PT-2022-36645

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 2 crash has been reported. The crash occurs in the ndpi workflow process packet function, located in the fuzz ndpi reader.c fil...

imagemagick:encoder_ttf_fuzzer: Segv on unknown address in t1_decoder_parse_metrics

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4893858301870080 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderttffuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Segv on unknown address Crash...

OSV-2022-73 Heap-use-after-free in pdfi_cspace_free_callback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43904 Crash type: Heap-use-after-free READ 8 Crash state: pdficspacefreecallback gscspacefinal allocrestorestepin...

freetype2:type1-render: Use-of-uninitialized-value in cf2_interpT2CharString

Detailed Report: https://oss-fuzz.com/testcase?key=4918766562050048 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: type1-render Job Type: libfuzzermsanfreetype2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cf2interpT2CharString...

ghostscript:gstoraster_fuzzer: Heap-use-after-free in pdfi_cspace_free_callback

Detailed Report: https://oss-fuzz.com/testcase?key=5420966988087296 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x631000258868 Crash State:...

OSV-2022-70 Heap-buffer-overflow in cli_sigopts_handler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43843 Crash type: Heap-buffer-overflow READ 1 Crash state: clisigoptshandler loadoneldb cliloadldb...

OSV-2022-69 Stack-buffer-overflow in pixCountPixels

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43841 Crash type: Stack-buffer-overflow READ 4 Crash state: pixCountPixels pixCountPixelsInRect pix3fuzzer.cc...

OSV-2022-66 Heap-buffer-overflow in cli_ac_addsig

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43832 Crash type: Heap-buffer-overflow READ 2 Crash state: cliacaddsig cliparseadd clisigoptshandler...

OSV-2022-65 Heap-buffer-overflow in parse_regex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43845 Crash type: Heap-buffer-overflow READ 1 Crash state: parseregex parseregex parseregex...

OSV-2022-64 Heap-buffer-overflow in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43870 Crash type: Heap-buffer-overflow WRITE Crash state: repeat pere cliregcompreal...

OSV-2022-62 Stack-buffer-overflow in load_regex_matcher

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43869 Crash type: Stack-buffer-overflow WRITE 1 Crash state: loadregexmatcher cliloadwdb cliload...

OSV-2022-61 Heap-buffer-overflow in cli_loadcrt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43828 Crash type: Heap-buffer-overflow READ Crash state: cliloadcrt cliload clload...

harfbuzz:hb-subset-fuzzer: Use-of-uninitialized-value in graph_t::update_distances

Project: https://github.com/harfbuzz/harfbuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=4822434270806016 Project: harfbuzz Fuzzing Engine: libFuzzer Fuzz Target: hb-subset-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

testing-native-go-fuzzing:normalizer_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5571437979631616 Project: testing-native-go-fuzzing Fuzzing Engine: libFuzzer Fuzz Target: normalizerfuzzer Job Type: libfuzzerasantesting-native-go-fuzzing Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL...

OSV-2022-60 Heap-buffer-overflow in parse_regex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43812 Crash type: Heap-buffer-overflow READ 1 Crash state: parseregex cliregex2suffix regexlistaddpattern...

clamav:clamav_dbload_CRB_fuzzer: Heap-buffer-overflow in cli_loadcrt

Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=4504434707660800 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCRBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

clamav:clamav_dbload_FTM_fuzzer: Heap-buffer-overflow in cli_bcomp_freemeta

Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=5603299540205568 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadFTMfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

clamav:clamav_dbload_PDB_fuzzer: Heap-buffer-overflow in parse_regex

Detailed Report: https://oss-fuzz.com/testcase?key=6059794031575040 Project: clamav Fuzzing Engine: afl Fuzz Target: clamavdbloadPDBfuzzer Job Type: aflasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60a000002052 Crash State: parseregex cliregex2suffix...

graphicsmagick:coder_DCM_fuzzer: Use-of-uninitialized-value in jp2_box_get

Detailed Report: https://oss-fuzz.com/testcase?key=6147496928215040 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderDCMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jp2boxget jp2decode...

OSV-2022-58 Heap-buffer-overflow in internal_huf_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43763 Crash type: Heap-buffer-overflow READ 1 Crash state: internalhufdecompress internalexrundopiz defaultdecompresschunk...