OSV-2022-249 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45591 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::EvaluateValue...

freeradius:fuzzer_dhcpv4: Heap-buffer-overflow in __covrec_1D46B478ANUMBER

Detailed Report: https://oss-fuzz.com/testcase?key=6711548259729408 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdhcpv4 Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x611000001177 Crash State: covrec1D46B478ANUMBER...

OSV-2022-248 Uncaught exception in java.base/java.nio.Bits.reserveMemory

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45563 Crash type: Uncaught exception Crash state: java.base/java.nio.Bits.reserveMemory java.base/java.nio.DirectByteBuffer. java.base/java.nio.ByteBuffer.allocateDirect...

freeradius:fuzzer_dhcpv4: Heap-buffer-overflow in __covrec_69CA2885898FNUMBER

Detailed Report: https://oss-fuzz.com/testcase?key=6384393906683904 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdhcpv4 Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6120000008ce Crash State:...

OSV-2022-241 UNKNOWN READ in write_cond_nodes_to_conf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45523 Crash type: UNKNOWN READ Crash state: writecondnodestoconf sepolkernelpolicydbtoconf binpolicy-fuzzer.c...

ffmpeg:ffmpeg_AV_CODEC_ID_DFPWM_fuzzer: Heap-buffer-overflow in au_decompress

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4947856883056640 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDDFPWMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

OSV-2022-238 Segv on unknown address in i_zval_ptr_dtor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45429 Crash type: Segv on unknown address Crash state: izvalptrdtor zendleavehelperSPEC zenddispatchtrycatchfinallyhelperSPEC...

OSV-2022-237 Stack-buffer-overflow in sc_format_oid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45459 Crash type: Stack-buffer-overflow READ Crash state: scformatoid dostoredataobject fuzzpkcs15init.c...

helm:fuzz_download_index_file: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6520776096874496 Project: helm Fuzzing Engine: libFuzzer Fuzz Target: fuzzdownloadindexfile Job Type: libfuzzerasanhelm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000010ac066e Crash State: NULL Sanitizer: address ASAN Recommende...

libxslt:xslt: Use-of-uninitialized-value in xmlHashFree

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5610123509235712 Project: libxslt Fuzzing Engine: libFuzzer Fuzz Target: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libxml2:schema: Use-of-uninitialized-value in xmlDictGrow

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=6667834971783168 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: schema Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash Stat...

OSV-2022-235 Heap-buffer-overflow in zend_gc_collect_cycles

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45369 Crash type: Heap-buffer-overflow READ 1 Crash state: zendgccollectcycles fuzzerrequestshutdown fuzzerdorequestfrombuffer...

OSV-2022-232 UNKNOWN READ in pdfi_fapi_get_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45439 Crash type: UNKNOWN READ Crash state: pdfifapigetglyph getfapiglyphdata cffslotload...

fluent-bit:flb-it-fuzz-multiline_fuzzer_OSSFUZZ: Index-out-of-bounds in test_multiline_parser

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=4714659066806272 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-multilinefuzzerOSSFUZZ Job Type: libfuzzerubsanfluent-bit Platform Id: linux Crash Type: Index-out-of-bounds...

igraph:read_pajek_fuzzer: Heap-double-free in igraph_i_pajek_add_string_vertex_attribute

Project: https://github.com/igraph/igraph.git Detailed Report: https://oss-fuzz.com/testcase?key=4660161216643072 Project: igraph Fuzzing Engine: libFuzzer Fuzz Target: readpajekfuzzer Job Type: libfuzzerasani386igraph Platform Id: linux Crash Type: Heap-double-free Crash Address: 0xf0b97e80 Cras...

CVE-2022-0618

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS or HTTP/2 PUSHPROMISE frame where the frame contains padding information...

CVE-2022-0618

CVE-2022-0618 affects the swift-nio-http2 project. A logical error in parsing HTTP/2 HEADERS and PUSH_PROMISE frames containing only padding information can cause a parsing failure, crashing the process and harming availability. The issue affects swift-nio-http2 versions 1.0.0 through 1.19.2 and ...

OSV-2022-229 UNKNOWN READ in spgetcc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45347 Crash type: UNKNOWN READ Crash state: spgetcc pdfireadbyte pdfireadtoken...

OSV-2022-226 Heap-buffer-overflow in vips_rect_intersectrect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45353 Crash type: Heap-buffer-overflow READ 4 Crash state: vipsrectintersectrect vipsforeignloadpdfgenerate vipsregionpreparetogenerate...

imagemagick:encoder_dng_fuzzer: Heap-buffer-overflow in LibRaw::nokia_load_raw

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6554582761734144 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderdngfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...