PT-2022-37208 · Apache · Apache Commons Jxpath

Name of the Vulnerable Software and Affected Versions: Apache Commons JXPath affected versions not specified Description: The issue is related to a security exception in the Apache Commons JXPath library. The crash occurs in the parenthesize method of CoreOperation and the toString method of...

jackson-databind:ObjectReader2Fuzzer: Security exception in com.fasterxml.jackson.databind.deser.BeanDeserializer._deserializeFromArray

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=4681021680910336 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ObjectReader2Fuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type: Security...

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.MemberValueArrayInitializer

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6260584991031296 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

OSV-2022-760 Security exception in com.fasterxml.jackson.dataformat.toml.Parser.parseInlineTable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50432 Crash type: Security exception Crash state: com.fasterxml.jackson.dataformat.toml.Parser.parseInlineTable com.fasterxml.jackson.dataformat.toml.Parser.parseValue com.fasterxml.jackson.dataformat.toml.Parser.parseKeyVal...

OSV-2022-749 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50393 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.nio.charset.CharsetEncoder.replaceWith java.base/java.nio.charset.CharsetEncoder...

PT-2022-37206 · Unknown · Com.Fasterxml.Jackson.Dataformat.Tomcat

Name of the Vulnerable Software and Affected Versions: com.fasterxml.jackson.dataformat.tomcat version affected versions not specified Description: A security exception occurs due to a crash in the com.fasterxml.jackson.dataformat.toml module. The issue is related to the parseInlineTable,...

PT-2022-37200

Name of the Vulnerable Software and Affected Versions java.base affected versions not specified Description A security exception crash has been reported. The crash involves the com.ctc.wstx.dtd.FullDTDReader.readContentSpec function, java.base/java.nio.charset.CharsetEncoder.replaceWith, and...

PT-2022-37205 · Oracle · Java.Base

Name of the Vulnerable Software and Affected Versions: java.base affected versions not specified Description: A security exception occurs due to a crash in the com.ctc.wstx.dtd.FullDTDReader.readContentSpec function, which is related to the CESU 8.updatePositions and CESU 8$Encoder.encodeArrayLoo...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperation.parenthesize

Detailed Report: https://oss-fuzz.com/testcase?key=5342279308541952 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.decoder.UnicodeStringDecoder.decode

Detailed Report: https://oss-fuzz.com/testcase?key=6606868662845440 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: co.nstant.in.cbor.decoder.UnicodeStringDecoder.decod...

jackson-dataformats-text:TOMLFuzzer: Security exception in com.fasterxml.jackson.dataformat.toml.Parser.parseInlineTable

Project: https://github.com/FasterXML/jackson-dataformats-text.git Detailed Report: https://oss-fuzz.com/testcase?key=6370486359031808 Project: jackson-dataformats-text Fuzzing Engine: libFuzzer Fuzz Target: TOMLFuzzer Job Type: libfuzzerasanjackson-dataformats-text Platform Id: linux Crash Type:...

xstream:XmlFuzzer: Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

Project: https://github.com/x-stream/xstream.git Detailed Report: https://oss-fuzz.com/testcase?key=6365800201584640 Project: xstream Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanxstream Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

javaparser:parseFuzzer: Security exception in com.github.javaparser.CommentsInserter.insertComments

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5551270101909504 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

jettison:JsonFuzzer: Security exception in java.base/java.lang.StringUTF16.newBytesFor

Project: https://github.com/jettison-json/jettison.git Detailed Report: https://oss-fuzz.com/testcase?key=5276946681954304 Project: jettison Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjettison Platform Id: linux Crash Type: Security exception Crash Address: Crash...

cbor-java:FuzzDec: Security exception in co.nstant.in.cbor.decoder.MapDecoder.decodeInfinitiveLength

Detailed Report: https://oss-fuzz.com/testcase?key=5082692122705920 Project: cbor-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzDec Job Type: libfuzzerasancbor-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2022-743 Security exception in org.apache.commons.jxpath.ri.parser.XPathParser.MultiplicativeExpr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50363 Crash type: Security exception Crash state: org.apache.commons.jxpath.ri.parser.XPathParser.MultiplicativeExpr org.apache.commons.jxpath.ri.parser.XPathParser.SubtractiveExpr...

OSV-2022-738 Security exception in DatatypeFuzzer.fuzzerTestOneInput

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50379 Crash type: Security exception Crash state: DatatypeFuzzer.fuzzerTestOneInput com.codeintelligence.jazzer.driver.FuzzTargetRunner.runOne com.codeintelligence.jazzer.driver.FuzzTargetRunner.startLibFuzzer...

OSV-2022-733 Security exception in jaz.Zer.<clinit>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50374 Crash type: Security exception Crash state: jaz.Zer. java.base/java.lang.Class.forName0 java.base/java.lang.Class.forName...

OSV-2022-729 Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50372 Crash type: Security exception Crash state: org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue...

PT-2022-37197 · Git +1 · Jackson-Modules-Java8

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash was reported, with details including a crash type and crash state. The crash state involves methods such as fuzzerTestOneInput...