OSV-2022-340 Heap-buffer-overflow in cli_ac_addsig

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46646 Crash type: Heap-buffer-overflow READ 2 Crash state: cliacaddsig cliaddcontentmatchpattern readdbparseldbsubsignature...

OSV-2022-339 Heap-use-after-free in gc_trace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46672 Crash type: Heap-use-after-free READ 2 Crash state: gctrace gsgcreclaim ireclaim...

clamav:clamav_dbload_LDB_fuzzer: Heap-use-after-free in init_tdb

Detailed Report: https://oss-fuzz.com/testcase?key=6129967345303552 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadLDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6020000003b0 Crash State: inittdb loadoneldb...

opensc:fuzz_card: Stack-buffer-overflow in sc_hsm_list_files

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6579131418017792 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzcard Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ff9bd1c04a6...

libbpf:bpf-object-fuzzer: Heap-buffer-overflow in bpf_object__close

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6197297506025472 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasani386libbpf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

libxml2:xml: Use-of-uninitialized-value in xmlDictLookup

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=6679454857953280 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

OSV-2022-337 Heap-double-free in cli_extract_xlm_macros_and_images

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46586 Crash type: Heap-double-free Crash state: cliextractxlmmacrosandimages cliole2scantempdir climagicscan...

OSV-2022-331 Stack-buffer-overflow in void unwindstack::Symbols::BuildRemapTable<Elf64_Sym>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46546 Crash type: Stack-buffer-overflow READ Crash state: void unwindstack::Symbols::BuildRemapTable bool unwindstack::Symbols::GetName unwindstack::ElfInterfaceImpl::GetFunctionName...

OSV-2022-330 Stack-use-after-return in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46575 Crash type: Stack-use-after-return READ 1 Crash state: std::1::function::funcbool grk::WaveletReverse::decompresspartialtilei tf::Executor::invoke tf::Executor::consumetask...

jettison:JsonFuzzer: Timeout in JsonFuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=5287956102905856 Project: jettison Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjettison Platform Id: linux Crash Type: Timeout exceeds 60 secs Crash Address: Crash State: JsonFuzzer Sanitizer: address ASAN Recommended...

OSV-2022-327 Stack-use-after-return in QSemaphore::release

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46525 The issue already existed before oss-fuzz could reproduce it. oss-fuzz found it after qdrawhelper routines were made multithreaded. There might be ways to trigger the issue before that. Crash type: Stack-use-after-return...

OSV-2022-325 Heap-buffer-overflow in ndpi_search_tinc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46499 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchtinc checkndpidetectionfunc ndpicheckflowfunc...

OSV-2022-324 Heap-buffer-overflow in resize_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46474 Crash type: Heap-buffer-overflow WRITE Crash state: resizepacket FuzzResizePacket fuzzrfc1035.c...

OSV-2022-323 Heap-buffer-overflow in ConvertRGB24ToY_SSE41

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46436 Crash type: Heap-buffer-overflow READ 1 Crash state: ConvertRGB24ToYSSE41 ImportYUVAFromRGBA Import...

OSV-2022-322 Heap-buffer-overflow in frame_get_metalayers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46460 Crash type: Heap-buffer-overflow READ Crash state: framegetmetalayers frametoschunk blosc2schunkfrombuffer...

OSV-2022-321 Stack-use-after-scope in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<g

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46468 Crash type: Stack-use-after-scope WRITE 1 Crash state: std::1::function::funcbool grk::WaveletReverse::decompresspartialtileg tf::Executor::invoke tf::Executor::consumetask...

OSV-2022-319 Heap-buffer-overflow in LoadPSD

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46437 Crash type: Heap-buffer-overflow WRITE 2 Crash state: LoadPSD PSDHandler::read kimgiofuzzer.cc...

OSV-2022-318 UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46356 Crash type: UNKNOWN READ Crash state: NULL...

OSV-2022-317 Heap-use-after-free in save_marker

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46421 Crash type: Heap-use-after-free WRITE 1 Crash state: savemarker readmarkers consumemarkers...

OSV-2022-315 UNKNOWN READ in start_output_pass

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46396 Crash type: UNKNOWN READ Crash state: startoutputpass prepareforoutputpass outputpasssetup...