OSV-2023-249 Global-buffer-overflow in xmlStrndup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57469 Crash type: Global-buffer-overflow READ 1 Crash state: xmlStrndup htmlParseSystemLiteral htmlParseDocTypeDecl...

OSV-2023-248 Heap-double-free in _dwarf_read_line_table_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57443 Crash type: Heap-double-free Crash state: dwarfreadlinetableheader dwarfinternalsrclines dwarfsrclinesb...

OSV-2023-246 Heap-double-free in _dwarf_read_line_table_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57437 Crash type: Heap-double-free Crash state: dwarfreadlinetableheader dwarfsrcfiles fuzzsrcfiles.c...

OSV-2023-243 UNKNOWN WRITE in processCertificateElements

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57448 Crash type: UNKNOWN WRITE Crash state: processCertificateElements fuzztlscertificate.c...

OSV-2023-240 Invalid-free in fuzz_die_cu_attrs.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57429 Crash type: Invalid-free Crash state: fuzzdiecuattrs.c...

PT-2023-35733 · Git +1 · Libdwarf

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to an Invalid-free crash type, as reported by OSS-Fuzz. The crash occurs in the fuzz die cu attrs.c file. No information is availabl...

PT-2023-35736 · Git +1 · Libdwarf

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. Technical details include the crash type and state, specifically mentioning dwarf read line table heade...

OSV-2023-239 Use-of-uninitialized-value in ihevce_strm_fill_done

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57401 Crash type: Use-of-uninitialized-value Crash state: ihevcestrmfilldone ihevceentcodingthrd osalfunc...

OSV-2023-234 Use-of-uninitialized-value in ihevce_enc_frm_proc_slave_thrd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57397 Crash type: Use-of-uninitialized-value Crash state: ihevceencfrmprocslavethrd osalfunc posixmemalign...

OSV-2023-229 Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57369 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c...

OSV-2023-225 Heap-buffer-overflow in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSBtreeNode<apfs_o

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57364 Crash type: Heap-buffer-overflow READ 2 Crash state: std::1::enableif::type APFSBtreeNodeIterator ::APFSBtree APFSBtreeNodeIterator APFSBtreeN...

OSV-2023-222 Heap-buffer-overflow in hb_subset_plan_t::hb_subset_plan_t

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57342 Crash type: Heap-buffer-overflow READ 2 Crash state: hbsubsetplant::hbsubsetplant hbsubsetplancreateorfail hbsubsetorfail...

OSV-2023-221 Heap-use-after-free in flac__analyze_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57354 Crash type: Heap-use-after-free READ 4 Crash state: flacanalyzeframe writecallback writeaudioframetoclient...

OSV-2023-219 UNKNOWN WRITE in processCertificateElements

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57317 Crash type: UNKNOWN WRITE Crash state: processCertificateElements fuzztlscertificate.c...

OSV-2023-215 Global-buffer-overflow in htmlParsePI

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57304 Crash type: Global-buffer-overflow READ 1 Crash state: htmlParsePI htmlParseDocument htmlDoRead...

OSV-2023-214 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57295 Crash type: Security exception Crash state: org.springframework.expression.spel.ast.OpPlus.getValueInternal java.base/java.util.HashMap.get org.springframework.core.convert.TypeDescriptor.valueOf...

OSV-2023-212 Global-buffer-overflow in xmlParseEntityDecl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57294 Crash type: Global-buffer-overflow READ 1 Crash state: xmlParseEntityDecl xmlParseMarkupDecl xmlParseInternalSubset...

OSV-2023-206 Global-buffer-overflow in xmlParseContentInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57225 Crash type: Global-buffer-overflow READ 1 Crash state: xmlParseContentInternal xmlParseExternalEntityPrivate xmlParseReference...

OSV-2023-201 UNKNOWN READ in Assimp::SMDImporter::ParseNodeInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57218 Crash type: UNKNOWN READ Crash state: Assimp::SMDImporter::ParseNodeInfo Assimp::SMDImporter::ParseNodesSection Assimp::SMDImporter::ParseFile...

OSV-2023-200 Segv on unknown address in mrb_vm_find_method

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57135 Crash type: Segv on unknown address Crash state: mrbvmfindmethod mrbvmexec mrbvmrun...