OSV-2023-215 Global-buffer-overflow in htmlParsePI

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57304 Crash type: Global-buffer-overflow READ 1 Crash state: htmlParsePI htmlParseDocument htmlDoRead...

sleuthkit:sleuthkit_fls_apfs_fuzzer: Heap-buffer-overflow in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSBtreeNode<apfs_o

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6604037297668096 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsapfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

flac:fuzzer_tool_flac: Heap-use-after-free in flac__analyze_frame

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=4908215128424448 Project: flac Fuzzing Engine: afl Fuzz Target: fuzzertoolflac Job Type: aflasanflac Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6150005d0780 Crash State:...

PT-2023-35725

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash in the processCertificateElements function, specifically in the fuzz tls certificate.c file. The crash type is reported as...

OSV-2023-214 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57295 Crash type: Security exception Crash state: org.springframework.expression.spel.ast.OpPlus.getValueInternal java.base/java.util.HashMap.get org.springframework.core.convert.TypeDescriptor.valueOf...

OSV-2023-212 Global-buffer-overflow in xmlParseEntityDecl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57294 Crash type: Global-buffer-overflow READ 1 Crash state: xmlParseEntityDecl xmlParseMarkupDecl xmlParseInternalSubset...

wolfssl:fuzzer-wolfssl-client-randomize: Heap-buffer-overflow in fuzzer_send

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6249726027890688 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-client-randomize Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5G__node_cmp3

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=5200578618982400 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzerasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address:...

libxml2:schema: Global-buffer-overflow in xmlParseEntityDecl

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5708857413599232 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: schema Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

libraw:libraw_raf_fuzzer: Use-of-uninitialized-value in LibRaw::processCanonCameraInfo

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6415431006289920 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawraffuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

compress:FuzzNoBMI2Dec: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5849004780158976 Project: compress Fuzzing Engine: libFuzzer Fuzz Target: FuzzNoBMI2Dec Job Type: libfuzzerasancompress Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00002e82adf9 Crash State: NULL Sanitizer: address ASAN Recommende...

OSV-2023-206 Global-buffer-overflow in xmlParseContentInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57225 Crash type: Global-buffer-overflow READ 1 Crash state: xmlParseContentInternal xmlParseExternalEntityPrivate xmlParseReference...

OSV-2023-201 UNKNOWN READ in Assimp::SMDImporter::ParseNodeInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57218 Crash type: UNKNOWN READ Crash state: Assimp::SMDImporter::ParseNodeInfo Assimp::SMDImporter::ParseNodesSection Assimp::SMDImporter::ParseFile...

libpcap:fuzz_filter: Stack-buffer-overflow in gen_load_absoffsetrel

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed Report: https://oss-fuzz.com/testcase?key=4766895856549888 Project: libpcap Fuzzing Engine: honggfuzz Fuzz Target: fuzzfilter Job Type: honggfuzzasanlibpcap Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address...

php:php-fuzz-parser: Use-of-uninitialized-value in zend_yytnamerr

Detailed Report: https://oss-fuzz.com/testcase?key=4527029925314560 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: zendyytnamerr yysyntaxerror zendparse Sanitizer:...

libxml2:html: Use-of-uninitialized-value in htmlParseHTMLAttribute

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=6314169344589824 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: html Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

OSV-2023-200 Segv on unknown address in mrb_vm_find_method

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57135 Crash type: Segv on unknown address Crash state: mrbvmfindmethod mrbvmexec mrbvmrun...

OSV-2023-197 Global-buffer-overflow in base_C_MessageEncryptInit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57120 Crash type: Global-buffer-overflow READ 8 Crash state: baseCMessageEncryptInit rpcCMessageEncryptInit p11rpcserverhandle...

OSV-2023-196 Global-buffer-overflow in xmlDictLookup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57110 Crash type: Global-buffer-overflow READ 1 Crash state: xmlDictLookup xmlParseNCName xmlParseQName...

OSV-2023-195 Global-buffer-overflow in htmlParseDocument

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57089 Crash type: Global-buffer-overflow READ 1 Crash state: htmlParseDocument htmlDoRead htmlReadMemory...