OSV-2022-676 Heap-use-after-free in archive_read_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49840 Crash type: Heap-use-after-free READ Crash state: archivereaddata libarchivefuzzer.cc processheadfile...

OSV-2022-675 Heap-buffer-overflow in void RDKit::ParseV3000AtomProps<std::__1::vector<std::__1::basic_string_view<cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49783 Crash type: Heap-buffer-overflow READ 1 Crash state: void RDKit::ParseV3000AtomPropsstd::1::vectorstd::1::basicstringviewcha RDKit::ParseV3000AtomBlock RDKit::FileParserUtils::ParseV3000CTAB...

OSV-2022-674 Use-of-uninitialized-value in cdef_filter_block_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49787 Crash type: Use-of-uninitialized-value Crash state: cdeffilterblockc cdeffilterblock8x8c dav1dcdefbrow8bpc...

OSV-2022-670 Heap-buffer-overflow in dissect_softether_ip_port

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49736 Crash type: Heap-buffer-overflow READ 4 Crash state: dissectsoftetheripport ndpisearchsoftether checkndpidetectionfunc...

OSV-2022-669 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49728 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...

OSV-2022-667 Uncaught exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49680 Crash type: Uncaught exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.stringHook...

OSV-2022-666 Heap-buffer-overflow in fasthuf_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49698 Crash type: Heap-buffer-overflow READ 8 Crash state: fasthufdecode internalhufdecompress internalexrundopiz...

OSV-2022-665 Use-of-uninitialized-value in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49676 Crash type: Use-of-uninitialized-value Crash state: udiv mpzmdiv mrbbintdiv...

OSV-2022-664 Heap-buffer-overflow in decode_preR13_section_hdr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49675 Crash type: Heap-buffer-overflow WRITE 4 Crash state: decodepreR13sectionhdr decodepreR13 dwgdecode...

OSV-2022-663 Heap-buffer-overflow in av1_read_mode_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49652 Crash type: Heap-buffer-overflow WRITE 1 Crash state: av1readmodeinfo parsedecodeblock decodepartition...

OSV-2022-661 Heap-buffer-overflow in dissect_softether_ip_port

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49638 Crash type: Heap-buffer-overflow READ 4 Crash state: dissectsoftetheripport ndpisearchsoftether checkndpidetectionfunc...

OSV-2022-657 Heap-buffer-overflow in dynapi_set_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49613 Crash type: Heap-buffer-overflow WRITE Crash state: dynapisethelper dwgdynapientitysetvalue dxfblocksread...

OSV-2022-656 Heap-buffer-overflow in dwg_decode_LWPOLYLINE_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49630 Crash type: Heap-buffer-overflow READ 1 Crash state: dwgdecodeLWPOLYLINEprivate dwgdecodeLWPOLYLINE dwgdecodeaddobject...

[SECURITY] Fedora 36 Update: golang-github-aliyun-ossutil-1.7.9-4.fc36

Alibaba Cloud Aliyun Object Storage Service OSS CLI...

OSV-2022-653 Heap-double-free in dwg_free_common_entity_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49602 Crash type: Heap-double-free Crash state: dwgfreecommonentitydata dwgfreeDIMENSIONANG2LN dwgfreeobject...

OSV-2022-652 Use-of-uninitialized-value in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49542 Crash type: Use-of-uninitialized-value Crash state: udiv mrbbintmod intmod...

OSV-2022-651 Heap-use-after-free in jsmn_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49552 Crash type: Heap-use-after-free WRITE 4 Crash state: jsmnparse flbjsontokenise flbpackjsonstate...

OSV-2022-648 Use-of-uninitialized-value in _LUTeval16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49549 Crash type: Use-of-uninitialized-value Crash state: LUTeval16 cmsCreateExtendedTransform cmsCreateTransform...

OSV-2022-647 Heap-use-after-free in cmsFreeNamedColorList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49546 Crash type: Heap-use-after-free READ 4 Crash state: cmsFreeNamedColorList TypeNamedColorFree cmsCloseProfile...

Spring Authorization Server Is Going 1.0

We are excited to announce that weve started preparing for Spring Authorization Server 1.0 with plans to release the GA version in November 2022. It has been just over two years since we initially announced this new project, and we have come a long way since its initial development. The project h...