAgainstSupportedPrimitives

Project: https://github.com/spring-projects/spring-framework.git Detailed Report: https://oss-fuzz.com/testcase?key=6144883185811456 Project: spring-framework Fuzzing Engine: libFuzzer Fuzz Target: AspectJExpressionPointcutFuzzer Job Type: libfuzzerasanspring-framework Platform Id: linux Crash...

kimageformats:kimgio_heif_fuzzer: Stack-use-after-return in void apply_sao_internal<unsigned short>

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4866556433137664 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioheiffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address:...

gdal:zarr_fuzzer: Crash in CPLStrdup

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6554814057676800 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: zarrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000fc00 Crash State: CPLStrd...

libyal:libfvde_volume_fuzzer: Heap-buffer-overflow in libfvde_metadata_block_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=5410432772341760 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfvdevolumefuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf57015b3 Crash State:...

lcms:cms_universal_transform_fuzzer: Null-dereference READ in cmsDoTransform

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=6518259591020544 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsuniversaltransformfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

lcms:cms_universal_transform_fuzzer: Null-dereference READ with empty stacktrace

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=5199561756377088 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsuniversaltransformfuzzer Job Type: libfuzzerasani386lcms Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

lcms:cms_universal_transform_fuzzer: Negative-size-param in PackChunkyBytes

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=4938102635888640 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsuniversaltransformfuzzer Job Type: libfuzzerasani386lcms Platform Id: linux Crash Type: Negative-size-param Crash Address: Cra...

OSV-2022-808 Use-of-uninitialized-value in _dbus_marshal_write_basic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50762 Crash type: Use-of-uninitialized-value Crash state: dbusmarshalwritebasic dbustypewriterwritebasic writebasicfield...

OSV-2022-805 Global-buffer-overflow in get_unpack_proc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50731 Crash type: Global-buffer-overflow READ 8 Crash state: getunpackproc xpsbegintypedimage defaultsubclassbegintypedimage...

OSV-2022-804 Heap-buffer-overflow in _cmsMAT3per

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50725 Crash type: Heap-buffer-overflow READ 8 Crash state: cmsMAT3per OptimizeMatrixShaper cmsOptimizePipeline...