OSV-2022-828 UNKNOWN READ in stream_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50898 Crash type: UNKNOWN READ Crash state: streamfinalize ifreeobject coswritestreamalloc...

kimageformats:kimgio_heif_fuzzer: Global-buffer-overflow in decode_CABAC_bit

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6680981809004544 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash...

OSV-2022-821 Heap-buffer-overflow in ttfOutliner__BuildGlyphOutlineAux

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50847 Crash type: Heap-buffer-overflow READ 4 Crash state: ttfOutlinerBuildGlyphOutlineAux ttfOutlinerOutline gxttfoutline...

OSV-2022-819 Use-of-uninitialized-value in init_main_qtable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50835 Crash type: Use-of-uninitialized-value Crash state: initmainqtable LibRaw::fujidecodestrip LibRaw::fujidecodeloop...

OSV-2022-818 Heap-buffer-overflow in Ins_NPUSHW

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50834 Crash type: Heap-buffer-overflow READ 1 Crash state: InsNPUSHW RunIns InstanceReset...

OSV-2022-815 Negative-size-param in PackChunkyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50832 Crash type: Negative-size-param Crash state: PackChunkyBytes PrecalculatedXFORM cmsDoTransform...

PT-2022-37235 · Git +1 · Lcms

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a negative-size-param, as reported by OSS-Fuzz. The crash involves the functions PackChunkyBytes,...

spring-framework:AspectJExpressionPointcutFuzzer: Security exception in org.aspectj.weaver.tools.PointcutParser.validateAgainstSupportedPrimitives

Project: https://github.com/spring-projects/spring-framework.git Detailed Report: https://oss-fuzz.com/testcase?key=6144883185811456 Project: spring-framework Fuzzing Engine: libFuzzer Fuzz Target: AspectJExpressionPointcutFuzzer Job Type: libfuzzerasanspring-framework Platform Id: linux Crash...

CVE-2022-36055

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. The strvals package contains a parser that turns strings in to Go...

Input validation

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. The strvals package contains a parser that turns strings in to Go...

CVE-2022-36055 Denial of service in Helm

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. The strvals package contains a parser that turns strings in to Go...

CVE-2022-36055 Denial of service in Helm

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. The strvals package contains a parser that turns strings in to Go...

kimageformats:kimgio_heif_fuzzer: Stack-use-after-return in void apply_sao_internal<unsigned short>

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4866556433137664 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioheiffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address:...

gdal:zarr_fuzzer: Crash in CPLStrdup

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6554814057676800 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: zarrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000fc00 Crash State: CPLStrd...

libyal:libfvde_volume_fuzzer: Heap-buffer-overflow in libfvde_metadata_block_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=5410432772341760 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfvdevolumefuzzer Job Type: libfuzzerasani386libyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf57015b3 Crash State:...

Helm Resource Management Error Vulnerability

Helm is a Kubernetes package manager. Helm version 3.9.3 and earlier are vulnerable to a resource management error that stems from a fuzz test provided by CNCF that identifies input to a function in the strvals package that could cause an out-of-memory panic. No detailed vulnerability details are...

lcms:cms_universal_transform_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=4809928832843776 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsuniversaltransformfuzzer Job Type: libfuzzerubsanlcms Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

lcms:cms_universal_transform_fuzzer: Null-dereference READ in cmsDoTransform

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=6518259591020544 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsuniversaltransformfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

lcms:cms_universal_transform_fuzzer: Null-dereference READ with empty stacktrace

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=5199561756377088 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsuniversaltransformfuzzer Job Type: libfuzzerasani386lcms Platform Id: linux Crash Type: Null-dereference READ Crash Address:...

lcms:cms_universal_transform_fuzzer: Negative-size-param in PackChunkyBytes

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=4938102635888640 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsuniversaltransformfuzzer Job Type: libfuzzerasani386lcms Platform Id: linux Crash Type: Negative-size-param Crash Address: Cra...