CVE-2022-38266

An issue in the Leptonica linked library v1.79.0 allows attackers to cause an arithmetic exception leading to a Denial of Service DoS via a crafted JPEG file...

CVE-2022-38266: Divide By Zero

An issue in the Leptonica linked library v1.79.0 allows attackers to cause an arithmetic exception leading to a Denial of Service DoS via a crafted JPEG file...

CVE-2022-38266

An issue in the Leptonica linked library v1.79.0 allows attackers to cause an arithmetic exception leading to a Denial of Service DoS via a crafted JPEG file...

xstream:XmlFuzzer: Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

Project: https://github.com/x-stream/xstream.git Detailed Report: https://oss-fuzz.com/testcase?key=5876830652989440 Project: xstream Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanxstream Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in org.yaml.snakeyaml.parser.ParserImpl$ParseBlockMappingValueComment.produce

Detailed Report: https://oss-fuzz.com/testcase?key=5029703743832064 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

CVE-2022-36067

A flaw was found in the vm2 sandbox when running untrusted code, as the sandbox setup does not manage proper exception handling. This flaw allows an attacker to bypass the sandbox protections and gain remote code execution on the hypervisor host or the host which is running the sandbox. Mitigatio...

hsqldb:SqlPreparedStatementFuzzer: Security exception with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5357744118431744 Project: hsqldb Fuzzing Engine: libFuzzer Fuzz Target: SqlPreparedStatementFuzzer Job Type: libfuzzerasanhsqldb Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL Sanitizer: address ASAN Recommende...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.model.Tag.equals

Detailed Report: https://oss-fuzz.com/testcase?key=5174215334035456 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: co.nstant.in.cbor.model.Tag.equals...

OSV-2022-852 Security exception in java.base/java.nio.Bits.reserveMemory

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51044 Crash type: Security exception Crash state: java.base/java.nio.Bits.reserveMemory java.base/java.nio.DirectByteBuffer. java.base/java.nio.ByteBuffer.allocateDirect...

arrow-java:FuzzIpcStream: Security exception in java.base/java.nio.Bits.reserveMemory

Detailed Report: https://oss-fuzz.com/testcase?key=4847330683125760 Project: arrow-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzIpcStream Job Type: libfuzzerasanarrow-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.nio.Bits.reserveMemory...

Amazon Linux 2022 : wireshark-cli, wireshark-devel (ALAS2022-2022-079)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-079 advisory. A NULL pointer exception flaw was found in Wireshark. A process failure on crafted or malformed input in the IPPUSB dissector can cause a denial of service via a packet injection or a crafted...

jackson-databind:ObjectReader2Fuzzer: Security exception in com.fasterxml.jackson.databind.deser.std.StdDeserializer._parseBooleanPrimitive

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=4650513269915648 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ObjectReader2Fuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type: Security...

xstream:XmlFuzzer: Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

Project: https://github.com/x-stream/xstream.git Detailed Report: https://oss-fuzz.com/testcase?key=6278204565880832 Project: xstream Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanxstream Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

tomcat:ConnectorSendFileFuzzer: Security exception in ConnectorSendFileFuzzer.fuzzerTestOneInput

Project: https://github.com/apache/tomcat.git Detailed Report: https://oss-fuzz.com/testcase?key=6223303768932352 Project: tomcat Fuzzing Engine: libFuzzer Fuzz Target: ConnectorSendFileFuzzer Job Type: libfuzzerasantomcat Platform Id: linux Crash Type: Security exception Crash Address: Crash...

archaius-core:DynamicPropertyFuzzer: Security exception in java.base/java.util.HashMap.resize

Detailed Report: https://oss-fuzz.com/testcase?key=6644657961959424 Project: archaius-core Fuzzing Engine: libFuzzer Fuzz Target: DynamicPropertyFuzzer Job Type: libfuzzerasanarchaius-core Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Denial Of Service (DoS)

mupdf is vulnerable to denial of service attacks. A Floating point exception flaw was found in Mupdf for zero width pages in muraster.c. which allows an attacker to crash the system...

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4847100566831104 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

spring-framework:AspectJExpressionPointcutFuzzer: Security exception in org.aspectj.weaver.patterns.PatternParser.parseAtomicPointcut

Project: https://github.com/spring-projects/spring-framework.git Detailed Report: https://oss-fuzz.com/testcase?key=6350062699020288 Project: spring-framework Fuzzing Engine: libFuzzer Fuzz Target: AspectJExpressionPointcutFuzzer Job Type: libfuzzerasanspring-framework Platform Id: linux Crash...

spring-framework:AspectJExpressionPointcutFuzzer: Security exception in org.aspectj.weaver.patterns.PatternParser.parseNotOrPointcut

Project: https://github.com/spring-projects/spring-framework.git Detailed Report: https://oss-fuzz.com/testcase?key=5209576781250560 Project: spring-framework Fuzzing Engine: libFuzzer Fuzz Target: AspectJExpressionPointcutFuzzer Job Type: libfuzzerasanspring-framework Platform Id: linux Crash...

spring-framework:AspectJExpressionPointcutFuzzer: Security exception in org.aspectj.weaver.patterns.PatternParser.parseNotOrTypePattern

Project: https://github.com/spring-projects/spring-framework.git Detailed Report: https://oss-fuzz.com/testcase?key=5157996564447232 Project: spring-framework Fuzzing Engine: libFuzzer Fuzz Target: AspectJExpressionPointcutFuzzer Job Type: libfuzzerasanspring-framework Platform Id: linux Crash...