OSV-2022-653 Heap-double-free in dwg_free_common_entity_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49602 Crash type: Heap-double-free Crash state: dwgfreecommonentitydata dwgfreeDIMENSIONANG2LN dwgfreeobject...

libredwg:llvmfuzz: Heap-buffer-overflow in dwg_geojson_feature

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4902748868444160 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

libredwg:llvmfuzz: Heap-buffer-overflow in dynapi_set_helper

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6273056472956928 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

libredwg:llvmfuzz: Heap-double-free in dwg_free_common_entity_data

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6059126567862272 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x602000000250 Cra...

OSV-2022-652 Use-of-uninitialized-value in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49542 Crash type: Use-of-uninitialized-value Crash state: udiv mrbbintmod intmod...

OSV-2022-651 Heap-use-after-free in jsmn_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49552 Crash type: Heap-use-after-free WRITE 4 Crash state: jsmnparse flbjsontokenise flbpackjsonstate...

OSV-2022-648 Use-of-uninitialized-value in _LUTeval16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49549 Crash type: Use-of-uninitialized-value Crash state: LUTeval16 cmsCreateExtendedTransform cmsCreateTransform...

OSV-2022-647 Heap-use-after-free in cmsFreeNamedColorList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49546 Crash type: Heap-use-after-free READ 4 Crash state: cmsFreeNamedColorList TypeNamedColorFree cmsCloseProfile...

go-ethereum:fuzzTxfetcher: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6701473429323776 Project: go-ethereum Fuzzing Engine: libFuzzer Fuzz Target: fuzzTxfetcher Job Type: libfuzzerasango-ethereum Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address...

OSV-2022-644 Global-buffer-overflow in decode_CABAC_bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49538 Crash type: Global-buffer-overflow READ 1 Crash state: decodeCABACbit readcodingunit readcodingquadtree...

OSV-2022-643 Heap-use-after-free in gs_tifsSeekProc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49528 Crash type: Heap-use-after-free READ 8 Crash state: gstifsSeekProc TIFFWriteDirectorySec TIFFRewriteDirectory...

OSV-2022-642 Segv on unknown address in cmsNamedColorInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49501 Crash type: Segv on unknown address Crash state: cmsNamedColorInfo TypeNamedColorWrite SaveTags...

OSV-2022-640 Stack-use-after-return in rc_free_text_enum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49530 Crash type: Stack-use-after-return READ 8 Crash state: rcfreetextenum gstextrelease pdftextrelease...

cras:rclient_message: Crash in cras_iodev_list_request_floop

Detailed Report: https://oss-fuzz.com/testcase?key=5144258746646528 Project: cras Fuzzing Engine: honggfuzz Fuzz Target: rclientmessage Job Type: honggfuzzasancras Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x61c100000507 Crash State: crasiodevlistrequestfloop handlerequestfloop...

ghostscript:gs_device_ps2write_fuzzer: Stack-use-after-return in rc_free_text_enum

Detailed Report: https://oss-fuzz.com/testcase?key=4600783475179520 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address: 0x7efd9e76b2a0 Crash State:...

OSV-2022-638 Use-of-uninitialized-value in ComputeConversion

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49495 Crash type: Use-of-uninitialized-value Crash state: ComputeConversion DefaultICCintents cmsLinkProfiles...

OSV-2022-639 Heap-buffer-overflow in _cmsWriteXYZNumber

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49505 Crash type: Heap-buffer-overflow READ 8 Crash state: cmsWriteXYZNumber TypeViewingConditionsWrite SaveTags...

OSV-2022-636 UNKNOWN READ in fp_cmp_mag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49510 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...

ghostscript:gs_device_tiffsep1_fuzzer: Heap-use-after-free in gs_tifsSeekProc

Detailed Report: https://oss-fuzz.com/testcase?key=5193300629389312 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x606000020150 Crash State:...

graphicsmagick:coder_J2C_fuzzer: Heap-buffer-overflow in jpc_dec_decodecblks

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4966711400464384 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJ2Cfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ...