OSV-2022-431 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47616 Crash type: Uncaught exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/jdk.internal.org.objectweb.asm.SymbolTable$Entry. java.base/jdk.internal.org.objectweb.asm.SymbolTable.addConstantUtf8...

wireshark:fuzzshark_ip: Stack-use-after-return in conversation_match_element_list

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=5120191362629632 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

OSV-2022-430 UNKNOWN READ in fp_cmp_mag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47586 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...

OSV-2022-429 Heap-buffer-overflow in pdfi_dict_get_no_store_R_inner

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47601 Crash type: Heap-buffer-overflow READ Crash state: pdfidictgetnostoreRinner pdfidictgetnostoreRkey pdfifindresource...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in pdfi_dict_get_no_store_R_inner

Detailed Report: https://oss-fuzz.com/testcase?key=5107213951172608 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x631000060830 Crash State:...

libreoffice:tiffuzzer: Heap-buffer-overflow in put1bitbwtile

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5090796438683648 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: tiffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

OSV-2022-427 Stack-use-after-scope in RefCopyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47560 Crash type: Stack-use-after-scope READ Crash state: RefCopyBytes DoCopyBytes dngstream::Put...

OSV-2022-426 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47557 Crash type: Memcpy-param-overlap Crash state: repeat pere cliregcompreal...

OSV-2022-422 UNKNOWN WRITE in alloc_restore_step_in

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47513 Crash type: UNKNOWN WRITE Crash state: allocrestorestepin allocrestoreall gsmainfinit...

OSV-2022-421 Stack-buffer-overflow in cardos_list_files

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47512 Crash type: Stack-buffer-overflow READ 1 Crash state: cardoslistfiles sclistfiles fuzzcard.c...

OSV-2022-417 Heap-buffer-overflow in read_xref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47501 Crash type: Heap-buffer-overflow READ 8 Crash state: readxref pdfireadxref pdfisetinputstream...

OSV-2022-416 Heap-buffer-overflow in opj_t1_allocate_buffers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47500 Crash type: Heap-buffer-overflow WRITE Crash state: opjt1allocatebuffers opjt1clbldecodeprocessor opjthreadpoolsubmitjob...

OSV-2022-415 UNKNOWN READ in pdfi_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47499 Crash type: UNKNOWN READ Crash state: pdfifreeobject pdficlearcontext pdfifreecontext...

gdbm:gdbm_fuzzer: Heap-use-after-free in _gdbm_cache_free

Detailed Report: https://oss-fuzz.com/testcase?key=4634746614841344 Project: gdbm Fuzzing Engine: afl Fuzz Target: gdbmfuzzer Job Type: aflasangdbm Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61600004d1c0 Crash State: gdbmcachefree gdbmclose closehandler Sanitizer:...

ghostscript:gstoraster_fuzzer: Crash in alloc_restore_step_in

Detailed Report: https://oss-fuzz.com/testcase?key=6254151127924736 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x629ff625e050 Crash State: allocrestorestepin...

openexr:openexr_exrcorecheck_fuzzer: Heap-buffer-overflow in uncompress_b44_impl

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5479947201806336 Project: openexr Fuzzing Engine: honggfuzz Fuzz Target: openexrexrcorecheckfuzzer Job Type: honggfuzzasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflo...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in read_xref

Detailed Report: https://oss-fuzz.com/testcase?key=4856222387404800 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x7f806aa13470 Crash State: readxref...

OSV-2022-412 Bad-cast to const upb_tabent' (aka 'const struct _upb_tabent')insert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47464 Crash type: Bad-cast Crash state: Bad-cast to const upbtabent' aka 'const struct upbtabent'insert upbstrtableinsert createfielddef...

[SECURITY] [DLA 3010-1] ffmpeg security update

Debian LTS Advisory DLA-3010-1 [email protected] https://www.debian.org/lts/security/ Enrico Zini May 16, 2022 https://wiki.debian.org/LTS Package : ffmpeg Version : 7:3.2.18-0+deb9u1 The ffmpeg project released the new version 3.2.18 with fixes for various issues found by the OSS-Fuzz...

gdal:fgb_fuzzer: Heap-buffer-overflow in flatbuffers::Table::VerifyOffset

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4642513358553088 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: fgbfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60400000437c Crash...