OSV-2022-776 Heap-buffer-overflow in do_job

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50528 Crash type: Heap-buffer-overflow WRITE 4 Crash state: dojob blosccompresscontext blosc2compress...

OSV-2022-774 Segv on unknown address in cranelift_filetests::function_runner::CompiledFunction::call::ha6b9162cd2eNUMBER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50556 Crash type: Segv on unknown address Crash state: craneliftfiletests::functionrunner::CompiledFunction::call::ha6b9162cd2eNUMBER...

OSV-2022-773 Heap-double-free in sc_pkcs15_encode_df

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50536 Crash type: Heap-double-free Crash state: scpkcs15encodedf scpkcs15initupdateanydf scpkcs15initaddobject...

OSV-2022-772 Heap-use-after-free in pdfi_cidtype2_get_glyph_index

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50527 Crash type: Heap-use-after-free READ 1 Crash state: pdficidtype2getglyphindex gstype42glyphinfo pdficidtype2glyphinfo...

pcl:ply_reader_fuzzer: Crash in void std::__1::__tree_balance_after_insert<std::__1::__tree_node_base<void*>*>

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=6548399272361984 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffc00000000...

OSV-2022-770 Stack-buffer-overflow in get_transaction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50477 Crash type: Stack-buffer-overflow READ 2 Crash state: gettransaction dissectasp calldissectorworkerror...

OSV-2022-768 Security exception in org.apache.commons.jxpath.ri.axes.UnionContext.setPosition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50506 Crash type: Security exception Crash state: org.apache.commons.jxpath.ri.axes.UnionContext.setPosition org.apache.commons.jxpath.ri.axes.NodeSetContext.nextNode org.apache.commons.jxpath.ri.axes.PredicateContext.nextNode...

OSV-2022-763 Heap-buffer-overflow in sqlite3VdbeExec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50466 Crash type: Heap-buffer-overflow READ Crash state: sqlite3VdbeExec sqlite3step osquery::readRows...

jackson-databind:ObjectReader2Fuzzer: Security exception in com.fasterxml.jackson.databind.deser.BeanDeserializer._deserializeFromArray

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=4681021680910336 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ObjectReader2Fuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type: Security...

wireshark:fuzzshark_ip: Stack-buffer-overflow in get_transaction

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=5849610676994048 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkip Job Type: aflasanwireshark Platform Id: linux Crash Type:...

osquery:osqueryfuzz-sqlquery: Heap-buffer-overflow in sqlite3VdbeExec

Project: https://github.com/osquery/osquery.git Detailed Report: https://oss-fuzz.com/testcase?key=4965150242766848 Project: osquery Fuzzing Engine: afl Fuzz Target: osqueryfuzz-sqlquery Job Type: aflasanosquery Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6160000254f...

OSV-2022-760 Security exception in com.fasterxml.jackson.dataformat.toml.Parser.parseInlineTable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50432 Crash type: Security exception Crash state: com.fasterxml.jackson.dataformat.toml.Parser.parseInlineTable com.fasterxml.jackson.dataformat.toml.Parser.parseValue com.fasterxml.jackson.dataformat.toml.Parser.parseKeyVal...

OSV-2022-759 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50428 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/sun.nio.cs.CESU8.updatePositions java.base/sun.nio.cs.CESU8$Encoder.encodeArrayLoop...

OSV-2022-757 UNKNOWN WRITE in pdfi_free_array

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50406 Crash type: UNKNOWN WRITE Crash state: pdfifreearray pdfifreeobject pdficleartomark...

OSV-2022-755 Global-buffer-overflow in chunk_obj_alloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50436 Crash type: Global-buffer-overflow READ 8 Crash state: chunkobjalloc chunkallocbytearrayimmovable szliballoc...

OSV-2022-751 Heap-buffer-overflow in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50448 Crash type: Heap-buffer-overflow READ 1 Crash state: gstype2interpret copiedtype1glyphoutline gsdefaultglyphinfo...

OSV-2022-749 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50393 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.nio.charset.CharsetEncoder.replaceWith java.base/java.nio.charset.CharsetEncoder...

openyurt:fuzz_yurtappdaemon_controller: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6450325136998400 Project: openyurt Fuzzing Engine: libFuzzer Fuzz Target: fuzzyurtappdaemoncontroller Job Type: libfuzzerasanopenyurt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000003cf0841 Crash State: NULL Sanitizer: address...

OSV-2022-744 Stack-buffer-overflow in gs_glyph_data_from_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50326 Crash type: Stack-buffer-overflow WRITE 8 Crash state: gsglyphdatafrombytes pdficffsubrdata gstype1piececodes...

OSV-2022-738 Security exception in DatatypeFuzzer.fuzzerTestOneInput

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50379 Crash type: Security exception Crash state: DatatypeFuzzer.fuzzerTestOneInput com.codeintelligence.jazzer.driver.FuzzTargetRunner.runOne com.codeintelligence.jazzer.driver.FuzzTargetRunner.startLibFuzzer...