OSV-2022-1068 UNKNOWN READ in fp_cmp_mag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52565 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...

OSV-2022-1067 Security exception in jaz.Zer.<clinit>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52546 Crash type: Security exception Crash state: jaz.Zer. java.base/java.lang.Class.forName0 java.base/java.lang.Class.forName...

libraw:libraw_cr2_fuzzer: Heap-buffer-overflow in LibRaw_buffer_datastream::read

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6381559087497216 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzerasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 6 Crash Address:...

ruby:fuzz_ruby_gems: Heap-buffer-overflow in BSD_vfprintf

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6358037581660160 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzrubygems Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61600021d27f Cras...

OSV-2022-1065 Stack-buffer-overflow in Curl_output_aws_sigv4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52517 Crash type: Stack-buffer-overflow WRITE Crash state: Curloutputawssigv4 outputauthheaders Curlhttpoutputauth...

SUSE SLED15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2022:3666-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3666-1 advisory. helm was updated to version 3.9.4: CVE-2022-36055: Fixed denial of service through string value...

aspectj:ASTFuzzer: Security exception in org.aspectj.org.eclipse.jdt.core.dom.ASTConverter.convert

Detailed Report: https://oss-fuzz.com/testcase?key=6251880150073344 Project: aspectj Fuzzing Engine: libFuzzer Fuzz Target: ASTFuzzer Job Type: libfuzzerasanaspectj Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

ruby:fuzz_ruby_gems: Heap-buffer-overflow in add_compile_string

Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5877863056539648 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzrubygems Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x60600006ce38 Cras...

cryptsetup:crypt2_load_fuzz: Crash in crypt2_load_fuzz.cc

Detailed Report: https://oss-fuzz.com/testcase?key=6547799496065024 Project: cryptsetup Fuzzing Engine: honggfuzz Fuzz Target: crypt2loadfuzz Job Type: honggfuzzasancryptsetup Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fffe35e51e0 Crash State: crypt2loadfuzz.cc Sanitizer:...

OSV-2022-1064 Security exception in org.codehaus.janino.Parser.parseAssignmentExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52507 Crash type: Security exception Crash state: org.codehaus.janino.Parser.parseAssignmentExpression java.base/java.nio.charset.CharsetEncoder. java.base/java.nio.charset.CharsetEncoder...

OSV-2022-1063 Heap-use-after-free in xps_image_enum_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52492 Crash type: Heap-use-after-free READ 8 Crash state: xpsimageenumfinalize allocrestorestepin dorestore...

curl:curl_fuzzer_http: Stack-buffer-overflow in Curl_output_aws_sigv4

Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5950791701889024 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerhttp Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0xffc44cc5...

gdal:filename_fuzzer: Stack-buffer-overflow in SENTINEL2Dataset::Open

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4834019741401088 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: filenamefuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0xffdf9bfc...

ghostscript:gs_device_xpswrite_fuzzer: Heap-use-after-free in xps_image_enum_finalize

Detailed Report: https://oss-fuzz.com/testcase?key=5148797961633792 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicexpswritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x62d0000dff80 Crash State:...

OSV-2022-1058 Heap-buffer-overflow in AffixMgr::suffix_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52455 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::suffixcheck AffixMgr::affixcheck AffixMgr::compoundcheck...

net-snmp:snmp_api_fuzzer: Heap-buffer-overflow in asn_build_unsigned_int64

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5690140286910464 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpapifuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

OSV-2022-1055 UNKNOWN READ in ndpi_search_irc_tcp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52435 Crash type: UNKNOWN READ Crash state: ndpisearchirctcp checkndpidetectionfunc ndpidetectionprocesspacket...

OSV-2022-1053 Heap-buffer-overflow in flb_parser_create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52414 Crash type: Heap-buffer-overflow READ 1 Crash state: flbparsercreate flbparserconffile configrandomfuzzer.c...

OSV-2022-1049 Stack-buffer-overflow in AffixMgr::suffix_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52397 Crash type: Stack-buffer-overflow READ 1 Crash state: AffixMgr::suffixcheck AffixMgr::affixcheck AffixMgr::compoundcheck...

PT-2022-36682 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state involves several functions:...