OSV-2022-803 Segv on unknown address in gs_fapi_ft_get_scaled_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50720 Crash type: Segv on unknown address Crash state: gsfapiftgetscaledfont gsfapipreparefont gsfapipassfont...

jettison:JsonFuzzer: Timeout in JsonFuzzer

Project: https://github.com/jettison-json/jettison.git Detailed Report: https://oss-fuzz.com/testcase?key=6208570705707008 Project: jettison Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjettison Platform Id: linux Crash Type: Timeout exceeds 60 secs Crash Address: Cras...

OSV-2022-802 Heap-use-after-free in UA_Server_networkCallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50699 Crash type: Heap-use-after-free READ 4 Crash state: UAServernetworkCallback fuzzbinarymessage.cc UAmemoryManagerfree...

OSV-2022-799 Incorrect-function-pointer-type in grk::BufferedStream::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50661 Crash type: Incorrect-function-pointer-type Crash state: grk::BufferedStream::read grk::FileFormatDecompress::readboxhdr grk::FileFormatDecompress::readHeaderProcedureImpl...

OSV-2022-798 Heap-use-after-free in cmsFreeNamedColorList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50665 Crash type: Heap-use-after-free READ 8 Crash state: cmsFreeNamedColorList TypeNamedColorFree cmsCloseProfile...

OSV-2022-795 UNKNOWN READ in pcl::PLYReader::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50663 Crash type: UNKNOWN READ Crash state: pcl::PLYReader::read plyio.h...

open62541:fuzz_binary_message: Heap-use-after-free in UA_Server_networkCallback

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6655034842021888 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::packet_analysis::ICMP::ICMPAnalyzer::ExtractICMP4Context

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=6419018398957568 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60400120020...

OSV-2022-791 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50631 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal java.base/java.lang.AbstractStringBuilder.append...

OSV-2022-786 Heap-double-free in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50645 Crash type: Heap-double-free Crash state: readconfig readglob readconfig...

OSV-2022-785 Heap-buffer-overflow in resize_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50617 Crash type: Heap-buffer-overflow WRITE Crash state: resizepacket FuzzResizePacket fuzzrfc1035.c...

fastjson2:JsonFuzzer: Security exception in com.alibaba.fastjson.JSONPath.getPropertyValue

Detailed Report: https://oss-fuzz.com/testcase?key=4765098903732224 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.getPropertyValue...

pcl:ply_reader_fuzzer: Crash in pcl::PLYReader::read

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=4678430691557376 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerasanpcl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff7ffd Crash...

skia:colrv1: Heap-buffer-overflow in tt_face_get_colr_layer (COLRv0)

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5140010826858496 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: colrv1 Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x627000006e38 Cras...

OSV-2022-784 Segv on unknown address in FreeCodePages

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50593 Crash type: Segv on unknown address Crash state: FreeCodePages m3FreeEnvironment fuzzer.c...

OSV-2022-782 Security exception in java.base/java.lang.StringBuffer.append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50600 Crash type: Security exception Crash state: java.base/java.lang.StringBuffer.append org.apache.commons.jxpath.ri.compiler.CoreFunction.toString java.base/java.lang.String.valueOf...

OSV-2022-781 Segv on unknown address in wasmtime_runtime::traphandlers::catch_traps::call_closure::hec711b3339636b04

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50596 Crash type: Segv on unknown address Crash state: wasmtimeruntime::traphandlers::catchtraps::callclosure::hec711b3339636b04 wasmtimesetjmp wasmtime::linker::Linker$LT$T$GT$::instantiate::h7e42baf4a320e0da...

OSV-2022-780 Index-out-of-bounds in is_same_net6

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50599 Crash type: Index-out-of-bounds Crash state: issamenet6 dhcp6mayberelay dhcp6mayberelay...

apache-commons-jxpath:JXPathFuzzer: Security exception in java.base/java.lang.StringBuffer.append

Detailed Report: https://oss-fuzz.com/testcase?key=5621621733326848 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

wasmtime:api_calls: Segv on unknown address in wasmtime_runtime::traphandlers::catch_traps::call_closure::hec711b3339636b04

Project: https://github.com/bytecodealliance/wasmtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5359918122663936 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: apicalls Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: Segv on unknown address Crash Address: Cra...