OSV-2023-1201 Negative-size-param in pcpp::RawPacket::insertData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64418 Crash type: Negative-size-param Crash state: pcpp::RawPacket::insertData pcpp::Packet::extendLayer pcpp::BgpUpdateMessageLayer::setNetworkLayerReachabilityInfo...

OSV-2023-1195 Security exception in java.base/java.util.HashMap.resize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64367 Crash type: Security exception Crash state: java.base/java.util.HashMap.resize java.base/java.util.HashMap.putVal java.base/java.util.HashMap.put...

OSV-2023-1186 Heap-use-after-free in dxf_tables_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64318 Crash type: Heap-use-after-free READ 8 Crash state: dxftablesread dwgreaddxf llvmfuzz.c...

OSV-2023-1184 Global-buffer-overflow in dissect_zcl_read_attr_struct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64290 Crash type: Global-buffer-overflow READ 4 Crash state: dissectzclreadattrstruct dissectzbeezcl calldissectorworkerror...

OSV-2023-1179 Index-out-of-bounds in iaace_calc_sfb_dist

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64267 Crash type: Index-out-of-bounds Crash state: iaacecalcsfbdist iaaceestimatescfschan iaenhaacplusencqcmain...

OSV-2023-1173 Heap-buffer-overflow in fill_lines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64218 Crash type: Heap-buffer-overflow READ 1 Crash state: filllines rbdumpbacktracewithlines rbvmbugreport...

OSV-2023-1172 Heap-buffer-overflow in pcpp::TLVRecordReader<pcpp::TcpOption>::getTLVRecord

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64205 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::TLVRecordReader::getTLVRecord pcpp::TcpLayer::addTcpOptionAfter readParsedPacket...

OSV-2023-1171 Heap-buffer-overflow in pcpp::SomeIpSdLayer::SomeIpSdLayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64190 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::SomeIpSdLayer::SomeIpSdLayer pcpp::SomeIpLayer::parseSomeIpLayer pcpp::SomeIpLayer::parseNextLayer...

OSV-2023-1170 UNKNOWN READ in loader_log

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42530193 Crash type: UNKNOWN READ Crash state: loaderlog loaderscannedicdadd loadericdscan...

OSV-2023-1169 Heap-buffer-overflow in epassNUMBER_pkcs15_generate_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64215 Crash type: Heap-buffer-overflow READ Crash state: epassNUMBERpkcs15generatekey scpkcs15initgeneratekey dogeneratekey...

OSV-2023-1168 Heap-buffer-overflow in pcpp::PPP_PPTPLayer::computeCalculateFields

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64196 Crash type: Heap-buffer-overflow WRITE 2 Crash state: pcpp::PPPPPTPLayer::computeCalculateFields pcpp::Packet::computeCalculateFields FuzzTarget.cpp...

OSV-2023-1167 UNKNOWN WRITE in php_strip_url_passwd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64209 Crash type: UNKNOWN WRITE Crash state: phpstripurlpasswd phpmessagehandlerforzend zendmessagedispatcher...

CVE-2023-47264

Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service DoS. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and late...

Design/Logic Flaw

Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service DoS. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and late...

PT-2023-35591 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ crash occurred, as reported by OSS-Fuzz. The crash involves the epassNUMBER pkcs15 generate key, sc pkcs15init generate key,...

OSV-2023-1166 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64176 Crash type: Memcpy-param-overlap Crash state: repeat pere pere...

OSV-2023-1164 Heap-buffer-overflow in WriteCLUT

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64166 Crash type: Heap-buffer-overflow READ 4 Crash state: WriteCLUT cmsGetPostScriptColorResource cmsGetPostScriptCRD...

OSV-2023-1163 Invalid-free in sc_file_clear_acl_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64181 Crash type: Invalid-free Crash state: scfileclearaclentries scfilefree setcoscreatekey...

OSV-2023-1160 Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64147 Crash type: Heap-buffer-overflow READ 1 Crash state: IEC104Stats::processPacket Flow::processIEC60870Packet NetworkInterface::processPacket...

OSV-2023-1157 Security exception in org.apache.lucene.util.ArrayUtil.growExact

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64141 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.growExact org.apache.lucene.util.ArrayUtil.grow org.apache.lucene.util.BytesRefBuilder.grow...