OSV-2022-1137 Heap-buffer-overflow in io_memory_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53019 Crash type: Heap-buffer-overflow WRITE Crash state: iomemoryread riopluginread riodescread...

OSV-2022-1133 Security exception in org.codehaus.janino.Parser.parseAssignmentExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52971 Crash type: Security exception Crash state: org.codehaus.janino.Parser.parseAssignmentExpression java.base/sun.nio.cs.CESU8$Encoder.encodeLoop java.base/java.nio.charset.CharsetEncoder.encode...

OSV-2022-1132 Heap-buffer-overflow in add_compile_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52979 Crash type: Heap-buffer-overflow READ 8 Crash state: addcompilestring compiletree compiletree...

OSV-2022-1131 Heap-use-after-free in gs_font_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52986 Crash type: Heap-use-after-free READ 8 Crash state: gsfontfinalize gsgcreclaim ireclaim...

OSV-2022-1129 UNKNOWN WRITE in Assimp::ObjFileMtlImporter::getFloatValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52935 Crash type: UNKNOWN WRITE Crash state: Assimp::ObjFileMtlImporter::getFloatValue Assimp::ObjFileMtlImporter::load Assimp::ObjFileMtlImporter::ObjFileMtlImporter...

OSV-2022-1126 Security exception in java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52922 Crash type: Security exception Crash state: java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString java.base/jdk.internal.math.FloatingDecimal.parseDouble java.base/java.lang.Double.parseDouble...

RUSTSEC-2022-0079 ELF header parsing library doesn't check for valid offset

The crate has several unsafe sections that don't perform proper pointer validation. An example can be found in the following function: fn sectionheaderraw&self - &ET::SectionHeader let shoff = self.elfheader.sectionheaderoffset as usize; let shnum = self.elfheader.sectionheaderentrynum as usize;...

OSV-2022-1122 Heap-buffer-overflow in LibRaw::phase_one_correct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52887 Crash type: Heap-buffer-overflow READ 4 Crash state: LibRaw::phaseonecorrect LibRaw::raw2imageex LibRaw::dcrawprocess...

OSV-2022-1121 Global-buffer-overflow in get_unpack_proc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52870 Crash type: Global-buffer-overflow READ 8 Crash state: getunpackproc xpsbegintypedimage epobegintypedimage...

OSV-2022-1120 Heap-use-after-free in xmlXIncludeDoProcess

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52869 Crash type: Heap-use-after-free READ 4 Crash state: xmlXIncludeDoProcess xmlXIncludeProcessNode xmlTextReaderRead...

OSV-2022-1119 Container-overflow in spvtools::opt::blockmergeutil::CanMergeWithSuccessor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52863 Crash type: Container-overflow READ 8 Crash state: spvtools::opt::blockmergeutil::CanMergeWithSuccessor std::1::function::funcspvtools::opt::BlockMergePass::Process spvtools::opt::IRContext::ProcessCallTreeFromRoots...

OSV-2022-1118 Security exception in java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52840 Crash type: Security exception Crash state: java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString java.base/jdk.internal.math.FloatingDecimal.parseDouble java.base/java.lang.Double.parseDouble...

OSV-2022-1113 Heap-buffer-overflow in ForceZero

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52822 Crash type: Heap-buffer-overflow WRITE 8 Crash state: ForceZero BuildMessage SendFinished...

OSV-2022-1112 Heap-buffer-overflow in wmem_strbuf_append_vprintf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52797 Crash type: Heap-buffer-overflow READ Crash state: wmemstrbufappendvprintf wmemstrbufappendprintf dissectdibs...

OSV-2022-1111 Heap-buffer-overflow in expert_set_info_vformat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52814 Crash type: Heap-buffer-overflow READ Crash state: expertsetinfovformat expertaddinfoformat dissectrpcap...

OSV-2022-1110 Heap-buffer-overflow in parse_classes_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52807 Crash type: Heap-buffer-overflow READ 1 Crash state: parseclasses64 classes rbinobjectsetitems...

OSV-2022-1109 Security exception in java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52812 Crash type: Security exception Crash state: java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString java.base/jdk.internal.math.FloatingDecimal.parseDouble java.base/java.lang.Double.parseDouble...

OSV-2022-1108 Use-after-poison in /mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_ruby_e5a0a396033f4deba21

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52788 Crash type: Use-after-poison READ 1 Crash state: /mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-buildsrubye5a0a396033f4deba21 /mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-buildsrubye5a0a396033f4deba21...

PT-2022-36719 · Git +1 · Ruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported due to a use-after-poison READ 1 error. The issue was identified through an OSS-Fuzz report. No information is available about...

OSV-2022-1106 Heap-buffer-overflow in APFSJObject::add_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52764 Crash type: Heap-buffer-overflow READ Crash state: APFSJObject::addentry APFSJObject::APFSJObject APFSJObject::APFSJObject...