OSV-2022-379 Segv on unknown address in bit_write_TV

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47014 Crash type: Segv on unknown address Crash state: bitwriteTV bitwriteT dwgencodeBLOCK...

OSV-2022-377 Heap-buffer-overflow in decode_preR13_section_hdr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46983 Crash type: Heap-buffer-overflow WRITE 4 Crash state: decodepreR13sectionhdr decodepreR13 dwgdecode...

OSV-2022-376 Heap-buffer-overflow in ndpi_search_raknet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47000 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpisearchraknet checkndpidetectionfunc ndpicheckflowfunc...

OSV-2022-375 Stack-use-after-return in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46986 Crash type: Stack-use-after-return READ 1 Crash state: std::1::function::funcbool grk::WaveletReverse::decompresspartialtilei tf::Executor::invoke tf::Executor::spawn...

OSV-2022-374 Stack-use-after-scope in RefCopyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47001 Crash type: Stack-use-after-scope READ Crash state: RefCopyBytes dngstream::Put tagdataptr::Put...

OSV-2022-372 Heap-buffer-overflow in dwg_encode_VERTEX_2D

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46994 Crash type: Heap-buffer-overflow READ 8 Crash state: dwgencodeVERTEX2D dwgencodeaddobject dwgencode...

GSD-2022-1002284 ALSA: oss: Fix PCM OSS buffer allocation overflow

ALSA: oss: Fix PCM OSS buffer allocation overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.188 by commit...

GSD-2022-1002152 ALSA: oss: Fix PCM OSS buffer allocation overflow

ALSA: oss: Fix PCM OSS buffer allocation overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.109 by commit...

GSD-2022-1001941 ALSA: oss: Fix PCM OSS buffer allocation overflow

ALSA: oss: Fix PCM OSS buffer allocation overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.32 by commit...

GSD-2022-1001635 ALSA: oss: Fix PCM OSS buffer allocation overflow

ALSA: oss: Fix PCM OSS buffer allocation overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.18 by commit...

OSV-2022-368 Heap-buffer-overflow in exif_get_long

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46917 Crash type: Heap-buffer-overflow READ 1 Crash state: exifgetlong exifmnotedatafujiload exifmnotedataload...

OSV-2022-363 Heap-use-after-free in dwg_free_TABLEGEOMETRY_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46847 Crash type: Heap-use-after-free READ 8 Crash state: dwgfreeTABLEGEOMETRYprivate dwgfreeTABLEGEOMETRY dwgfreevariablenoclass...

OSV-2022-361 UNKNOWN READ in sc_pkcs15_decode_pubkey_ec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46852 Crash type: UNKNOWN READ Crash state: scpkcs15decodepubkeyec scpkcs15decodepubkey fuzzpkcs15decode.c...

OSV-2022-360 Invalid-free in igl::MshLoader::~MshLoader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46818 Crash type: Invalid-free Crash state: igl::MshLoader::MshLoader iglfuzzer.cpp...

CVE-2022-21405

Vulnerability in the OSS Support Tools product of Oracle Support Tools component: Oracle Explorer. The supported version that is affected is 18.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where OSS Support Tools executes to compromise OSS...

CVE-2022-21405

Vulnerability in the OSS Support Tools product of Oracle Support Tools component: Oracle Explorer. The supported version that is affected is 18.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where OSS Support Tools executes to compromise OSS...

CVE-2022-21405

Vulnerability in the OSS Support Tools product of Oracle Support Tools component: Oracle Explorer. The supported version that is affected is 18.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where OSS Support Tools executes to compromise OSS...

Code injection

Vulnerability in the OSS Support Tools product of Oracle Support Tools component: Oracle Explorer. The supported version that is affected is 18.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where OSS Support Tools executes to compromise OSS...

CVE-2022-21405

CVE-2022-21405 affects Oracle OSS Support Tools (component: Oracle Explorer) with affected version 18.3. The vulnerability enables a high-privilege attacker who can log on to the infrastructure running OSS Support Tools to compromise the tooling; exploitation requires user interaction and may imp...

OSV-2022-359 Heap-use-after-free in Segment::write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46788 Crash type: Heap-use-after-free READ 1 Crash state: Segment::write Doublewrite::writepages Doublewrite::flushtodisk...