OSV-2023-206 Global-buffer-overflow in xmlParseContentInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57225 Crash type: Global-buffer-overflow READ 1 Crash state: xmlParseContentInternal xmlParseExternalEntityPrivate xmlParseReference...

OSV-2023-201 UNKNOWN READ in Assimp::SMDImporter::ParseNodeInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57218 Crash type: UNKNOWN READ Crash state: Assimp::SMDImporter::ParseNodeInfo Assimp::SMDImporter::ParseNodesSection Assimp::SMDImporter::ParseFile...

OSV-2023-200 Segv on unknown address in mrb_vm_find_method

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57135 Crash type: Segv on unknown address Crash state: mrbvmfindmethod mrbvmexec mrbvmrun...

OSV-2023-197 Global-buffer-overflow in base_C_MessageEncryptInit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57120 Crash type: Global-buffer-overflow READ 8 Crash state: baseCMessageEncryptInit rpcCMessageEncryptInit p11rpcserverhandle...

OSV-2023-196 Global-buffer-overflow in xmlDictLookup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57110 Crash type: Global-buffer-overflow READ 1 Crash state: xmlDictLookup xmlParseNCName xmlParseQName...

OSV-2023-195 Global-buffer-overflow in htmlParseDocument

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57089 Crash type: Global-buffer-overflow READ 1 Crash state: htmlParseDocument htmlDoRead htmlReadMemory...

OSV-2023-193 Global-buffer-overflow in xmlParseContentInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57084 Crash type: Global-buffer-overflow READ 1 Crash state: xmlParseContentInternal xmlParseExternalEntityPrivate xmlParseReference...

OSV-2023-192 Heap-use-after-free in mrb_str_hash_m

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57108 Crash type: Heap-use-after-free READ 1 Crash state: mrbstrhashm mrbfuncallwithblock mrbfuncallargv...

OSV-2023-191 Global-buffer-overflow in xmlSkipBlankChars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57080 Crash type: Global-buffer-overflow READ 1 Crash state: xmlSkipBlankChars xmlParseMisc xmlParseDocument...

OSV-2023-188 Global-buffer-overflow in xmlParseQName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57077 Crash type: Global-buffer-overflow READ 1 Crash state: xmlParseQName xmlParseStartTag2 xmlParseElementStart...

OSV-2023-183 UNKNOWN READ in mrb_exc_get_id

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57064 Crash type: UNKNOWN READ Crash state: mrbexcgetid mrbnomethoderror mrbmethodmissing...

OSV-2023-182 Heap-buffer-overflow in FLAC__bitwriter_write_rice_signed_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57071 Crash type: Heap-buffer-overflow WRITE 4 Crash state: FLACbitwriterwritericesignedblock addresidualpartitionedrice FLACsubframeaddfixed...

OSV-2023-181 Heap-double-free in xsltCompileStepPattern

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57061 Crash type: Heap-double-free Crash state: xsltCompileStepPattern xsltCompileRelativePathPattern xsltCompilePatternInternal...

OSV-2023-180 UNKNOWN READ in mrb_obj_iv_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57051 Crash type: UNKNOWN READ Crash state: mrbobjivget classnamestr mrbmodtos...

OSV-2023-178 Segv on unknown address in mrb_bint_sub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57037 Crash type: Segv on unknown address Crash state: mrbbintsub intsub mrbvmexec...

OSV-2023-177 Heap-buffer-overflow in mosquitto__strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57002 Crash type: Heap-buffer-overflow READ Crash state: mosquittostrdup configreadfilecore configreadfile...

OSV-2023-176 Heap-use-after-free in mrb_gc_mark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56991 Crash type: Heap-use-after-free READ 4 Crash state: mrbgcmark mrbgcmarkiv gcmarkchildren...

OSV-2023-175 UNKNOWN READ in dissect_oran_c_section

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56990 Crash type: UNKNOWN READ Crash state: dissectorancsection dissectoran calldissectorwork...

OSV-2023-174 Global-buffer-overflow in htmlCurrentChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56964 Crash type: Global-buffer-overflow READ 1 Crash state: htmlCurrentChar htmlParseNameComplex htmlParseName...

OSV-2023-170 Invalid-free in hb_free_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56952 Crash type: Invalid-free Crash state: hbfreeimpl OT::glyf::freecompiledsubsetglyphs OT::glyf::populatesubsetglyphs...