CVE-2022-40157

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-40160

DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...

CVE-2022-40161

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-40158

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-41852

Removed by vendor...

CVE-2022-40158

Removed by vendor...

CVE-2022-40157

Removed by vendor...

OSV-2022-1018 Index-out-of-bounds in LibRaw::kodak_radc_load_raw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52139 Crash type: Index-out-of-bounds Crash state: LibRaw::kodakradcloadraw LibRaw::unpack LoadRAW...

CVE-2022-40159

CVE-2022-40159 concerns a DoS due to a stack-based buffer overflow in parsing XPath by JXPath. The CVE entry is explicitly marked as DISPUTED/invalid in multiple sources (NVD OSV/GHSA withdrawals), and no confirmatory public technical details are provided beyond the described overflow. IBM bullet...

CVE-2022-40160

CVE-2022-40160 describes a Denial of Service in JXPath due to a stack-based buffer overflow while parsing XPath. Connected IBM bulletins note this affects IBM Content Navigator components (JXPath package) and provide remediation: upgrade to IBM Content Navigator 3.0.12 IF004 or 3.0.11 IF008 plus ...

CVE-2022-40159

DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...

CVE-2022-40159

Removed by vendor...

CVE-2022-40160 Stack Overflow in JXPath

DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...

CVE-2022-40160

Removed by vendor...

CVE-2022-40159 Stack Overflow in JXPath

DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...

OSV-2022-1015 Heap-use-after-free in msFreeMap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52102 Crash type: Heap-use-after-free READ 8 Crash state: msFreeMap msLoadMap mapfuzzer.c...

protobuf-java has a potential Denial of Service issue

Summary A potential Denial of Service issue in protobuf-java core and lite was discovered in the parsing procedure for binary and text format data. Input streams containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted...

OSV-2022-1008 Heap-buffer-overflow in cli_js_parse_done

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52038 Crash type: Heap-buffer-overflow READ 4 Crash state: clijsparsedone clihtmlnormalise htmlnormalisemap...

PT-2022-36659 · Git +1 · Haproxy

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the parse line function, which is called by readcfgfile in the fuzz cfg parser...

OSV-2022-1003 Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51965 Crash type: Index-out-of-bounds Crash state: LibRaw::ahdinterpolaterandbinrgbandconverttocielab LibRaw::ahdinterpolate LibRaw::dcrawprocess...