opennavsurf-bag:bag_read_fuzzer: Heap-buffer-overflow in H5HG_read

Detailed Report: https://oss-fuzz.com/testcase?key=5191297385693184 Project: opennavsurf-bag Fuzzing Engine: afl Fuzz Target: bagreadfuzzer Job Type: aflasanopennavsurf-bag Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x521000013d08 Crash State: H5HGread H5VLnativeblobg...

OSV-2024-1241 Heap-buffer-overflow in polygonToCellsExperimental

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=375220555 Crash type: Heap-buffer-overflow WRITE 8 Crash state: polygonToCellsExperimental fuzzerPolygonToCellsExperimentalNoHoles.c...

GHSA-CRMJ-QH74-2R36 Exiv2 has a denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder

Impact A denial-of-service was found in Exiv2 version v0.28.1: an unbounded recursion can cause Exiv2 to crash by exhausting the stack. The vulnerable function, QuickTimeVideo::multipleEntriesDecoder, was new in v0.28.0 see https://github.com/Exiv2/exiv2/pull/2337, so Exiv2 versions before v0.28...

Exiv2 has a denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder

Impact A denial-of-service was found in Exiv2 version v0.28.1: an unbounded recursion can cause Exiv2 to crash by exhausting the stack. The vulnerable function, QuickTimeVideo::multipleEntriesDecoder, was new in v0.28.0 see https://github.com/Exiv2/exiv2/pull/2337, so Exiv2 versions before v0.28...

GHSA-G9XM-7538-MQ8W Exiv2 has an out-of-bounds read in QuickTimeVideo::NikonTagsDecoder

Impact An out-of-bounds read was found in Exiv2 version v0.28.1. The vulnerable function, QuickTimeVideo::NikonTagsDecoder, was new in v0.28.0 see https://github.com/Exiv2/exiv2/pull/2337, so Exiv2 versions before v0.28 are not affected. Exiv2 is a command-line utility and C++ library for reading...

Exiv2 has an out-of-bounds read in QuickTimeVideo::NikonTagsDecoder

Impact An out-of-bounds read was found in Exiv2 version v0.28.1. The vulnerable function, QuickTimeVideo::NikonTagsDecoder, was new in v0.28.0 see https://github.com/Exiv2/exiv2/pull/2337, so Exiv2 versions before v0.28 are not affected. Exiv2 is a command-line utility and C++ library for reading...

mpv:fuzzer_loadfile_mkv: Heap-buffer-overflow in put_no_rnd_pixels16_8_c

Project: https://github.com/mpv-player/mpv.git Detailed Report: https://oss-fuzz.com/testcase?key=6694107390476288 Project: mpv Fuzzing Engine: libFuzzer Fuzz Target: fuzzerloadfilemkv Job Type: libfuzzerasanmpv Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

OSV-2024-1220 UNKNOWN READ in Assimp::NDOImporter::InternReadFile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372765427 Crash type: UNKNOWN READ Crash state: Assimp::NDOImporter::InternReadFile Assimp::BaseImporter::ReadFile Assimp::Importer::ReadFile...

assimp:assimp_fuzzer: Crash in Assimp::NDOImporter::InternReadFile

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6270910807474176 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000014148 Crash State...

jackson-dataformat-xml:XmlDeserializerFuzzer: Security exception in java.base/java.util.AbstractMap.hashCode

Project: https://github.com/FasterXML/jackson-dataformat-xml.git Detailed Report: https://oss-fuzz.com/testcase?key=6182178846736384 Project: jackson-dataformat-xml Fuzzing Engine: libFuzzer Fuzz Target: XmlDeserializerFuzzer Job Type: libfuzzerasanjackson-dataformat-xml Platform Id: linux Crash...

OSV-2024-1212 Heap-buffer-overflow in cram_encode_container

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372547397 Crash type: Heap-buffer-overflow READ 8 Crash state: cramencodecontainer cramflushcontainermt cramputbamseq...

OSV-2024-1210 Heap-buffer-overflow in parse_mixed_content

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372510377 Crash type: Heap-buffer-overflow READ 1 Crash state: parsemixedcontent parsesdp fuzzparsemsg.c...

OSV-2024-1209 Heap-use-after-free in xmlValidateOneElement

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372547409 Crash type: Heap-use-after-free READ 4 Crash state: xmlValidateOneElement xmlValidateElement api.c...

OSV-2024-1207 Security exception in org.apache.poi.hdgf.streams.CompressedStreamStore.decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372515093 Crash type: Security exception Crash state: org.apache.poi.hdgf.streams.CompressedStreamStore.decompress org.apache.poi.hdgf.streams.CompressedStreamStore. org.apache.poi.hdgf.streams.Stream.createStream...

OSV-2024-1201 Heap-buffer-overflow in polygonToCellsExperimental

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372515086 Crash type: Heap-buffer-overflow WRITE 8 Crash state: polygonToCellsExperimental fuzzerPolygonToCellsExperimental.c...

OSV-2024-1199 Security exception in java.base/java.lang.Short.valueOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372547195 Crash type: Security exception Crash state: java.base/java.lang.Short.valueOf org.apache.poi.ddf.EscherRecordTypes.forTypeID org.apache.poi.ddf.DefaultEscherRecordFactory.getConstructor...

clamav:clamav_scanfile_OLE2_fuzzer: Heap-buffer-overflow in rijndaelDecrypt

Detailed Report: https://oss-fuzz.com/testcase?key=6394681614729216 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavscanfileOLE2fuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x516000009e88 Crash State: rijndaelDecrypt...

apache-commons-imaging:ImagingPngFuzzer: Security exception in java.desktop/java.awt.image.DataBufferInt.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5968198229360640 Project: apache-commons-imaging Fuzzing Engine: libFuzzer Fuzz Target: ImagingPngFuzzer Job Type: libfuzzerasanapache-commons-imaging Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

kimageformats:kimgio_jxr_fuzzer: Crash in DecodeSignificantRun

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4881244443181056 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgiojxrfuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

htslib:hts_open_fuzzer: Heap-buffer-overflow in cram_encode_container

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=6584661238677504 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...