OSV-2022-808 Use-of-uninitialized-value in _dbus_marshal_write_basic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50762 Crash type: Use-of-uninitialized-value Crash state: dbusmarshalwritebasic dbustypewriterwritebasic writebasicfield...

GHSA-7HFP-QFW3-5JXH Helm Vulnerable to denial of service through string value parsing

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. Out of memory panics cannot be recovered from. Applications that use functions from the strvals package in the Helm SDK can have a Denial of Service...

Helm Vulnerable to denial of service through string value parsing

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. Out of memory panics cannot be recovered from. Applications that use functions from the strvals package in the Helm SDK can have a Denial of Service...

OSV-2022-805 Global-buffer-overflow in get_unpack_proc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50731 Crash type: Global-buffer-overflow READ 8 Crash state: getunpackproc xpsbegintypedimage defaultsubclassbegintypedimage...

OSV-2022-804 Heap-buffer-overflow in _cmsMAT3per

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50725 Crash type: Heap-buffer-overflow READ 8 Crash state: cmsMAT3per OptimizeMatrixShaper cmsOptimizePipeline...

OSV-2022-803 Segv on unknown address in gs_fapi_ft_get_scaled_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50720 Crash type: Segv on unknown address Crash state: gsfapiftgetscaledfont gsfapipreparefont gsfapipassfont...

Denial of service through string value parsing

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. Out of memory panics cannot be recovered from. Applications that use functions from the strvals package in the Helm SDK can have a Denial of Service...

jettison:JsonFuzzer: Timeout in JsonFuzzer

Project: https://github.com/jettison-json/jettison.git Detailed Report: https://oss-fuzz.com/testcase?key=6208570705707008 Project: jettison Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjettison Platform Id: linux Crash Type: Timeout exceeds 60 secs Crash Address: Cras...

OSV-2022-802 Heap-use-after-free in UA_Server_networkCallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50699 Crash type: Heap-use-after-free READ 4 Crash state: UAServernetworkCallback fuzzbinarymessage.cc UAmemoryManagerfree...

PT-2022-37228 · Git +1 · Open62541

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 4 crash has been reported. The crash occurs in the UA Server networkCallback function and involves the fuzz binary message.cc...

OSV-2022-799 Incorrect-function-pointer-type in grk::BufferedStream::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50661 Crash type: Incorrect-function-pointer-type Crash state: grk::BufferedStream::read grk::FileFormatDecompress::readboxhdr grk::FileFormatDecompress::readHeaderProcedureImpl...

OSV-2022-798 Heap-use-after-free in cmsFreeNamedColorList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50665 Crash type: Heap-use-after-free READ 8 Crash state: cmsFreeNamedColorList TypeNamedColorFree cmsCloseProfile...

OSV-2022-795 UNKNOWN READ in pcl::PLYReader::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50663 Crash type: UNKNOWN READ Crash state: pcl::PLYReader::read plyio.h...

open62541:fuzz_binary_message: Heap-use-after-free in UA_Server_networkCallback

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6655034842021888 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::packet_analysis::ICMP::ICMPAnalyzer::ExtractICMP4Context

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=6419018398957568 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60400120020...

OSV-2022-791 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50631 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal java.base/java.lang.AbstractStringBuilder.append...

OSV-2022-786 Heap-double-free in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50645 Crash type: Heap-double-free Crash state: readconfig readglob readconfig...

OSV-2022-785 Heap-buffer-overflow in resize_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50617 Crash type: Heap-buffer-overflow WRITE Crash state: resizepacket FuzzResizePacket fuzzrfc1035.c...

fastjson2:JsonFuzzer: Security exception in com.alibaba.fastjson.JSONPath.getPropertyValue

Detailed Report: https://oss-fuzz.com/testcase?key=4765098903732224 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.getPropertyValue...

pcl:ply_reader_fuzzer: Crash in pcl::PLYReader::read

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=4678430691557376 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerasanpcl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff7ffd Crash...