OSV-2022-952 UNKNOWN WRITE in regcomp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51778 Crash type: UNKNOWN WRITE Crash state: regcomp fileregcomp load1...

PT-2022-37305 · Git +1 · Mongoose

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a dynamic stack buffer overflow, which was identified through an OSS-Fuzz report. The crash state includes functions such as rx...

OSV-2022-949 Heap-use-after-free in s_file_write_flush

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51745 Crash type: Heap-use-after-free READ 8 Crash state: sfilewriteflush sclose streamfinalize...

OSV-2022-945 Heap-buffer-overflow in Exiv2::MemIo::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51707 Crash type: Heap-buffer-overflow WRITE Crash state: Exiv2::MemIo::read Exiv2::BasicIo::readOrThrow Exiv2::QuickTimeVideo::userDataDecoder...

OSV-2022-944 Stack-use-after-scope in RefCopyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51689 Crash type: Stack-use-after-scope READ Crash state: RefCopyBytes dngstream::Put tagdataptr::Put...

OSV-2022-942 Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51694 Crash type: Security exception Crash state: com.github.javaparser.ast.expr.FieldAccessExpr.accept com.github.javaparser.ast.visitor.VoidVisitorAdapter.visit java.base/java.lang.StringCoding.encode...

OSV-2022-937 Use-after-poison in rx_ip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51687 Crash type: Use-after-poison READ 1 Crash state: rxip miprx fuzz.c...

OSV-2022-934 Index-out-of-bounds in LibRaw::parse_tiff_ifd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51657 Crash type: Index-out-of-bounds Crash state: LibRaw::parsetiffifd LibRaw::parsetiff LibRaw::identify...

OSV-2022-932 Stack-buffer-overflow in ntlm_phase_3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51653 Crash type: Stack-buffer-overflow WRITE 1 Crash state: ntlmphase3 establishhttpproxypassthru fuzzproxy.c...

OSV-2022-931 Heap-buffer-overflow in file_magwarn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51674 Crash type: Heap-buffer-overflow READ Crash state: filemagwarn load1 apprenticeload...

OSV-2022-926 Heap-buffer-overflow in Ins_PUSHW

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51618 Crash type: Heap-buffer-overflow READ 1 Crash state: InsPUSHW RunIns InstanceReset...

OSV-2022-924 Heap-buffer-overflow in file_zmagic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51608 Crash type: Heap-buffer-overflow READ 1 Crash state: filezmagic filebuffer magicbuffer...

OSV-2022-916 Container-overflow in wabt::interp::BinaryReaderInterp::BeginFunctionBody

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51565 Crash type: Container-overflow WRITE 4 Crash state: wabt::interp::BinaryReaderInterp::BeginFunctionBody wabt::ReadBinary wabt::interp::ReadBinaryInterp...

OSV-2022-915 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51552 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.io.StringReader.read com.ctc.wstx.io.MergedReader.read...

OSV-2022-914 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51492 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.metamodel.BaseNodeMetaModel.getDeclaredPropertyMetaModels...

OSV-2022-908 Heap-buffer-overflow in element_end

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51480 Crash type: Heap-buffer-overflow READ 4 Crash state: elementend emitendelement gmarkupparsecontextparse...

OSV-2022-904 Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51406 Crash type: Heap-use-after-free READ 8 Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypegeos::geom::Coor geos::geomgraph::NodeMap::addNode geos::geomgraph::GeometryGraph::addSelfIntersectionNode...

OSV-2022-901 Heap-double-free in HashMgr::~HashMgr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51432 Crash type: Heap-double-free Crash state: HashMgr::HashMgr HunspellImpl::HunspellImpl Hunspell::Hunspell...

GHSA-P2G7-XWVR-RRW3 Helm Controller denial of service

Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK allows for specific data inputs to cause high memory consumption, which in some platforms could cause the controller to panic and stop processing reconciliations. Impact In a shared cluster multi-tenanc...

linked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend`

Impact What kind of vulnerability is it? Who is impacted? This vulnerability impacts all the initialization functions on the Heap and LockedHeap types, including Heap::new, Heap::init, Heap::initfromslice, and LockedHeap::new. It also affects multiple uses of the Heap::extend method. Initializati...