OSV-2022-91 Heap-buffer-overflow in pixCountArbInRect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44008 Crash type: Heap-buffer-overflow READ 1 Crash state: pixCountArbInRect pix3fuzzer.cc...

OSV-2021-1806 Stack-buffer-overflow in pdfi_open_CIDFont_substitute_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44034 Crash type: Stack-buffer-overflow WRITE Crash state: pdfiopenCIDFontsubstitutefile pdfiloadfont pdfireadtype0font...

OSV-2022-90 Heap-double-free in cli_extract_xlm_macros_and_images

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44040 Crash type: Heap-double-free Crash state: cliextractxlmmacrosandimages cliole2scantempdir cliscanole2...

frr:zebra: Crash in model

Detailed Report: https://oss-fuzz.com/testcase?key=5130401121697792 Project: frr Fuzzing Engine: libFuzzer Fuzz Target: zebra Job Type: libfuzzerubsanfrr Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000700a0a Crash State: model Sanitizer: undefined UBSAN Recommended Security...

OSV-2022-87 Heap-use-after-free in zend_std_get_property_ptr_ptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43988 Crash type: Heap-use-after-free READ 8 Crash state: zendstdgetpropertyptrptr zendfetchpropertyaddress ZENDFETCHOBJWSPECCVCONSTHANDLER...

OSV-2022-85 UNKNOWN READ in pdfi_setcolorN

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43994 Crash type: UNKNOWN READ Crash state: pdfisetcolorN pdfiinterpretstreamoperator pdfiinterpretcontentstream...

OSV-2022-84 Heap-buffer-overflow in Core::Stream::File::open_path

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43978 Crash type: Heap-buffer-overflow READ Crash state: Core::Stream::File::openpath Core::Stream::File::open Audio::FlacLoaderPlugin::FlacLoaderPlugin...

OSV-2022-83 Heap-use-after-free in gx_monitor_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43981 Crash type: Heap-use-after-free READ 8 Crash state: gxmonitorfree icclinkcachefinalize ifreeobject...

OSV-2022-81 Global-buffer-overflow in get_space_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43991 Crash type: Global-buffer-overflow READ 1 Crash state: getspaceobject zsetcolorspace gsinterpret...

OSV-2022-80 Null-dereference READ in gstate_clone_core

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43989 Crash type: Null-dereference READ Crash state: gstateclonecore gsgsave gsoutputpage...

OSV-2021-1805 Heap-buffer-overflow in ndpi_search_kerberos

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43925 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchkerberos checkndpidetectionfunc ndpicheckflowfunc...

OSV-2021-1804 Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43921 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c...

OSV-2022-77 Heap-buffer-overflow in hufDecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43916 Crash type: Heap-buffer-overflow READ 1 Crash state: hufDecode internalhufdecompress internalexrundopiz...

imagemagick:encoder_ttf_fuzzer: Segv on unknown address in t1_decoder_parse_metrics

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4893858301870080 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderttffuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Segv on unknown address Crash...

OSV-2022-73 Heap-use-after-free in pdfi_cspace_free_callback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43904 Crash type: Heap-use-after-free READ 8 Crash state: pdficspacefreecallback gscspacefinal allocrestorestepin...

freetype2:type1-render: Use-of-uninitialized-value in cf2_interpT2CharString

Detailed Report: https://oss-fuzz.com/testcase?key=4918766562050048 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: type1-render Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cf2interpT2CharString...

ghostscript:gstoraster_fuzzer: Heap-use-after-free in pdfi_cspace_free_callback

Detailed Report: https://oss-fuzz.com/testcase?key=5420966988087296 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x631000258868 Crash State:...

OSV-2022-70 Heap-buffer-overflow in cli_sigopts_handler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43843 Crash type: Heap-buffer-overflow READ 1 Crash state: clisigoptshandler loadoneldb cliloadldb...

OSV-2022-69 Stack-buffer-overflow in pixCountPixels

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43841 Crash type: Stack-buffer-overflow READ 4 Crash state: pixCountPixels pixCountPixelsInRect pix3fuzzer.cc...

OSV-2022-66 Heap-buffer-overflow in cli_ac_addsig

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43832 Crash type: Heap-buffer-overflow READ 2 Crash state: cliacaddsig cliparseadd clisigoptshandler...