OSV-2023-319 Heap-buffer-overflow in ZSTD_decompressSequencesLong_bmi2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035 Crash type: Heap-buffer-overflow READ 8 Crash state: ZSTDdecompressSequencesLongbmi2 ZSTDdecompressSequencesLong ZSTDdecompressBlockinternal...

OSV-2023-316 Segv on unknown address in dwg_ref_get_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57981 Crash type: Segv on unknown address Crash state: dwgrefgetobject dwggeojsonfeature dwggeojsonobject...

CVE-2023-2004

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

OSV-2023-314 Heap-buffer-overflow in dwg_encode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57969 Crash type: Heap-buffer-overflow READ 8 Crash state: dwgencode llvmfuzz.c...

OSV-2023-311 Heap-double-free in cache_bclose

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57939 Crash type: Heap-double-free Crash state: cachebclose bfdclosealldone fuzzobjdump.h...

CVE-2023-29479

The Mozilla Foundation Security Advisory describes this flaw as: Certain malformed OpenPGP messages could trigger incorrect parsing of PKESK/SKESK packets due to a bug in the Ribose RNP library used by Thunderbird up to version 102.9.1, which would cause the Thunderbird user interface to hang. Th...

PT-2023-35775 · Git +1 · Binutils

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. The crash state includes functions such as cache bclose and bfd close all done, and it is associated wi...

PT-2023-35776 · Git +1 · Systemd

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash involves the udev rule parse value function and is related to the...

OSV-2023-310 UNKNOWN READ in memdup_suffix0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57937 Crash type: UNKNOWN READ Crash state: memdupsuffix0 fuzz-efi-string.c centipede::RunOneInput...

OSV-2023-309 UNKNOWN READ in fmemopen_unlocked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57936 Crash type: UNKNOWN READ Crash state: fmemopenunlocked fuzz.h centipede::RunOneInput...

OSV-2023-308 UNKNOWN READ in memdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57933 Crash type: UNKNOWN READ Crash state: memdup fuzz-bcd.c centipede::RunOneInput...

OSV-2023-307 Heap-buffer-overflow in bit_read_BB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911 Crash type: Heap-buffer-overflow READ 1 Crash state: bitreadBB dwgdecodeentity dwgdecodeOLE2FRAMEprivate...

OSV-2023-305 UNKNOWN READ in page_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57929 Crash type: UNKNOWN READ Crash state: pagesize dnspacketnew dnsresourcerecordnewfromraw...

OSV-2023-304 UNKNOWN READ in _hashmap_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57928 Crash type: UNKNOWN READ Crash state: hashmapfree journalremoteserverdestroy fuzz-journal-remote.c...

OSV-2023-303 Heap-use-after-free in picture_copy_props

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57927 Crash type: Heap-use-after-free READ Crash state: picturecopyprops dav1dpicturealloccopy dav1dapplygrain...

OSV-2023-302 UNKNOWN READ in google_myanmar_tools::ZawgyiDetector::ZawgyiDetector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57922 Crash type: UNKNOWN READ Crash state: googlemyanmartools::ZawgyiDetector::ZawgyiDetector zawgyidetectorfuzztarget.cpp centipede::RunOneInput...

OSV-2023-301 UNKNOWN READ in sd_event_default

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57915 Crash type: UNKNOWN READ Crash state: sdeventdefault dummyserverinit fuzz-journald-audit.c...

OSV-2023-299 UNKNOWN READ in log_set_max_level

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57912 Crash type: UNKNOWN READ Crash state: logsetmaxlevel fuzz-journal-remote.c centipede::RunOneInput...

OSV-2023-300 UNKNOWN READ in sd_event_new

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57913 Crash type: UNKNOWN READ Crash state: sdeventnew fuzz-lldp-rx.c centipede::RunOneInput...

PT-2023-35763 · Git +1 · Systemd

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash involves the log set max level function and the fuzz-journal-remote.c...