OSV-2024-777 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68562 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug dotrans tsmvteinput...

OSV-2024-772 UNKNOWN READ in H5SL_search

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68989 Crash type: UNKNOWN READ Crash state: H5SLsearch H5FSsectremovereal H5FSsecttryextend...

PT-2024-40840 · Git +1 · Cups

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the cupsStrAlloc function, which is called by ippReadIO ...

PT-2024-40851

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of Use-of-uninitialized-value. The crash state is associated with pcapint filter with aux data in the file fuzz both.c...

OSV-2024-748 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71032 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

OSV-2024-747 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71083 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.CharBuffer.wrap java.base/sun.nio.cs.StreamEncoder.implWrite...

PT-2024-40838 · Oracle · Java

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a security exception, with details provided in an OSS-Fuzz report. The crash state involves methods such as...

kimageformats:kimgio_xcf_fuzzer: Heap-buffer-overflow in XCFImageFormat::loadTileRLE

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6467832601182208 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

rtpproxy:fuzz_rtp_session: Heap-buffer-overflow in fuzz_rtp_session.c

Project: https://github.com/sippy/rtpproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=6349538254716928 Project: rtpproxy Fuzzing Engine: afl Fuzz Target: fuzzrtpsession Job Type: aflasanrtpproxy Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x525000009b98...

ffmpeg:ffmpeg_AV_CODEC_ID_RV30_fuzzer: Use-of-uninitialized-value in put_rv30_tpel8_h_lowpass

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6494489919684608 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDRV30fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

unicorn:fuzz_emu_m68k_be: Use-of-uninitialized-value in tcg_gen_brcond_i32_m68k

Detailed Report: https://oss-fuzz.com/testcase?key=6225384843051008 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemum68kbe Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: tcggenbrcondi32m68k disasfbcc...

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5FS__sinfo_serialize_node_cb

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=6427457148747776 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzerasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

fluent-bit:flb-it-fuzz-input_fuzzer_OSSFUZZ: Heap-use-after-free in cio_error_reset

Detailed Report: https://oss-fuzz.com/testcase?key=5326228809121792 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-inputfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-free WRITE 4 Crash Address: 0x512000092fb8 Crash State:...

OSV-2024-732 Security exception in com.github.javaparser.ast.visitor.VoidVisitorAdapter.lambda$visit$19

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71009 Crash type: Security exception Crash state: com.github.javaparser.ast.visitor.VoidVisitorAdapter.lambda$visit$19 java.base/java.util.ArrayList.forEach com.github.javaparser.ast.NodeList.forEach...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::getwords

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4546028487901184 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Use-of-uninitialized-value in ff_h274_apply_film_grain

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5517722610368512 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

OSV-2024-728 Negative-size-param in pdf_resize_resource_arrays

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70967 Crash type: Negative-size-param Crash state: pdfresizeresourcearrays processcmaptext pdftextprocess...

OSV-2024-720 Security exception in jflex.core.NFA.insertNFA

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70964 Crash type: Security exception Crash state: jflex.core.NFA.insertNFA java.base/java.lang.ClassLoader.defineClass1 java.base/java.lang.ClassLoader.defineClass...

OSV-2024-719 Heap-buffer-overflow in hevc_ref_pic_lists_modification

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70890 Crash type: Heap-buffer-overflow WRITE 4 Crash state: hevcrefpiclistsmodification gfhevcparsenalubs gfinspectdumpnaluinternal...

ffmpeg:ffmpeg_dem_IVR_fuzzer: Use-of-uninitialized-value in rm_read_audio_stream_info

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5298245077630976 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemIVRfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...