libarchive:libarchive_fuzzer: Heap-use-after-free in archive_read_format_rar_read_data

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=4763773670391808 Project: libarchive Fuzzing Engine: afl Fuzz Target: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

OSV-2022-137 Stack-buffer-overflow in LoadVoice

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44527 Crash type: Stack-buffer-overflow READ Crash state: LoadVoice LoadVoiceVariant SpeakNextClause...

OSV-2022-136 Heap-buffer-overflow in cli_js_parse_done

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44490 Crash type: Heap-buffer-overflow READ 4 Crash state: clijsparsedone clihtmlnormalise htmlnormalisemap...

OSV-2022-134 Heap-use-after-free in RDKit::Chirality::cleanupStereoGroups

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44520 Crash type: Heap-use-after-free READ 1 Crash state: RDKit::Chirality::cleanupStereoGroups RDKit::MolOps::assignStereochemistry RDKit::SmilesToMol...

OSV-2022-133 Heap-buffer-overflow in coap_split_uri_sub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44503 Crash type: Heap-buffer-overflow READ 1 Crash state: coapspliturisub coapgeturipath...

CVE-2022-24668

A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. This vulnerability is caused by a logical error after frame parsing but before frame handlin...

OSV-2022-129 Heap-buffer-overflow in dwg_free_HATCH_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44481 Crash type: Heap-buffer-overflow READ 8 Crash state: dwgfreeHATCHprivate dwgfreeHATCH dwgfreeobject...

pulumi:schema_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5726870845390848 Project: pulumi Fuzzing Engine: libFuzzer Fuzz Target: schemafuzzer Job Type: libfuzzerasanpulumi Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

libredwg:llvmfuzz: Heap-buffer-overflow in dwg_free_HATCH_private

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4746781454368768 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

OSV-2022-128 Stack-buffer-overflow in decompress_rNUMBER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44432 Crash type: Stack-buffer-overflow WRITE 1 Crash state: decompressrNUMBER readrNUMBERmetadata dwgdecode...

OSV-2022-127 Heap-use-after-free in UA_ServerConfig_clean

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44434 Crash type: Heap-use-after-free READ 8 Crash state: UAServerConfigclean fuzzbinarymessage.cc UAmemoryManagerfree...

OSV-2022-126 Heap-buffer-overflow in md_analyze_inlines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44446 Crash type: Heap-buffer-overflow READ 1 Crash state: mdanalyzeinlines mdprocessnormalblockcontents mdprocesstablecell...

OSV-2022-125 Invalid-free in NIOHTTP2.NIOHTTP2Handler.

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44431 Crash type: Invalid-free Crash state: NIOHTTP2.NIOHTTP2Handler. NIOHTTP2.NIOHTTP2Handler.channelRead NIOCore.ChannelHandlerContext...

libredwg:llvmfuzz: Stack-buffer-overflow in decompress_rNUMBER

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5393679093727232 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

bitcoin-core:transaction: Use-of-uninitialized-value in InferScript

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=6016211450724352 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: transaction Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

OSV-2022-121 Heap-buffer-overflow in s_hex_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44406 Crash type: Heap-buffer-overflow READ 1 Crash state: shexprocess sexDprocess sreadbuf...

OSV-2022-120 Heap-buffer-overflow in ndpi_strncasestr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44405 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpistrncasestr checkcontenttypeandchangeprotocol ndpisearchhttptcp...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_strncasestr

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5697473807515648 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6070000000d9...

OSV-2022-116 Heap-buffer-overflow in parse_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44301 Crash type: Heap-buffer-overflow READ 4 Crash state: parseobject parseobject parseobject...

OSV-2022-115 UNKNOWN READ in unescape_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44300 Crash type: UNKNOWN READ Crash state: unescapestring parsestring parseobject...