OSV-2022-736 Heap-buffer-overflow in copy_glyph_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50321 Crash type: Heap-buffer-overflow READ Crash state: copyglyphdata copyglyphtype1 gscopyglyphoptions...

OSV-2022-729 Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50372 Crash type: Security exception Crash state: org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue...

OSV-2022-727 Heap-buffer-overflow in s_file_write_flush

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50370 Crash type: Heap-buffer-overflow READ 8 Crash state: sfilewriteflush sclose streamfinalize...

tomcat:ELEvaluationFuzzer: Security exception in jaz.Zer.<clinit>

Project: https://github.com/apache/tomcat.git Detailed Report: https://oss-fuzz.com/testcase?key=4839550299537408 Project: tomcat Fuzzing Engine: libFuzzer Fuzz Target: ELEvaluationFuzzer Job Type: libfuzzerasantomcat Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue

Detailed Report: https://oss-fuzz.com/testcase?key=4666259832176640 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in s_file_write_flush

Detailed Report: https://oss-fuzz.com/testcase?key=4569074331418624 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x61100001ed58 Crash State:...

fastjson2:JsonFuzzer: Security exception in com.alibaba.fastjson.JSONPath.deepScan

Detailed Report: https://oss-fuzz.com/testcase?key=5357307252310016 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.deepScan...

cbor-java:FuzzDec: Security exception in java.base/java.io.ByteArrayOutputStream.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5066382273806336 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.io.ByteArrayOutputStream...

tomcat:Http11ProcessorDefaultServletFuzzer: Security exception in Http11ProcessorDefaultServletFuzzer.fuzzerTestOneInput

Project: https://github.com/apache/tomcat.git Detailed Report: https://oss-fuzz.com/testcase?key=4815160488886272 Project: tomcat Fuzzing Engine: libFuzzer Fuzz Target: Http11ProcessorDefaultServletFuzzer Job Type: libfuzzerasantomcat Platform Id: linux Crash Type: Security exception Crash Addres...

OSV-2022-725 Heap-buffer-overflow in jxl::N_EMU128::WriteToU8Stage::ProcessRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295 Crash type: Heap-buffer-overflow WRITE 1 Crash state: jxl::NEMU128::WriteToU8Stage::ProcessRow jxl::LowMemoryRenderPipeline::RenderRect jxl::LowMemoryRenderPipeline::ProcessBuffers...

OSV-2022-724 Stack-buffer-underflow in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50306 Crash type: Stack-buffer-underflow READ 4 Crash state: gstype2interpret copiedtype1glyphoutline gsdefaultglyphinfo...

envoy:server_fuzz_test: Container-overflow in std::__1::vector<std::__1::basic_string<char, std::__1::char_traits<char>, std::

Detailed Report: https://oss-fuzz.com/testcase?key=5217067522981888 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: serverfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Container-overflow READ Crash Address: 0x6080000f5de8 Crash State: std::1::vector, std:: void...

OSV-2022-719 Stack-buffer-overflow in gs_glyph_data_from_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50267 Crash type: Stack-buffer-overflow WRITE 8 Crash state: gsglyphdatafromstring copiedtype1subrdata gstype2interpret...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-underflow in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=5504389359468544 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7fcf758b641c Crash State:...

config-validator:fuzz_config_validator: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4782519362387968 Project: config-validator Fuzzing Engine: libFuzzer Fuzz Target: fuzzconfigvalidator Job Type: libfuzzerasanconfig-validator Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000033fcc899 Crash State: NULL Sanitizer:...

OSV-2022-715 Segv on unknown address in jpeg_read_scanlines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50217 https://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.htmldecode-jpeg-compressed-blp1-data-in-original-mode Crash type: Segv on unknown address Crash state: jpegreadscanlines ImagingJpegDecode decode...

OSV-2022-714 Heap-buffer-overflow in dynapi_set_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50194 Crash type: Heap-buffer-overflow WRITE 16 Crash state: dynapisethelper dwgdynapiheadersetvalue jsonHEADER...

OSV-2022-712 Heap-buffer-overflow in ndpi_search_florensia

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50110 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpisearchflorensia checkndpidetectionfunc ndpidetectionprocesspacket...

OSV-2022-711 Heap-buffer-overflow in _cmsMAT3per

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50115 Crash type: Heap-buffer-overflow READ 8 Crash state: cmsMAT3per OptimizeMatrixShaper cmsOptimizePipeline...

OSV-2022-710 Heap-buffer-overflow in pdfi_read_cff_dict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50099 Crash type: Heap-buffer-overflow READ 1 Crash state: pdfireadcffdict pdfireadcffdict pdfireadcfffont...