OSV-2023-1243 Heap-use-after-free in zend_reference_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64579 Crash type: Heap-use-after-free READ 4 Crash state: zendreferencedestroy rcdtorfunc zendleavehelperSPEC...

OSV-2023-1240 UNKNOWN READ in MqttProps_Free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64570 Crash type: UNKNOWN READ Crash state: MqttPropsFree HandleProps MqttClientDecodePacket...

OSV-2023-1239 Heap-buffer-overflow in decToString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64574 Crash type: Heap-buffer-overflow WRITE 1 Crash state: decToString decNumberToString jvnumbergetliteral...

pcapplusplus:FuzzTarget: Crash in pcpp::TelnetLayer::distanceToNextIAC

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4981601846820864 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerubsanpcapplusplus Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

OSV-2023-1227 Stack-buffer-overflow in io_memory_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64529 Crash type: Stack-buffer-overflow WRITE 11 Crash state: iomemoryread riopluginread riodescread...

OSV-2023-1222 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64514 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.ByteBuffer.position java.base/sun.nio.cs.UTF8.updatePositions...

libavc:svc_dec_fuzzer: Heap-buffer-overflow in isvcd_process_residual_resample_mb

Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=6151544248336384 Project: libavc Fuzzing Engine: afl Fuzz Target: svcdecfuzzer Job Type: aflasanlibavc Platform Id: linux Crash Type:...

libxaac:xaac_enc_fuzzer: Global-buffer-overflow in iaace_estimate_scfs_chan

Project: https://github.com/ittiam-systems/libxaac.git Detailed Report: https://oss-fuzz.com/testcase?key=5189794317336576 Project: libxaac Fuzzing Engine: libFuzzer Fuzz Target: xaacencfuzzer Job Type: libfuzzerasanlibxaac Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Addres...

radare2:ia_fuzz: Stack-buffer-overflow in io_memory_read

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=6642114892791808 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type:...

OSV-2023-1221 Security exception in jaz.Zer.reportFinding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64488 Crash type: Security exception Crash state: jaz.Zer.reportFinding jaz.Zer.reportFindingIfEnabled jaz.Zer.readObject...

wolfssl:fuzzer-wolfssl-server-randomize: Heap-buffer-overflow in sp_clear

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5841038547484672 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-server-randomize Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Cra...

OSV-2023-1214 Heap-buffer-overflow in NetworkInterface::dissectPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64454 Crash type: Heap-buffer-overflow READ 2 Crash state: NetworkInterface::dissectPacket fuzzdissectpacket.cpp...

OSV-2023-1208 Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64438 Crash type: Heap-buffer-overflow WRITE Crash state: ih264dformatconvert ih264ddecodepicturethread...

OSV-2023-1207 Heap-buffer-overflow in isvcd_start_of_pic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64436 Crash type: Heap-buffer-overflow WRITE Crash state: isvcdstartofpic isvcdparsedecodeslice isvcdparsenalunit...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::MplsLayer::toString

Detailed Report: https://oss-fuzz.com/testcase?key=6148419743514624 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pcpp::MplsLayer::toString...

OSV-2023-1201 Negative-size-param in pcpp::RawPacket::insertData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64418 Crash type: Negative-size-param Crash state: pcpp::RawPacket::insertData pcpp::Packet::extendLayer pcpp::BgpUpdateMessageLayer::setNetworkLayerReachabilityInfo...

ruby:fuzz_ruby_gems: Heap-buffer-overflow in gc_mark_ptr

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4506880667680768 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzrubygems Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60b000009ed0 Cras...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperation.toString

Detailed Report: https://oss-fuzz.com/testcase?key=5448317307584512 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

ffmpeg:ffmpeg_BSF_H264_MP4TOANNEXB_fuzzer: Heap-buffer-overflow in h264_mp4toannexb_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4966763443650560 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegBSFH264MP4TOANNEXBfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 5 Crash Address:...

OSV-2023-1195 Security exception in java.base/java.util.HashMap.resize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64367 Crash type: Security exception Crash state: java.base/java.util.HashMap.resize java.base/java.util.HashMap.putVal java.base/java.util.HashMap.put...