OSV-2023-1164 Heap-buffer-overflow in WriteCLUT

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64166 Crash type: Heap-buffer-overflow READ 4 Crash state: WriteCLUT cmsGetPostScriptColorResource cmsGetPostScriptCRD...

OSV-2023-1163 Invalid-free in sc_file_clear_acl_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64181 Crash type: Invalid-free Crash state: scfileclearaclentries scfilefree setcoscreatekey...

clamav:clamav_dbload_CDB_fuzzer: Memcpy-param-overlap in repeat

Detailed Report: https://oss-fuzz.com/testcase?key=5732124107603968 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x7e5759a2e9c8,0x7e5761327788 and 0x7e5752135c10,...

OSV-2023-1160 Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64147 Crash type: Heap-buffer-overflow READ 1 Crash state: IEC104Stats::processPacket Flow::processIEC60870Packet NetworkInterface::processPacket...

OSV-2023-1157 Security exception in org.apache.lucene.util.ArrayUtil.growExact

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64141 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.growExact org.apache.lucene.util.ArrayUtil.grow org.apache.lucene.util.BytesRefBuilder.grow...

lcms:cms_postscript_fuzzer: Heap-buffer-overflow in WriteCLUT

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=5128630770204672 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmspostscriptfuzzer Job Type: libfuzzerasani386lcms Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

njs:njs_process_script_fuzzer: Heap-buffer-overflow in njs_chb_append0

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=4773865129377792 Project: njs Fuzzing Engine: afl Fuzz Target: njsprocessscriptfuzzer Job Type: aflasannjs Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6250000bb100 Crash State:...

OSV-2023-1153 Heap-buffer-overflow in pcpp::SSLClientHelloMessage::getCipherSuite

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64124 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::SSLClientHelloMessage::getCipherSuite readParsedPacket FuzzTarget.cpp...

OSV-2023-1152 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64130 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.ByteBuffer.position java.base/sun.nio.cs.UTF8.updatePositions...

OSV-2023-1149 Heap-buffer-overflow in bit_read_fixed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64118 Crash type: Heap-buffer-overflow READ 16 Crash state: bitreadfixed bitreadTF decodepreR13sentinel...

OSV-2023-1146 Negative-size-param in pcpp::RawPacket::insertData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64111 Crash type: Negative-size-param Crash state: pcpp::RawPacket::insertData pcpp::Packet::extendLayer pcpp::BgpUpdateMessageLayer::setNetworkLayerReachabilityInfo...

OSV-2023-1145 Heap-buffer-overflow in pcpp::GREv1Layer::computeCalculateFields

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64110 Crash type: Heap-buffer-overflow WRITE 2 Crash state: pcpp::GREv1Layer::computeCalculateFields pcpp::Packet::computeCalculateFields FuzzTarget.cpp...

mariadb-connector-j:MariaDbPoolDataSourceFuzzer: Security exception in java.base/java.util.concurrent.ArrayBlockingQueue.<init>

Project: https://github.com/mariadb-corporation/mariadb-connector-j.git Detailed Report: https://oss-fuzz.com/testcase?key=5025115615920128 Project: mariadb-connector-j Fuzzing Engine: libFuzzer Fuzz Target: MariaDbPoolDataSourceFuzzer Job Type: libfuzzerasanmariadb-connector-j Platform Id: linux...

PT-2023-35575 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 2 crash has been reported. The crash occurs in the pcpp::GREv1Layer::computeCalculateFields and...

PT-2023-35581 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash occurred in the pcpp::SSLClientHelloMessage::getCipherSuite function, as reported by OSS-Fuzz. The crash was triggere...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::SomeIpSdEntry::SomeIpSdEntry

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=6202635493179392 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::SSLClientHelloMessage::getCipherSuite

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5822179471917056 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::computeChecksum

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5392567432511488 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

libredwg:llvmfuzz: Heap-buffer-overflow in bit_read_fixed

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5242380110135296 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address:...

pcapplusplus:FuzzWriterNg: Crash in light_get_next_packet

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5221797972541440 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzWriterNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...