OSV-2022-861 Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51083 Crash type: Heap-use-after-free READ 8 Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypegeos::geom::Coor geos::geomgraph::NodeMap::addNode geos::operation::overlay::OverlayOp::copyPoints...

OSV-2022-859 UNKNOWN READ in write_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51081 Crash type: UNKNOWN READ Crash state: writekey textfileput fuzztextfile.c...

OSV-2022-857 Heap-double-free in fuzz_textfile.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51072 Crash type: Heap-double-free Crash state: fuzztextfile.c fuzztextfile.c...

PT-2022-37257 · Git +1 · Bluez

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as write key, textfile put, and is located in the fuzz...

OSV-2022-854 Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51022 Crash type: Heap-buffer-overflow WRITE 4 Crash state: perfetto::traceprocessor::TrackEventParser::ParseTrackDescriptor perfetto::traceprocessor::TrackEventModule::ParsePacket...

OSV-2022-852 Security exception in java.base/java.nio.Bits.reserveMemory

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51044 Crash type: Security exception Crash state: java.base/java.nio.Bits.reserveMemory java.base/java.nio.DirectByteBuffer. java.base/java.nio.ByteBuffer.allocateDirect...

PT-2022-37255 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE, with a crash state including Ins ISECT, RunIns, and Instance Reset. This information is derived fr...

libyal:libfvde_volume_fuzzer: Heap-buffer-overflow in libfvde_metadata_read_type_ADDRESS

Detailed Report: https://oss-fuzz.com/testcase?key=4963398349094912 Project: libyal Fuzzing Engine: honggfuzz Fuzz Target: libfvdevolumefuzzer Job Type: honggfuzzasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x632000044253 Crash State:...

php:php-fuzz-execute: Heap-use-after-free in user_wrapper_opendir

Detailed Report: https://oss-fuzz.com/testcase?key=6647591290404864 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 10 Crash Address: 0xf542fc90 Crash State: userwrapperopendir...

OSV-2022-848 Heap-buffer-overflow in pcpp::HttpRequestFirstLine::parseVersion

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51006 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::HttpRequestFirstLine::parseVersion pcpp::HttpRequestFirstLine::HttpRequestFirstLine pcpp::HttpRequestLayer::HttpRequestLayer...

OSV-2022-847 Heap-use-after-free in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50991 Crash type: Heap-use-after-free READ 4 Crash state: ndlz4decompress bloscd dojob...

gdal:cad_fuzzer: Heap-buffer-overflow in CADVector::CADVector

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4608255288016896 Project: gdal Fuzzing Engine: afl Fuzz Target: cadfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x610000006408 Crash State:...

binutils:fuzz_disas_ext-bfd_arch_arm: Index-out-of-bounds in print_insn_thumb32

Detailed Report: https://oss-fuzz.com/testcase?key=5488680399142912 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasext-bfdarcharm Job Type: libfuzzerubsanbinutils Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: printinsnthumb32 printinsn...

fluent-bit:flb-it-fuzz-filter_stdout_fuzzer_OSSFUZZ: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5848956248129536 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-filterstdoutfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer:...

OSV-2022-842 Stack-buffer-overflow in wc_Shake256_Final

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50946 Crash type: Stack-buffer-overflow WRITE Crash state: wcShake256Final wced448signmsgex wced448signmsg...

OSV-2022-840 Negative-size-param in wc_Sha3_256_Final

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50953 Crash type: Negative-size-param Crash state: wcSha3256Final wcHash wcRsaPadex...

Helm Resource Management Error Vulnerability

Helm is a Kubernetes package manager. Helm version 3.9.3 and earlier are vulnerable to a resource management error that stems from a fuzz test provided by CNCF that identifies input to a function in the strvals package that could cause an out-of-memory panic. No detailed vulnerability details are...

OSV-2022-837 Heap-buffer-overflow in DetectGetLastSMFromMpmLists

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50929 Crash type: Heap-buffer-overflow READ 8 Crash state: DetectGetLastSMFromMpmLists DetectFastPatternSetup SigParse...

OSV-2022-835 Use-of-uninitialized-value in json_buildv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50949 Crash type: Use-of-uninitialized-value Crash state: jsonbuildv jsonbuild showbootentries...

systemd:fuzz-bootspec: Use-of-uninitialized-value in json_buildv

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=5421682902302720 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-bootspec Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...