OSV-2024-288 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68181 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/sun.nio.cs.UTF8.updatePositions java.base/sun.nio.cs.UTF8$Encoder.encodeArrayLoop...

OSV-2024-278 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68092 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.HeapCharBuffer. java.base/java.nio.CharBuffer.wrap...

OSV-2024-272 Heap-buffer-overflow in DDS_Security_Deserialize_ParticipantBuiltinTopicData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68028 Crash type: Heap-buffer-overflow READ 2 Crash state: DDSSecurityDeserializeParticipantBuiltinTopicData fuzzsecuritydeser.c...

OSV-2024-269 Security exception in java.base/java.util.stream.AbstractPipeline.evaluate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66703 Crash type: Security exception Crash state: java.base/java.util.stream.AbstractPipeline.evaluate java.base/java.util.stream.ReferencePipeline.collect...

OSV-2024-267 Heap-buffer-overflow in SetDataFormat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68047 Crash type: Heap-buffer-overflow WRITE 8 Crash state: SetDataFormat ParseIT8 cmsIT8LoadFromMem...

OSV-2024-265 Heap-buffer-overflow in Mat_VarDuplicate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68065 Crash type: Heap-buffer-overflow READ 8 Crash state: MatVarDuplicate MatioRead matiofuzzer.cpp...

OSV-2024-255 UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66797 Crash type: UNKNOWN READ Crash state: NULL...

OSV-2024-251 Heap-use-after-free in gx_device_forward_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67932 Crash type: Heap-use-after-free READ 8 Crash state: gxdeviceforwardfinalize gxdevicefinalize gsgcreclaim...

OSV-2024-248 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67850 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

OSV-2024-246 UNKNOWN READ in ndpi_detection_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67881 Crash type: UNKNOWN READ Crash state: ndpidetectionprocesspacket fuzzprocesspacket.c...

OSV-2024-245 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67672 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel...

Internet Bug Bounty: CVE-2019-1551: rsaz_512_sqr overflow bug on x86_64

The CVE-2019-1551 vulnerability was an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli in the OpenSSL library. The vulnerability was found and reported by researchers. The issue was mitigated in the 1.1.1 and 1.0.2 versions of OpenSSL...

OSV-2024-233 Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReorderPicturesInDisplay

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66003 Crash type: Use-of-uninitialized-value Crash state: WelsDec::CWelsDecoder::ReorderPicturesInDisplay WelsDec::CWelsDecoder::DecodeFrame2WithCtx WelsDec::CWelsDecoder::DecodeFrame2...

OSV-2024-223 UNKNOWN READ in H5HG_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67725 Crash type: UNKNOWN READ Crash state: H5HGread H5VLnativeblobget H5VLblobget...

OSV-2024-222 Security exception in co.nstant.in.cbor.CborDecoder.decodeNext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67637 Crash type: Security exception Crash state: co.nstant.in.cbor.CborDecoder.decodeNext java.base/jdk.internal.misc.Unsafe.putByte jdk.unsupported/sun.misc.Unsafe.putByte...

OSV-2024-221 Heap-buffer-overflow in libspdm_copy_mem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67585 Crash type: Heap-buffer-overflow READ 1 Crash state: libspdmcopymem libspdmgetresponsechunksend libspdmgetresponsechunksend...

OSV-2024-217 Heap-use-after-free in dropNode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67670 Crash type: Heap-use-after-free READ 8 Crash state: dropNode api.c xmlFreeNodeList...

OSV-2024-204 Heap-use-after-free in JS_NewObjectFromShape

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65872 Crash type: Heap-use-after-free WRITE 8 Crash state: JSNewObjectFromShape jsparsetemplate jsparsepostfixexpr...

OSV-2024-198 Heap-use-after-free in xmlCopyPropInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67586 Crash type: Heap-use-after-free READ 8 Crash state: xmlCopyPropInternal xmlCopyPropList xmlStaticCopyNode...

OSV-2024-194 Heap-use-after-free in xmlDOMWrapNSNormAcquireNormalizedNs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67560 Crash type: Heap-use-after-free READ 8 Crash state: xmlDOMWrapNSNormAcquireNormalizedNs xmlDOMWrapReconcileNamespaces api.c...