OSV-2022-511 UNKNOWN READ in zfp_getcell

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48372 Crash type: UNKNOWN READ Crash state: zfpgetcell bloscd bloscgetitem...

OSV-2022-510 Heap-buffer-overflow in read_blob_signed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48329 Crash type: Heap-buffer-overflow READ 4 Crash state: readblobsigned parsesignaturetype parsesignaturetype...

OSV-2022-508 Heap-buffer-overflow in coap_split_uri_sub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48362 Crash type: Heap-buffer-overflow READ 1 Crash state: coapspliturisub coapgeturipath...

OSV-2022-507 Heap-use-after-free in psi_device_ref_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48305 Crash type: Heap-use-after-free READ 8 Crash state: psidevicereffinalize gsgcreclaim ireclaim...

OSV-2022-501 UNKNOWN WRITE in grk::TileLengthMarkers::seek

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48224 Crash type: UNKNOWN WRITE Crash state: grk::TileLengthMarkers::seek grk::CodeStreamDecompress::skipNonScheduledTLM grk::CodeStreamDecompress::parseTileParts...

OSV-2022-494 Heap-buffer-overflow in ucl_hash_search

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48156 Crash type: Heap-buffer-overflow READ 1 Crash state: uclhashsearch uclparserprocessobjectelement uclstatemachine...

Malicious code in code-oss-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a46615fdcef4247bc9a1aabc87f17e44b8ec59d86ea9c19c58db63ad82106ef3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1966 Malicious code in code-oss-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a46615fdcef4247bc9a1aabc87f17e44b8ec59d86ea9c19c58db63ad82106ef3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oss-contribution-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7742e7252a9060583a9cb32762cad21d121c9fabdae5decd191969c31e36c3fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-956 Malicious code in amazon-oss-attribution-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d6d5c9699e203a5e4de06a6c3b28c05d236e4e2bd18056e42c0119d6e161f41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lyft-oss-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53666d8b94c7d38025432fc27e383808a8ab339154481d546b6696114385e5d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4436 Malicious code in lyft-oss-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53666d8b94c7d38025432fc27e383808a8ab339154481d546b6696114385e5d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oss-site-jekyll-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96f98f5dc4b4ace55d9a664b834bbe88585350315a9dc4d24c7513b5258a63c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5135 Malicious code in oss-site-jekyll-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96f98f5dc4b4ace55d9a664b834bbe88585350315a9dc4d24c7513b5258a63c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in code-oss-dev-build1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b65930836996ae35d0c2c41c28426c97cd1b2bb8eda37b966b527b177ceea85f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1968 Malicious code in code-oss-dev-build1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b65930836996ae35d0c2c41c28426c97cd1b2bb8eda37b966b527b177ceea85f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1967 Malicious code in code-oss-dev-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 456f94eeaa17d4db11b05a4eff73593023d7da49fd6cd24c043620da98c18616 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OSV-2022-492 Heap-buffer-overflow in jxl::BitsCoder::Read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48123 Crash type: Heap-buffer-overflow READ 8 Crash state: jxl::BitsCoder::Read jxl::ReadVisitor::Bits jxl::jpeg::JPEGData::VisitFields...

OSV-2022-490 Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48060 Crash type: Stack-buffer-overflow READ 4 Crash state: spvtools::opt::CompositeInsertToCompositeConstruct std::1::function::funcbool spvtools::opt::InstructionFolder::FoldInstructionInternal...

OSV-2022-489 Heap-buffer-overflow in fr_size_from_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48069 Crash type: Heap-buffer-overflow READ 1 Crash state: frsizefromstr frvalueboxfromsubstr frvalueboxfromstr...