OSV-2022-410 Heap-buffer-overflow in Assimp::ASE::Parser::ParseLV1SoftSkinBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47392 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::ASE::Parser::ParseLV1SoftSkinBlock Assimp::ASE::Parser::Parse Assimp::ASEImporter::InternReadFile...

OSV-2022-409 Heap-buffer-overflow in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47391 Crash type: Heap-buffer-overflow READ 1 Crash state: std::1::treenodebase& std::1::treestd::1::valuetypestd: std::1::pairstd::1::treeiteratorstd::1::valuetypestd::1::basic...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::ASE::Parser::ParseLV1SoftSkinBlock

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6539384737890304 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzer Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

json:parse_bjdata_fuzzer: Heap-buffer-overflow in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:

Project: https://github.com/nlohmann/json.git Detailed Report: https://oss-fuzz.com/testcase?key=5698044521218048 Project: json Fuzzing Engine: libFuzzer Fuzz Target: parsebjdatafuzzer Job Type: libfuzzerasanjson Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2022-406 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47339 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6143521045741568 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

quickjs:fuzz_regexp: Heap-buffer-overflow in re_parse_disjunction

Detailed Report: https://oss-fuzz.com/testcase?key=6405049668993024 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzregexp Job Type: libfuzzerasanquickjs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x61800002c3b9 Crash State: reparsedisjunction lrecompil...

OSV-2022-403 Heap-use-after-free in dwg_add_handleref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47319 Crash type: Heap-use-after-free READ 8 Crash state: dwgaddhandleref dwgaddSTYLE decodepreR13section...

OSV-2022-401 UNKNOWN READ in OT::gvar::subset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47281 Crash type: UNKNOWN READ Crash state: OT::gvar::subset bool trysubset hbsubsetplanexecuteorfail...

OSV-2022-400 Heap-double-free in dwg_free_XRECORD_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47300 Crash type: Heap-double-free Crash state: dwgfreeXRECORDprivate dwgfreeXRECORD dwgfreeobject...

envoy:filter_fuzz_test: Stack-use-after-return in Envoy::Extensions::HttpFilters::ExtAuthz::Filter::decodeData

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=6613344095698944 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: filterfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address:...

libredwg:llvmfuzz: Heap-double-free in dwg_free_XRECORD_private

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5408231167492096 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x60700005b040 Cra...

OSV-2022-398 Heap-buffer-overflow in json_common_entity_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47259 Crash type: Heap-buffer-overflow READ 8 Crash state: jsoncommonentitydata dwgjsonREPEAT dwgjsonobject...

libredwg:llvmfuzz: Heap-buffer-overflow in json_common_entity_data

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4527865128943616 Project: libredwg Fuzzing Engine: honggfuzz Fuzz Target: llvmfuzz Job Type: honggfuzzasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

OSV-2022-396 Heap-buffer-overflow in ucl_object_free_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47206 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectfreeinternal uclparserfree uclstatemachine...

OSV-2022-395 Uncaught exception in com.alibaba.fastjson.JSONPath.deepScan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47192 Crash type: Uncaught exception Crash state: com.alibaba.fastjson.JSONPath.deepScan java.base/java.lang.Boolean.valueOf com.alibaba.fastjson.parser.ParserConfig$2.apply...

OSV-2022-394 Incorrect-function-pointer-type in cv::split

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47190 Crash type: Incorrect-function-pointer-type Crash state: cv::split cv::split TestSplitAndMerge...

OSV-2022-393 Heap-use-after-free in mrb_funcall_with_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47213 Crash type: Heap-use-after-free READ 8 Crash state: mrbfuncallwithblock mrbinstancenew mrbfuncallwithblock...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_object_free_internal

Detailed Report: https://oss-fuzz.com/testcase?key=6363900985081856 Project: libucl Fuzzing Engine: afl Fuzz Target: ucladdstringfuzzer Job Type: aflasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x603000014f40 Crash State: uclobjectfreeinternal uclparserfree...

OSV-2022-389 Global-buffer-overflow in _dwarf_pathjoinl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47150 Crash type: Global-buffer-overflow READ 1 Crash state: dwarfpathjoinl dwarfconstructlinkedtopath dwarfgnudebuglink...