PT-2022-37289 · Git +1 · Xstream

Name of the Vulnerable Software and Affected Versions: No specific software or version information is provided in the input descriptions. Description: A security exception crash has been reported, involving the com.ctc.wstx.dtd.FullDTDReader.readContentSpec function, which is related to reading...

OSV-2022-914 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51492 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.metamodel.BaseNodeMetaModel.getDeclaredPropertyMetaModels...

OSV-2022-865 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51101 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.lang.StringUTF16.newString java.base/java.lang.String.substring...

PT-2022-37261 · Git +1 · Xstream

Name of the Vulnerable Software and Affected Versions: No specific software or version information is provided in the input description. Description: A security exception crash has been reported, involving the com.ctc.wstx.dtd.FullDTDReader.readContentSpec function, which interacts with...

OSV-2022-852 Security exception in java.base/java.nio.Bits.reserveMemory

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51044 Crash type: Security exception Crash state: java.base/java.nio.Bits.reserveMemory java.base/java.nio.DirectByteBuffer. java.base/java.nio.ByteBuffer.allocateDirect...

OSV-2022-782 Security exception in java.base/java.lang.StringBuffer.append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50600 Crash type: Security exception Crash state: java.base/java.lang.StringBuffer.append org.apache.commons.jxpath.ri.compiler.CoreFunction.toString java.base/java.lang.String.valueOf...

OSV-2022-768 Security exception in org.apache.commons.jxpath.ri.axes.UnionContext.setPosition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50506 Crash type: Security exception Crash state: org.apache.commons.jxpath.ri.axes.UnionContext.setPosition org.apache.commons.jxpath.ri.axes.NodeSetContext.nextNode org.apache.commons.jxpath.ri.axes.PredicateContext.nextNode...

OSV-2022-764 Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperation.parenthesize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50458 Crash type: Security exception Crash state: org.apache.commons.jxpath.ri.compiler.CoreOperation.parenthesize org.apache.commons.jxpath.ri.compiler.CoreOperation.toString...

PT-2022-37208 · Apache · Apache Commons Jxpath

Name of the Vulnerable Software and Affected Versions: Apache Commons JXPath affected versions not specified Description: The issue is related to a security exception in the Apache Commons JXPath library. The crash occurs in the parenthesize method of CoreOperation and the toString method of...

OSV-2022-760 Security exception in com.fasterxml.jackson.dataformat.toml.Parser.parseInlineTable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50432 Crash type: Security exception Crash state: com.fasterxml.jackson.dataformat.toml.Parser.parseInlineTable com.fasterxml.jackson.dataformat.toml.Parser.parseValue com.fasterxml.jackson.dataformat.toml.Parser.parseKeyVal...

OSV-2022-749 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50393 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.nio.charset.CharsetEncoder.replaceWith java.base/java.nio.charset.CharsetEncoder...

PT-2022-37206 · Unknown · Com.Fasterxml.Jackson.Dataformat.Tomcat

Name of the Vulnerable Software and Affected Versions: com.fasterxml.jackson.dataformat.tomcat version affected versions not specified Description: A security exception occurs due to a crash in the com.fasterxml.jackson.dataformat.toml module. The issue is related to the parseInlineTable,...

PT-2022-37205 · Oracle · Java.Base

Name of the Vulnerable Software and Affected Versions: java.base affected versions not specified Description: A security exception occurs due to a crash in the com.ctc.wstx.dtd.FullDTDReader.readContentSpec function, which is related to the CESU 8.updatePositions and CESU 8$Encoder.encodeArrayLoo...

OSV-2022-743 Security exception in org.apache.commons.jxpath.ri.parser.XPathParser.MultiplicativeExpr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50363 Crash type: Security exception Crash state: org.apache.commons.jxpath.ri.parser.XPathParser.MultiplicativeExpr org.apache.commons.jxpath.ri.parser.XPathParser.SubtractiveExpr...

OSV-2022-738 Security exception in DatatypeFuzzer.fuzzerTestOneInput

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50379 Crash type: Security exception Crash state: DatatypeFuzzer.fuzzerTestOneInput com.codeintelligence.jazzer.driver.FuzzTargetRunner.runOne com.codeintelligence.jazzer.driver.FuzzTargetRunner.startLibFuzzer...

OSV-2022-733 Security exception in jaz.Zer.<clinit>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50374 Crash type: Security exception Crash state: jaz.Zer. java.base/java.lang.Class.forName0 java.base/java.lang.Class.forName...

PT-2022-37197 · Git +1 · Jackson-Modules-Java8

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash was reported, with details including a crash type and crash state. The crash state involves methods such as fuzzerTestOneInput...

OSV-2022-678 Security exception in com.fasterxml.jackson.databind.node.ArrayNode.serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49828 Crash type: Security exception Crash state: com.fasterxml.jackson.databind.node.ArrayNode.serialize com.fasterxml.jackson.core.json.WriterBasedJsonGenerator.verifyValueWrite...

OSV-2022-467 Security exception in jaz.Zer.<clinit>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47914 Crash type: Security exception Crash state: jaz.Zer. java.base/java.lang.Class.forName0 java.base/java.lang.Class.forName...

Denial Of Service (DoS)

bignum is vulnerable to denial of service. The vulnerability exists in .powm function in index.js due to a type-check exception which allows an attacker to cause an application crash...