OSV-2022-32 Heap-buffer-overflow in _estrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43484 Crash type: Heap-buffer-overflow READ 11 Crash state: estrdup exifprocessusercomment exifprocessIFDTAGimpl...

OSV-2022-31 Heap-buffer-overflow in md_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43473 Crash type: Heap-buffer-overflow READ 1 Crash state: mdparse mdhtml fuzz-mdhtml.c...

elfutils:fuzz-dwfl-core: Use-of-uninitialized-value in handle_file_note

Detailed Report: https://oss-fuzz.com/testcase?key=5344860645752832 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-dwfl-core Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: handlefilenote dwflsegmentreportmodule...

md4c:fuzz-mdhtml: Heap-buffer-overflow in md_parse

Detailed Report: https://oss-fuzz.com/testcase?key=5469403431436288 Project: md4c Fuzzing Engine: honggfuzz Fuzz Target: fuzz-mdhtml Job Type: honggfuzzasanmd4c Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000bb Crash State: mdparse mdhtml fuzz-mdhtml.c...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in ParseSegmentMobileH

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=6560784258301952 Project: inchi Fuzzing Engine: afl Fuzz Target: inchiinputfuzzer Job Type: aflasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000001f2...

OSV-2022-24 Null-dereference READ in session_startup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43419 Crash type: Null-dereference READ Crash state: sessionstartup libssh2sessionhandshake ssh2clientfuzzer.cc...

imagemagick:encoder_qoi_fuzzer: Heap-buffer-overflow in ReadQOIImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4510216379564032 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderqoifuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4...

libssh2:ssh2_client_fuzzer: Null-dereference READ in session_startup

Project: https://github.com/cmeister2/libssh2.git https://github.com/libssh2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=6102905738887168 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerasanlibssh2 Platform Id: linux Crash Type:...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::IOSystem2Unzip::opendisk

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4925607018889216 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

vlc:vlc-demux-dec-libfuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5453819813691392 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerubsanvlc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x02e1ffa00020 Crash State: NULL Sanitizer: undefined UBSAN...

OSV-2022-16 UNKNOWN READ in MqttProps_Free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43370 Crash type: UNKNOWN READ Crash state: MqttPropsFree MqttClientDecodePacket MqttClientWaitType...

OSV-2022-15 Global-buffer-overflow in ZSTD_compressBlock_opt0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43365 Crash type: Global-buffer-overflow READ 1 Crash state: ZSTDcompressBlockopt0 ZSTDcompressBlockbtopt ZSTDbuildSeqStore...

PT-2022-36840

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue was identified, as reported by OSS-Fuzz. The crash type is specified as Heap-buffer-overflow READ 1, and the crash state...

A potential Denial of Service issue in protobuf-java

Summary A potential Denial of Service issue in protobuf-java was discovered in the parsing procedure for binary data. Affected versions: All versions of Java Protobufs including Kotlin and JRuby prior to the versions listed below. Protobuf "javalite" users typically Android are not affected...

OSV-2022-13 Heap-use-after-free in read_data_compressed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43324 Crash type: Heap-use-after-free READ 4 Crash state: readdatacompressed archivereadformatrarreaddata archivereaddatablock...

OSV-2022-12 Heap-buffer-overflow in print_mac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43304 Crash type: Heap-buffer-overflow WRITE 4 Crash state: printmac logpacket dhcpreply...

OSV-2022-10 Heap-buffer-overflow in check_bad_address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43308 Crash type: Heap-buffer-overflow WRITE 1 Crash state: checkbadaddress checkforboguswildcard FuzzCheckForBogusWildcard...

OSV-2022-6 Heap-buffer-overflow in extract_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43299 Crash type: Heap-buffer-overflow WRITE 1 Crash state: extractname hashquestions fuzzutil.c...

OSV-2022-4 Memcpy-param-overlap in ZSTD_createDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43287 Crash type: Memcpy-param-overlap Crash state: ZSTDcreateDDict bloscrundecompressionwithcontext blosc2decompressctx...

dnsmasq:fuzz_rfc1035: Heap-buffer-overflow in check_bad_address

Detailed Report: https://oss-fuzz.com/testcase?key=5228634988740608 Project: dnsmasq Fuzzing Engine: libFuzzer Fuzz Target: fuzzrfc1035 Job Type: libfuzzerasandnsmasq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x607000000dfc Crash State: checkbadaddress...