OSV-2023-1291 Security exception in org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64979 Crash type: Security exception Crash state: org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock org.apache.poi.poifs.crypt.binaryrc4.BinaryRC4Decryptor.initCipherForBlock...

OSV-2023-1276 Heap-use-after-free in authentic_emu_update_tokeninfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64898 Crash type: Heap-use-after-free READ 8 Crash state: authenticemuupdatetokeninfo scpkcs15initupdatetokeninfo scpkcs15initupdatelastupdate...

OSV-2023-1272 Heap-buffer-overflow in OT::cff2::accelerator_templ_t<CFF::cff2_private_dict_opset_t, CFF::cff2_private_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64859 Crash type: Heap-buffer-overflow READ 2 Crash state: OT::cff2::acceleratortempltCFF::cff2privatedictopsett, CFF::cff2private hbotdrawglyph hbfontdrawglyph...

OSV-2023-1271 Heap-buffer-overflow in is_decl_requires_met

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64849 Crash type: Heap-buffer-overflow READ 8 Crash state: isdeclrequiresmet enableavrules linkmodules...

OSV-2023-1268 Stack-buffer-overflow in decNaNs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64771 Crash type: Stack-buffer-overflow WRITE 2 Crash state: decNaNs decCompareOp decNumberCompare...

OSV-2023-1267 Heap-buffer-overflow in dwg_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64829 Crash type: Heap-buffer-overflow READ 8 Crash state: dwgfreeobject dwgfree llvmfuzz.c...

OSV-2023-1265 Security exception in org.apache.poi.hdgf.streams.ChunkStream.findChunks

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64782 Crash type: Security exception Crash state: org.apache.poi.hdgf.streams.ChunkStream.findChunks org.apache.poi.hdgf.streams.PointerContainingStream.findChildren...

OSV-2023-1263 Heap-buffer-overflow in js_is_live_code

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64726 Crash type: Heap-buffer-overflow READ 1 Crash state: jsislivecode jsparsestatementordecl jsparseblock...

OSV-2023-1259 Use-of-uninitialized-value in std::__1::__stdoutbuf<char>::xsputn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64693 Crash type: Use-of-uninitialized-value Crash state: std::1::stdoutbuf::xsputn std::1::ostreambufiterator std::1::pa std::1::basicostream & std::1::putcha...

OSV-2023-1256 Heap-buffer-overflow in H5T__bit_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64665 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Tbitcopy H5Tbitgetd H5Tconvff...

OSV-2023-1243 Heap-use-after-free in zend_reference_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64579 Crash type: Heap-use-after-free READ 4 Crash state: zendreferencedestroy rcdtorfunc zendleavehelperSPEC...

OSV-2023-1240 UNKNOWN READ in MqttProps_Free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64570 Crash type: UNKNOWN READ Crash state: MqttPropsFree HandleProps MqttClientDecodePacket...

OSV-2023-1239 Heap-buffer-overflow in decToString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64574 Crash type: Heap-buffer-overflow WRITE 1 Crash state: decToString decNumberToString jvnumbergetliteral...

OSV-2023-1227 Stack-buffer-overflow in io_memory_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64529 Crash type: Stack-buffer-overflow WRITE 11 Crash state: iomemoryread riopluginread riodescread...

OSV-2023-1222 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64514 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.ByteBuffer.position java.base/sun.nio.cs.UTF8.updatePositions...

OSV-2023-1221 Security exception in jaz.Zer.reportFinding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64488 Crash type: Security exception Crash state: jaz.Zer.reportFinding jaz.Zer.reportFindingIfEnabled jaz.Zer.readObject...

OSV-2023-1214 Heap-buffer-overflow in NetworkInterface::dissectPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64454 Crash type: Heap-buffer-overflow READ 2 Crash state: NetworkInterface::dissectPacket fuzzdissectpacket.cpp...

OSV-2023-1208 Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64438 Crash type: Heap-buffer-overflow WRITE Crash state: ih264dformatconvert ih264ddecodepicturethread...

OSV-2023-1207 Heap-buffer-overflow in isvcd_start_of_pic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64436 Crash type: Heap-buffer-overflow WRITE Crash state: isvcdstartofpic isvcdparsedecodeslice isvcdparsenalunit...

OSV-2023-1201 Negative-size-param in pcpp::RawPacket::insertData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64418 Crash type: Negative-size-param Crash state: pcpp::RawPacket::insertData pcpp::Packet::extendLayer pcpp::BgpUpdateMessageLayer::setNetworkLayerReachabilityInfo...