OSV-2023-191 Global-buffer-overflow in xmlSkipBlankChars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57080 Crash type: Global-buffer-overflow READ 1 Crash state: xmlSkipBlankChars xmlParseMisc xmlParseDocument...

OSV-2023-188 Global-buffer-overflow in xmlParseQName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57077 Crash type: Global-buffer-overflow READ 1 Crash state: xmlParseQName xmlParseStartTag2 xmlParseElementStart...

OSV-2023-183 UNKNOWN READ in mrb_exc_get_id

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57064 Crash type: UNKNOWN READ Crash state: mrbexcgetid mrbnomethoderror mrbmethodmissing...

OSV-2023-182 Heap-buffer-overflow in FLAC__bitwriter_write_rice_signed_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57071 Crash type: Heap-buffer-overflow WRITE 4 Crash state: FLACbitwriterwritericesignedblock addresidualpartitionedrice FLACsubframeaddfixed...

OSV-2023-181 Heap-double-free in xsltCompileStepPattern

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57061 Crash type: Heap-double-free Crash state: xsltCompileStepPattern xsltCompileRelativePathPattern xsltCompilePatternInternal...

OSV-2023-180 UNKNOWN READ in mrb_obj_iv_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57051 Crash type: UNKNOWN READ Crash state: mrbobjivget classnamestr mrbmodtos...

OSV-2023-178 Segv on unknown address in mrb_bint_sub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57037 Crash type: Segv on unknown address Crash state: mrbbintsub intsub mrbvmexec...

OSV-2023-177 Heap-buffer-overflow in mosquitto__strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57002 Crash type: Heap-buffer-overflow READ Crash state: mosquittostrdup configreadfilecore configreadfile...

OSV-2023-176 Heap-use-after-free in mrb_gc_mark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56991 Crash type: Heap-use-after-free READ 4 Crash state: mrbgcmark mrbgcmarkiv gcmarkchildren...

OSV-2023-175 UNKNOWN READ in dissect_oran_c_section

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56990 Crash type: UNKNOWN READ Crash state: dissectorancsection dissectoran calldissectorwork...

OSV-2023-174 Global-buffer-overflow in htmlCurrentChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56964 Crash type: Global-buffer-overflow READ 1 Crash state: htmlCurrentChar htmlParseNameComplex htmlParseName...

[SECURITY] Fedora 38 Update: qmmp-2.1.2-4.fc38

This program is an audio-player, written with help of Qt library. The user interface is similar to winamp or xmms. Main opportunities: Winamp and xmms skins support plugins support MPEG1 layer 2/3 support Ogg Vorbis support native FLAC support WavePack support ModPlug support PCM WAVE support CD...

Fedora: Security Advisory for qmmp (FEDORA-2023-a5e10b188a)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OSV-2023-170 Invalid-free in hb_free_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56952 Crash type: Invalid-free Crash state: hbfreeimpl OT::glyf::freecompiledsubsetglyphs OT::glyf::populatesubsetglyphs...

OSV-2023-164 UNKNOWN READ in fp_cmp_mag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56892 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...

OSV-2023-162 Global-buffer-overflow in xmlCurrentChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56841 Crash type: Global-buffer-overflow READ 1 Crash state: xmlCurrentChar xmlParseNCName xmlParseQName...

OSV-2023-160 Global-buffer-overflow in OT::gvar::accelerator_t::apply_deltas_to_points

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56800 Crash type: Global-buffer-overflow READ 2 Crash state: OT::gvar::acceleratort::applydeltastopoints bool OT::glyfimpl::Glyph::getpoints bool OT::glyfimpl::Glyph::getpoints...

OSV-2023-159 UNKNOWN READ in isvce_cabac_flush

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56816 Crash type: UNKNOWN READ Crash state: isvcecabacflush isvcecabacencodeterminate isvceentropy...

OSV-2023-158 Heap-use-after-free in ddsi_type_unref_impl_locked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56837 Crash type: Heap-use-after-free READ 4 Crash state: ddsitypeunrefimpllocked ddsitypeunreflocked ddsixttypefini...

OSV-2023-156 Heap-use-after-free in HashMgr::add_word

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56737 Crash type: Heap-use-after-free READ 2 Crash state: HashMgr::addword HashMgr::loadtables HashMgr::HashMgr...