OSV-2022-473 Stack-buffer-overflow in input_osc_52

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47964 Crash type: Stack-buffer-overflow READ 9 Crash state: inputosc52 inputexitosc inputparse...

freetype2:bdf: Segv on unknown address in ft_free

Detailed Report: https://oss-fuzz.com/testcase?key=5796846137638912 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: bdf Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: ftfree ftmemfree sfntinitface Sanitizer: address AS...

OSV-2022-472 Heap-double-free in nft_set_context_free_many

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47963 Crash type: Heap-double-free Crash state: nftsetcontextfreemany configparsenftsetcontext configparsedhcppdnftsetcontext...

OSV-2022-468 Heap-buffer-overflow in json_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47961 Crash type: Heap-buffer-overflow READ 1 Crash state: jsonparse fileisjson filebuffer...

OSV-2022-467 Security exception in jaz.Zer.<clinit>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47914 Crash type: Security exception Crash state: jaz.Zer. java.base/java.lang.Class.forName0 java.base/java.lang.Class.forName...

libreoffice:tiffuzzer: Heap-buffer-overflow in putcontig8bitCIELab16

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4708205743177728 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: tiffuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

ffmpeg:ffmpeg_IO_DEMUXER_fuzzer: Heap-buffer-overflow in mov_read_iloc

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5706852010164224 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegIODEMUXERfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x60a000000200...

mysql-server:fuzz_initfile: Heap-use-after-free in Segment::write

Detailed Report: https://oss-fuzz.com/testcase?key=6493795178381312 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x60a0000192c8 Crash State: Segment::write...

OSV-2022-463 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47865 Crash type: Uncaught exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec com.ctc.wstx.util.PrefixedName.hashCode java.base/java.util.HashMap.hash...

ffmpeg:ffmpeg_AV_CODEC_ID_AMV_fuzzer: Heap-buffer-overflow in ff_jpegls_decode_picture

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5646305956855808 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDAMVfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x620000000f80...

OSV-2022-462 Stack-buffer-overflow in strcat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47841 Crash type: Stack-buffer-overflow WRITE 5 Crash state: strcat TranslateNumber TranslateWord3...

OSV-2021-1818 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47847 Crash type: Null-dereference READ Crash state: NULL...

OSV-2022-460 Heap-use-after-free in inflate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47834 Crash type: Heap-use-after-free READ 1 Crash state: inflate zlibbody zlibdecompress...

OSV-2022-458 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47797 Crash type: Uncaught exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.util.HashMap.get com.ctc.wstx.dtd.FullDTDReader.findSharedName...

OSV-2022-457 Heap-buffer-overflow in CFF::Charset::collect_glyph_to_sid_map

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47790 Crash type: Heap-buffer-overflow READ 2 Crash state: CFF::Charset::collectglyphtosidmap cffsubsetplan::plansubsetcharset cffsubsetplan::create...

OSV-2022-456 Null-dereference READ in load_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47798 Crash type: Null-dereference READ Crash state: loadglyph gsfapiftgetcharrastermetrics gsfapidochar...

OSV-2022-455 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47796 Crash type: Uncaught exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.lang.String.getChars java.base/java.io.StringReader.read...

ghostscript:gstoraster_fuzzer: Null-dereference READ in load_glyph

Detailed Report: https://oss-fuzz.com/testcase?key=5772245445771264 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: loadglyph...

OSV-2022-453 Segv on unknown address in gx_device_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47770 Crash type: Segv on unknown address Crash state: gxdevicefinalize allocrestorestepin dorestore...

OSV-2022-451 Heap-buffer-overflow in myeid_create_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47769 Crash type: Heap-buffer-overflow WRITE Crash state: myeidcreatekey scpkcs15initstoresecretkey dostoresecretkey...