OSV-2022-674 Use-of-uninitialized-value in cdef_filter_block_c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49787 Crash type: Use-of-uninitialized-value Crash state: cdeffilterblockc cdeffilterblock8x8c dav1dcdefbrow8bpc...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::ScenePreprocessor::ProcessMesh

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4578023118077952 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

OSV-2022-670 Heap-buffer-overflow in dissect_softether_ip_port

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49736 Crash type: Heap-buffer-overflow READ 4 Crash state: dissectsoftetheripport ndpisearchsoftether checkndpidetectionfunc...

OSV-2022-669 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49728 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...

OSV-2022-667 Uncaught exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49680 Crash type: Uncaught exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.stringHook...

OSV-2022-666 Heap-buffer-overflow in fasthuf_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49698 Crash type: Heap-buffer-overflow READ 8 Crash state: fasthufdecode internalhufdecompress internalexrundopiz...

OSV-2022-665 Use-of-uninitialized-value in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49676 Crash type: Use-of-uninitialized-value Crash state: udiv mpzmdiv mrbbintdiv...

OSV-2022-664 Heap-buffer-overflow in decode_preR13_section_hdr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49675 Crash type: Heap-buffer-overflow WRITE 4 Crash state: decodepreR13sectionhdr decodepreR13 dwgdecode...

Unbounded memory allocation based on untrusted length

Impact Untrusted websocket connections can cause an out-of-memory OOM process abort in a client or a server. The root cause of the issue is during dataframe parsing. Affected versions would allocate a buffer based on the declared dataframe size, which may come from an untrusted source. When...

openexr:openexr_exrcorecheck_fuzzer: Heap-buffer-overflow in fasthuf_decode

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5653081433440256 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcorecheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflo...

OSV-2022-663 Heap-buffer-overflow in av1_read_mode_info

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49652 Crash type: Heap-buffer-overflow WRITE 1 Crash state: av1readmodeinfo parsedecodeblock decodepartition...

OSV-2022-661 Heap-buffer-overflow in dissect_softether_ip_port

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49638 Crash type: Heap-buffer-overflow READ 4 Crash state: dissectsoftetheripport ndpisearchsoftether checkndpidetectionfunc...

OSV-2022-657 Heap-buffer-overflow in dynapi_set_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49613 Crash type: Heap-buffer-overflow WRITE Crash state: dynapisethelper dwgdynapientitysetvalue dxfblocksread...

OSV-2022-656 Heap-buffer-overflow in dwg_decode_LWPOLYLINE_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49630 Crash type: Heap-buffer-overflow READ 1 Crash state: dwgdecodeLWPOLYLINEprivate dwgdecodeLWPOLYLINE dwgdecodeaddobject...

libredwg:llvmfuzz: Heap-buffer-overflow in dwg_decode_LWPOLYLINE_private

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5192092393013248 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2022-653 Heap-double-free in dwg_free_common_entity_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49602 Crash type: Heap-double-free Crash state: dwgfreecommonentitydata dwgfreeDIMENSIONANG2LN dwgfreeobject...

libredwg:llvmfuzz: Heap-buffer-overflow in dwg_geojson_feature

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4902748868444160 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

libredwg:llvmfuzz: Heap-buffer-overflow in dynapi_set_helper

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6273056472956928 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

libredwg:llvmfuzz: Heap-double-free in dwg_free_common_entity_data

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6059126567862272 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x602000000250 Cra...

OSV-2022-652 Use-of-uninitialized-value in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49542 Crash type: Use-of-uninitialized-value Crash state: udiv mrbbintmod intmod...