OSV-2022-387 Segv on unknown address in bit_write_TV

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47126 Crash type: Segv on unknown address Crash state: bitwriteTV bitwriteT dwgencodeBLOCK...

OSV-2022-386 Invalid-free in change_pin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47143 Crash type: Invalid-free Crash state: changepin main fuzzpkcs15tool.c...

PT-2022-36972

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Invalid-free. The crash state includes functions such as change pin and main, and it is associated with...

apache-commons-jxpath:JXPathFuzzer: Uncaught exception in jaz.Zer.<clinit>

Detailed Report: https://oss-fuzz.com/testcase?key=4854085561483264 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: jaz.Zer...

OSV-2022-385 Uncaught exception in jaz.Zer.<clinit>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47116 Crash type: Uncaught exception Crash state: jaz.Zer. java.base/java.lang.Class.forName0 java.base/java.lang.Class.forName...

OSV-2022-383 Heap-use-after-free in r_asm_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47113 Crash type: Heap-use-after-free READ 4 Crash state: rasmfree rcorefini rcorefree...

mysql-server:fuzz_initfile: Heap-use-after-free in Segment::write

Detailed Report: https://oss-fuzz.com/testcase?key=4582657536688128 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6080000135a8 Crash State: Segment::write...

gitea:fuzz_markup_post_process: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5079777251295232 Project: gitea Fuzzing Engine: libFuzzer Fuzz Target: fuzzmarkuppostprocess Job Type: libfuzzerasangitea Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

apache-commons-jxpath:JXPathFuzzer: Uncaught exception in org.apache.commons.jxpath.ri.EvalContext.getDocumentOrder

Detailed Report: https://oss-fuzz.com/testcase?key=5407201633632256 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

apache-commons-jxpath:JXPathFuzzer: Uncaught exception in org.apache.commons.jxpath.ri.axes.SimplePathInterpreter.createNullPointerForPred

Detailed Report: https://oss-fuzz.com/testcase?key=4800550421528576 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

OSV-2022-381 Heap-buffer-overflow in lwan_h2_huffman_decode_for_fuzzing

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46990 Crash type: Heap-buffer-overflow READ 8 Crash state: lwanh2huffmandecodeforfuzzing h2huffmanfuzzer.cc...

OSV-2022-380 Stack-buffer-overflow in sc_asn1_read_tag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47035 Crash type: Stack-buffer-overflow READ 1 Crash state: scasn1readtag scasn1findtag cardoslistfiles...

OSV-2022-379 Segv on unknown address in bit_write_TV

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47014 Crash type: Segv on unknown address Crash state: bitwriteTV bitwriteT dwgencodeBLOCK...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in void grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev>

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=4665331731267584 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

OSV-2022-377 Heap-buffer-overflow in decode_preR13_section_hdr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46983 Crash type: Heap-buffer-overflow WRITE 4 Crash state: decodepreR13sectionhdr decodepreR13 dwgdecode...

OSV-2022-376 Heap-buffer-overflow in ndpi_search_raknet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47000 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpisearchraknet checkndpidetectionfunc ndpicheckflowfunc...

OSV-2022-375 Stack-use-after-return in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46986 Crash type: Stack-use-after-return READ 1 Crash state: std::1::function::funcbool grk::WaveletReverse::decompresspartialtilei tf::Executor::invoke tf::Executor::spawn...

OSV-2022-374 Stack-use-after-scope in RefCopyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47001 Crash type: Stack-use-after-scope READ Crash state: RefCopyBytes dngstream::Put tagdataptr::Put...

OSV-2022-372 Heap-buffer-overflow in dwg_encode_VERTEX_2D

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46994 Crash type: Heap-buffer-overflow READ 8 Crash state: dwgencodeVERTEX2D dwgencodeaddobject dwgencode...

libredwg:llvmfuzz: Heap-buffer-overflow in dwg_encode_VERTEX_2D

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4653315956277248 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...