OSV-2022-987 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51941 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.stringHook...

OSV-2022-983 Heap-buffer-overflow in SkPathPriv::IsRectContour

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51909 Crash type: Heap-buffer-overflow READ 4 Crash state: SkPathPriv::IsRectContour SkPath::isRect SkCanvas::clipPath...

OSV-2022-978 Heap-buffer-overflow in SkPath::Iter::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51926 Crash type: Heap-buffer-overflow READ 8 Crash state: SkPath::Iter::next SkPath1DPathEffectImpl::next Sk1DPathEffect::onFilterPath...

PT-2022-37322 · Git +1 · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state includes functions such as onig...

skia-ftz:api_svg_canvas: Heap-buffer-overflow in SkPath::Iter::next

Detailed Report: https://oss-fuzz.com/testcase?key=6497162267852800 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: apisvgcanvas Job Type: libfuzzerasanskia-ftz Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6260004558d0 Crash State: SkPath::Iter::next...

OSV-2022-972 Use-of-uninitialized-value in SkFindQuadMaxCurvature

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51876 Crash type: Use-of-uninitialized-value Crash state: SkFindQuadMaxCurvature AAHairlineOp::onPrepareDraws GrMeshDrawOp::onPrepare...

OSV-2022-970 Heap-buffer-overflow in SkPath::reverseAddPath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51868 Crash type: Heap-buffer-overflow READ 4 Crash state: SkPath::reverseAddPath FuzzNicePath FuzzRegionSetPath...

OSV-2022-969 Heap-buffer-overflow in SkPath::Iter::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51875 Crash type: Heap-buffer-overflow READ 8 Crash state: SkPath::Iter::next SkRegion::setPath SkRasterClip::SkRasterClip...

PT-2022-37312 · Skia · Skia

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include the crash type being a Heap-buffer-overflow READ 4, and the crash...

skia-ftz:api_image_filter: Heap-buffer-overflow in SkPath::reverseAddPath

Detailed Report: https://oss-fuzz.com/testcase?key=5212604541042688 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: apiimagefilter Job Type: libfuzzerasanskia-ftz Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x604000000308 Crash State: SkPath::reverseAddPath...

skia:api_raster_n32_canvas: Heap-buffer-overflow in SkPath::Iter::next

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=4906256318201856 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apirastern32canvas Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

OSV-2022-964 Use-of-uninitialized-value in cmsMLUgetASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51841 Crash type: Use-of-uninitialized-value Crash state: cmsMLUgetASCII TypeTextDescriptionWrite SaveTags...

OSV-2022-963 Security exception in org.codehaus.janino.Parser.parseConditionalExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51821 Crash type: Security exception Crash state: org.codehaus.janino.Parser.parseConditionalExpression java.base/sun.nio.cs.CESU8$Encoder.encodeLoop java.base/java.nio.charset.CharsetEncoder.encode...

OSV-2022-962 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51840 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/sun.nio.cs.CESU8.updatePositions java.base/sun.nio.cs.CESU8$Encoder.encodeArrayLoop...

imagemagick:encoder_miff_fuzzer: Heap-buffer-overflow in ImportQuantumPixels

Detailed Report: https://oss-fuzz.com/testcase?key=4684754728910848 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermifffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x607000000375 Crash State:...

OSV-2022-955 Use-of-uninitialized-value in FileWrite

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51808 Crash type: Use-of-uninitialized-value Crash state: FileWrite cmsWriteUInt16Number TypeMLUWrite...

janino:ExpressionEvaluatorFuzzer: Security exception in org.codehaus.janino.Parser.parseConditionalExpression

Project: https://github.com/janino-compiler/janino.git Detailed Report: https://oss-fuzz.com/testcase?key=5447721989570560 Project: janino Fuzzing Engine: libFuzzer Fuzz Target: ExpressionEvaluatorFuzzer Job Type: libfuzzerasanjanino Platform Id: linux Crash Type: Security exception Crash Address...

perfetto:trace_processor_fuzzer: Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed Report: https://oss-fuzz.com/testcase?key=4507046506790912 Project: perfetto Fuzzing Engine: libFuzzer Fuzz Target: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Crash Type: Heap-buffer-overfl...

OSV-2022-952 UNKNOWN WRITE in regcomp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51778 Crash type: UNKNOWN WRITE Crash state: regcomp fileregcomp load1...

PT-2022-37305 · Git +1 · Mongoose

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a dynamic stack buffer overflow, which was identified through an OSS-Fuzz report. The crash state includes functions such as rx...