OSV-2022-12 Heap-buffer-overflow in print_mac

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43304 Crash type: Heap-buffer-overflow WRITE 4 Crash state: printmac logpacket dhcpreply...

OSV-2022-10 Heap-buffer-overflow in check_bad_address

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43308 Crash type: Heap-buffer-overflow WRITE 1 Crash state: checkbadaddress checkforboguswildcard FuzzCheckForBogusWildcard...

OSV-2022-6 Heap-buffer-overflow in extract_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43299 Crash type: Heap-buffer-overflow WRITE 1 Crash state: extractname hashquestions fuzzutil.c...

OSV-2022-4 Memcpy-param-overlap in ZSTD_createDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43287 Crash type: Memcpy-param-overlap Crash state: ZSTDcreateDDict bloscrundecompressionwithcontext blosc2decompressctx...

OSV-2022-3 UNKNOWN READ in pdfi_free_array

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43255 Crash type: UNKNOWN READ Crash state: pdfifreearray pdfifreeobject pdfifreedict...

OSV-2022-1 Heap-use-after-free in pdfi_dereference

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43268 Crash type: Heap-use-after-free READ 4 Crash state: pdfidereference pdfidictnext pdficheckResources...

OSV-2021-1797 Heap-buffer-overflow in grk::GrkImage::cieLabToRGB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43161 Crash type: Heap-buffer-overflow WRITE 4 Crash state: grk::GrkImage::cieLabToRGB grk::GrkImage::applyColourManagement grk::CodeStreamDecompress::postProcess...

OSV-2021-1796 Heap-buffer-overflow in Curl_sasl_decode_mech

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43186 Crash type: Heap-buffer-overflow READ 10 Crash state: Curlsasldecodemech Curlsaslparseurlauthoption pop3parseurloptions...

CVE-2021-45931

HarfBuzz 2.9.0 has an out-of-bounds write in hbbitsetinvertiblet::set called from hbsparsesett::set and hbsetcopy...

CVE-2021-45930

Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps::growAppend called from QPainterPath::addPath and QPathClipper::intersect...

CVE-2021-45953

Dnsmasq 2.86 has a heap-based buffer overflow in extractname called from hashquestions and fuzzutil.c. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

CVE-2021-45952

Dnsmasq 2.86 has a heap-based buffer overflow in dhcpreply called from dhcppacket and FuzzDhcp. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

CVE-2021-45954

Dnsmasq 2.86 has a heap-based buffer overflow in extractname called from answerauth and FuzzAuth. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

AZL-8960 CVE-2021-45953 affecting package dnsmasq for versions less than 2.89-1

Dnsmasq 2.86 has a heap-based buffer overflow in extractname called from hashquestions and fuzzutil.c. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

OSV-2021-1795 Negative-size-param in general_endcidrange_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43156 Crash type: Negative-size-param Crash state: generalendcidrangefunc cmapendcidrangefunc pdfipscriptinterpret...

OSV-2021-1793 Heap-buffer-overflow in seturl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43160 Crash type: Heap-buffer-overflow READ Crash state: seturl parseurl curlurlset...

Dnsmasq 缓冲区错误漏洞

dnsmasq is a lightweight DNS forwarding and DHCP and TFTP server written in C. It can be used as a server to forward DNS, DHCP, and TFTP. Dnsmasq 2.86 suffers from a buffer error vulnerability that stems from a heap-based buffer overflow in extractname called from answerauth and FuzzAuth...

OSV-2021-1791 Heap-buffer-overflow in ZSTD_createDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43110 Crash type: Heap-buffer-overflow READ Crash state: ZSTDcreateDDict bloscrundecompressionwithcontext blosc2decompressctx...

OSV-2021-1787 Global-buffer-overflow in stbi__jpeg_decode_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43113 Crash type: Global-buffer-overflow READ 4 Crash state: stbijpegdecodeblock stbidecodejpegimage stbijpegload...

OSV-2021-1785 Heap-use-after-free in ut_allocator<os_event>::allocate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43059 Crash type: Heap-use-after-free READ 8 Crash state: utallocator::allocate oseventcreate rwlockcreatefunc...