OSV-2024-352 Heap-buffer-overflow in __parse_options

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68156 Crash type: Heap-buffer-overflow READ Crash state: parseoptions parseoptions parseoptions...

OSV-2024-351 UNKNOWN READ in H5SL__release_common

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67741 Crash type: UNKNOWN READ Crash state: H5SLreleasecommon H5SLclosecommon H5SLdestroy...

OSV-2024-349 Security exception in java.base/java.lang.AbstractStringBuilder.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67525 Crash type: Security exception Crash state: java.base/java.lang.AbstractStringBuilder. java.base/java.lang.StringBuilder. org.apache.commons.codec.language.bm.Rule$Phoneme...

OSV-2024-345 Use-of-uninitialized-value in aesEncryptBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67066 Crash type: Use-of-uninitialized-value Crash state: aesEncryptBlock EncryptStream::lookChar BaseCryptStream::getChar...

OSV-2024-343 Heap-buffer-overflow in pcpp::BgpUpdateMessageLayer::setPathAttributes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67971 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::BgpUpdateMessageLayer::setPathAttributes pcpp::BgpUpdateMessageLayer::clearPathAttributes readParsedPacket...

OSV-2024-341 UNKNOWN READ in PointerVector.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67287 Crash type: UNKNOWN READ Crash state: PointerVector.h...

OSV-2024-340 Heap-buffer-overflow in Exiv2::AsfVideo::GUIDTag::GUIDTag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68210 Crash type: Heap-buffer-overflow READ 8 Crash state: Exiv2::AsfVideo::GUIDTag::GUIDTag Exiv2::AsfVideo::streamProperties Exiv2::AsfVideo::decodeBlock...

OSV-2024-336 Stack-buffer-underflow in mkechar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68343 Crash type: Stack-buffer-underflow READ 4 Crash state: mkechar sympartition ntod...

OSV-2024-335 Security exception in org.springframework.expression.spel.standard.InternalSpelExpressionParser.eatExp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67978 Crash type: Security exception Crash state: org.springframework.expression.spel.standard.InternalSpelExpressionParser.eatExp java.base/java.nio.charset.CharsetEncoder.replaceWith java.base/java.nio.charset.CharsetEncoder...

OSV-2024-333 UNKNOWN READ in Mat_VarPrint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68258 Crash type: UNKNOWN READ Crash state: MatVarPrint MatVarPrint MatVarPrint...

OSV-2024-331 Null-dereference READ in ubsan_GetStackTrace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68198 Crash type: Null-dereference READ Crash state: ubsanGetStackTrace...

OSV-2024-328 Use-of-uninitialized-value in light_read_record

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68173 Crash type: Use-of-uninitialized-value Crash state: lightreadrecord lightpcapngopenread pcpp::PcapNgFileReaderDevice::open...

OSV-2024-326 Heap-buffer-overflow in GfxFont::readFontDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68193 Crash type: Heap-buffer-overflow READ 1 Crash state: GfxFont::readFontDescriptor Gfx8BitFont::Gfx8BitFont GfxFont::makeFont...

OSV-2024-324 Use-of-uninitialized-value in do_callout_jit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68365 Crash type: Use-of-uninitialized-value Crash state: docalloutjit jitmachinestackexec...

OSV-2024-323 Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68346 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst java.base/java.util.stream.ReferencePipeline$3$1.accept...

OSV-2024-322 Container-overflow in strtol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68322 Crash type: Container-overflow READ 3 Crash state: strtol Pistache::Http::Private::BodyStep::Chunk::parse Pistache::Http::Private::BodyStep::parseTransferEncoding...

OSV-2024-319 Stack-buffer-underflow in filter_apply_chain

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68328 Crash type: Stack-buffer-underflow READ 4 Crash state: filterapplychain filterapplychain initializeoutputfilters...

OSV-2024-314 Heap-buffer-overflow in config__add_listener

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68361 Crash type: Heap-buffer-overflow WRITE Crash state: configaddlistener configcreatedefaultlistener configreadfilecore...

OSV-2024-309 Use-of-uninitialized-value in fast_forward_first_n_chars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66944 Crash type: Use-of-uninitialized-value Crash state: fastforwardfirstnchars jitcompile pcre2jitcompile8...

OSV-2024-294 Segv on unknown address in gx_device_forward_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68051 Crash type: Segv on unknown address Crash state: gxdeviceforwardfinalize gxdevicefinalize pdf14devicefinalize...