OSV-2023-562 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60538 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::EvaluateValue...

OSV-2023-555 Heap-buffer-overflow in Gfx::InputStreamer::read_u24

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60465 Crash type: Heap-buffer-overflow READ 1 Crash state: Gfx::InputStreamer::readu24 AK::Function Gfx::BMPImageDecoderPlugin::frame...

OSV-2023-554 Heap-buffer-overflow in OT::CmapSubtable::get_glyph

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60475 Crash type: Heap-buffer-overflow READ 2 Crash state: OT::CmapSubtable::getglyph bool OT::cmap::acceleratort::getglyphfrom hbotgetnominalglyphs...

OSV-2023-547 UNKNOWN READ in r_str_ncpy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60407 Crash type: UNKNOWN READ Crash state: rstrncpy Elf32rbinelfloadsymbolsandimports Elf32loadsymbols...

OSV-2023-538 Heap-buffer-overflow in Gfx::BooleanDecoder::initialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60262 Crash type: Heap-buffer-overflow READ 7 Crash state: Gfx::BooleanDecoder::initialize Video::VP9::FrameContext::createrangedecoder Video::VP9::Parser::compressedheader...

OSV-2023-536 Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60274 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5Parser::ParseHeader Assimp::MD5::MD5Parser::MD5Parser Assimp::MD5Importer::LoadMD5MeshFile...

OSV-2023-533 Security exception in org.apache.lucene.util.ArrayUtil.growExact

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60248 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.growExact org.apache.lucene.util.ArrayUtil.grow org.apache.lucene.util.BytesRefBuilder.grow...

OSV-2023-528 Memcpy-param-overlap in pdfi_copy_truetype_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60204 Crash type: Memcpy-param-overlap Crash state: pdficopytruetypefont pdfiloadfont pdfiloaddictfont...

OSV-2023-527 Heap-buffer-overflow in default_get_outline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60207 Crash type: Heap-buffer-overflow READ 4 Crash state: defaultgetoutline pdfifapigetglyph getfapiglyphdata...

OSV-2023-525 Security exception in jaz.Zer.reportFinding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60167 Crash type: Security exception Crash state: jaz.Zer.reportFinding jaz.Zer.reportFindingIfEnabled jaz.Zer...

OSV-2023-522 Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60156 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf com.codeintelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrfSocket...

OSV-2023-521 Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60179 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf com.codeintelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrfSocket...

OSV-2023-518 Security exception in com.code_intelligence.jazzer.sanitizers.XPathInjection.checkXpathExecute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60148 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.XPathInjection.checkXpathExecute org.hamcrest.xml.HasXPath.compiledXPath org.hamcrest.xml.HasXPath...

FreeBSD : OpenEXR -- heap buffer overflow in internal_huf_decompress (06428d91-152e-11ee-8b14-dbdd62da85fb)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 06428d91-152e-11ee-8b14-dbdd62da85fb advisory. - oss-fuzz reports: heap buffer overflow in internalhufdecompress. Cary Phillips reports: v3.1.9 - Patc...

OSV-2023-517 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60112 Crash type: Security exception Crash state: org.springframework.expression.spel.ast.OpPlus.getValueInternal java.base/sun.reflect.generics.reflectiveObjects.TypeVariableImpl.hashCode java.base/java.util.Arrays.hashCode...

OSV-2023-512 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60091 Crash type: Memcpy-param-overlap Crash state: repeat pere cliregcompreal...

OSV-2022-1277 Heap-use-after-free in mk_event_timeout_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60089 Crash type: Heap-use-after-free WRITE 8 Crash state: mkeventtimeoutdestroy flbscheddestroy flbconfigexit...

OSV-2023-510 Heap-buffer-overflow in uofs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60056 Crash type: Heap-buffer-overflow READ 1 Crash state: uofs pdfifindcffindex pdfireadcfffont...

OSV-2023-509 Heap-buffer-overflow in ndpi_search_thrift_tcp_udp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60070 Crash type: Heap-buffer-overflow WRITE Crash state: ndpisearchthrifttcpudp checkndpidetectionfunc ndpicheckflowfunc...

OSV-2023-508 Heap-buffer-overflow in AffixMgr::compound_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60034 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::compoundcheck AffixMgr::compoundcheck AffixMgr::compoundcheck...