OSV-2022-314 UNKNOWN READ in [heap]

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46395 Crash type: UNKNOWN READ Crash state: heap...

OSV-2022-313 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46432 Crash type: Heap-buffer-overflow READ 2 Crash state: genericunpack exrdecodingrun Imf31::checkCoreFile...

PT-2022-36924

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ with a crash state of NULL, as reported by OSS-Fuzz. No additional details about the issue, affected...

PT-2022-36921

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description A crash has been reported with a type of UNKNOWN READ, and the crash state includes information about the heap. The issue was identified through an OSS-Fuzz report. Recommendations At the...

kimageformats:kimgio_psd_fuzzer: Heap-buffer-overflow in LoadPSD

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5789981576134656 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgiopsdfuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

libvips:webpsave_buffer_fuzzer: Heap-buffer-overflow in ConvertRGB24ToY_SSE41

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5456365075693568 Project: libvips Fuzzing Engine: honggfuzz Fuzz Target: webpsavebufferfuzzer Job Type: honggfuzzasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in generic_unpack

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5630815087755264 Project: openexr Fuzzing Engine: honggfuzz Fuzz Target: openexrexrcheckfuzzer Job Type: honggfuzzasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow RE...

OSV-2022-311 Heap-use-after-free in decode_mcu

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46354 Crash type: Heap-use-after-free READ 4 Crash state: decodemcu decompressonepass processdatasimplemain...

OSV-2022-310 Heap-use-after-free in jpeg_fill_bit_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46343 Crash type: Heap-use-after-free WRITE 4 Crash state: jpegfillbitbuffer jpeghuffdecode decodemcu...

OSV-2022-309 UNKNOWN READ in decompress_smooth_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46349 Crash type: UNKNOWN READ Crash state: decompresssmoothdata processdatasimplemain jpegreadscanlines...

OSV-2022-308 Null-dereference READ in ubsan_GetStackTrace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46341 Crash type: Null-dereference READ Crash state: ubsanGetStackTrace...

PT-2022-36914

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided input. Description The issue is related to a null-dereference read crash, as indicated by the OSS-Fuzz report. The crash state includes a call to ubsan GetStackTrace, suggesting an...

libvips:webpsave_buffer_fuzzer: Heap-use-after-free in save_marker

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=6427211915198464 Project: libvips Fuzzing Engine: afl Fuzz Target: webpsavebufferfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-use-after-free WRITE 1 Crash Address:...

dnsmasq:fuzz_dhcp: Heap-buffer-overflow in dhcp_reply

Detailed Report: https://oss-fuzz.com/testcase?key=5341114007158784 Project: dnsmasq Fuzzing Engine: honggfuzz Fuzz Target: fuzzdhcp Job Type: honggfuzzasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6160000005a4 Crash State: dhcpreply dhcppacket FuzzDhcp...

OSV-2022-303 Heap-use-after-free in start_pass_phuff_decoder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46338 Crash type: Heap-use-after-free WRITE 4 Crash state: startpassphuffdecoder startinputpass jinitmasterdecompress...

OSV-2022-302 Heap-use-after-free in read_markers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46334 Crash type: Heap-use-after-free READ 4 Crash state: readmarkers consumemarkers jpegconsumeinput...

libvips:gifsave_buffer_fuzzer: Heap-use-after-free in jpeg_fill_bit_buffer

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5252884758921216 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: gifsavebufferfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address:...

libvips:webpsave_buffer_fuzzer: Heap-use-after-free in decode_mcu

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=4927616265617408 Project: libvips Fuzzing Engine: honggfuzz Fuzz Target: webpsavebufferfuzzer Job Type: honggfuzzasanlibvips Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address:...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in Imf_3_1::memstream_read

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5394457752633344 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow RE...

OSV-2022-296 Negative-size-param in jxl::N_SSE4::BlendingStage::ProcessPaddingRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46243 Crash type: Negative-size-param Crash state: jxl::NSSE4::BlendingStage::ProcessPaddingRow jxl::LowMemoryRenderPipeline::RenderPadding jxl::LowMemoryRenderPipeline::ProcessBuffers...