CVE-2024-33766

lunasvg v2.3.9 was discovered to contain an FPE Floating Point Exception at blendtransformedtiledargb.isra.0...

jackson-dataformat-xml:XmlDeserializerFuzzer: Security exception in com.sun.xml.stream.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next

Project: https://github.com/FasterXML/jackson-dataformat-xml.git Detailed Report: https://oss-fuzz.com/testcase?key=6684306488492032 Project: jackson-dataformat-xml Fuzzing Engine: libFuzzer Fuzz Target: XmlDeserializerFuzzer Job Type: libfuzzerasanjackson-dataformat-xml Platform Id: linux Crash...

jackson-dataformat-xml:XmlDeserializerFuzzer: Security exception in java.base/java.lang.StringUTF16.newBytesFor

Project: https://github.com/FasterXML/jackson-dataformat-xml.git Detailed Report: https://oss-fuzz.com/testcase?key=4753166020182016 Project: jackson-dataformat-xml Fuzzing Engine: libFuzzer Fuzz Target: XmlDeserializerFuzzer Job Type: libfuzzerasanjackson-dataformat-xml Platform Id: linux Crash...

jackson-dataformat-xml:XmlDeserializerFuzzer: Security exception in com.sun.xml.stream.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next

Project: https://github.com/FasterXML/jackson-dataformat-xml.git Detailed Report: https://oss-fuzz.com/testcase?key=5933766865387520 Project: jackson-dataformat-xml Fuzzing Engine: libFuzzer Fuzz Target: XmlDeserializerFuzzer Job Type: libfuzzerasanjackson-dataformat-xml Platform Id: linux Crash...

jackson-dataformat-xml:XmlDeserializerFuzzer: Security exception in com.sun.xml.stream.xerces.util.XMLStringBuffer.append

Project: https://github.com/FasterXML/jackson-dataformat-xml.git Detailed Report: https://oss-fuzz.com/testcase?key=5099042146156544 Project: jackson-dataformat-xml Fuzzing Engine: libFuzzer Fuzz Target: XmlDeserializerFuzzer Job Type: libfuzzerasanjackson-dataformat-xml Platform Id: linux Crash...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=4709888648347648 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

OSV-2024-391 Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68324 Crash type: Security exception Crash state: org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII...

OSV-2024-372 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67413 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal java.base/java.lang.AbstractStringBuilder.append...

OSV-2024-359 Security exception in graphql.schema.GraphQLTypeUtil.simplePrint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67751 Crash type: Security exception Crash state: graphql.schema.GraphQLTypeUtil.simplePrint graphql.schema.GraphQLTypeUtil.simplePrint graphql.schema.GraphQLTypeUtil.unwrapOne...

OSV-2024-349 Security exception in java.base/java.lang.AbstractStringBuilder.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67525 Crash type: Security exception Crash state: java.base/java.lang.AbstractStringBuilder. java.base/java.lang.StringBuilder. org.apache.commons.codec.language.bm.Rule$Phoneme...

OSV-2024-335 Security exception in org.springframework.expression.spel.standard.InternalSpelExpressionParser.eatExp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67978 Crash type: Security exception Crash state: org.springframework.expression.spel.standard.InternalSpelExpressionParser.eatExp java.base/java.nio.charset.CharsetEncoder.replaceWith java.base/java.nio.charset.CharsetEncoder...

PT-2024-40736

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash was reported, involving the java.base/java.util.Arrays.copyOf, java.base/java.lang.AbstractStringBuilder.ensureCapacityInterna...

PT-2024-40726

Name of the Vulnerable Software and Affected Versions: Apache Commons Codec affected versions not specified Description: The issue is related to a security exception in the java.lang.AbstractStringBuilder and java.lang.StringBuilder classes, which are part of the Java base library, and is trigger...

PT-2024-40747 · Apache · Apache Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: A security exception occurs in the ASCIIFoldingFilter class, specifically in the foldToASCII and incrementToken methods. This issue is related to a crash type of security exception...

PT-2024-40730

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a security exception in the GraphQLTypeUtil class, specifically in the simplePrint and unwrapOne methods. The crash type is a...

PT-2024-25469 · Lunasvg · Lunasvg

Name of the Vulnerable Software and Affected Versions: lunasvg version 2.3.9 Description: The issue is related to a Floating Point Exception FPE at blend transformed tiled argb.isra.0. This indicates a problem with how the software handles certain mathematical operations, potentially leading to...

OSV-2024-323 Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68346 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst java.base/java.util.stream.ReferencePipeline$3$1.accept...

PT-2024-40713

Name of the Vulnerable Software and Affected Versions: Checkstyle affected versions not specified Description: A security exception occurs in the getInnerBopAst function of JavaAstVisitor class. The issue is related to the ReferencePipeline$3$1.accept and...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst

Project: https://github.com/checkstyle/checkstyle.git Detailed Report: https://oss-fuzz.com/testcase?key=6099534745763840 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerasancheckstyle Platform Id: linux Crash Type: Security exception Crash Address:...

RHEL 7 : java-11-openjdk (RHSA-2024:1821)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1821 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...