OSV-2023-301 UNKNOWN READ in sd_event_default

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57915 Crash type: UNKNOWN READ Crash state: sdeventdefault dummyserverinit fuzz-journald-audit.c...

OSV-2023-299 UNKNOWN READ in log_set_max_level

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57912 Crash type: UNKNOWN READ Crash state: logsetmaxlevel fuzz-journal-remote.c centipede::RunOneInput...

PT-2023-35763 · Git +1 · Systemd

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash involves the log set max level function and the fuzz-journal-remote.c...

OSV-2023-298 UNKNOWN READ in active_edges

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57884 Crash type: UNKNOWN READ Crash state: activeedges intersect cairoboxesintersect...

OSV-2023-297 UNKNOWN READ in pdfi_read_cff_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57880 Crash type: UNKNOWN READ Crash state: pdfireadcfffont pdfiloadfontbuffer pdfiloadfont...

OSV-2023-292 Use-after-poison in rb_gc_writebarrier

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57782 Crash type: Use-after-poison READ 8 Crash state: rbgcwritebarrier rbsetclasspathstring rbdefineclassidunder...

OSV-2023-284 Global-buffer-overflow in dwg_codepage_dxfstr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57723 Crash type: Global-buffer-overflow READ 8 Crash state: dwgcodepagedxfstr dxfheaderwrite dwgwritedxf...

OSV-2023-282 Heap-use-after-free in mrb_gc_mark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57703 Crash type: Heap-use-after-free READ 4 Crash state: mrbgcmark mrbgcmarkiv gcmarkchildren...

OSV-2023-281 Heap-buffer-overflow in unsigned long simdutf::haswell::convert_masked_utf8_to_utf16<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57673 Crash type: Heap-buffer-overflow WRITE 16 Crash state: unsigned long simdutf::haswell::convertmaskedutf8toutf16 simdutf::haswell::implementation::convertutf8toutf16le roundtrip.cc...

OSV-2023-280 Heap-use-after-free in mrb_str_hash_m

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57672 Crash type: Heap-use-after-free READ 1 Crash state: mrbstrhashm mrbvmexec mrbvmrun...

OSV-2023-279 Heap-use-after-free in filename_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57678 Crash type: Heap-use-after-free READ 3 Crash state: filenamecmp debugstartsource parsestab...

OSV-2023-278 Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_utf32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57670 Crash type: Heap-buffer-overflow WRITE Crash state: simdutf::haswell::implementation::convertutf8toutf32 roundtrip.cc...

OSV-2023-273 Heap-buffer-overflow in add_complete_typeobj

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57614 Crash type: Heap-buffer-overflow READ 8 Crash state: addcompletetypeobj ddsixttypeaddtypeobj ddsitypeaddtypeobj...

OSV-2023-271 Heap-buffer-overflow in bit_utf8_to_TU

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57589 Crash type: Heap-buffer-overflow READ 1 Crash state: bitutf8toTU dxfheaderread dwgreaddxf...

OSV-2023-265 Heap-double-free in xmlHashDefaultDeallocator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57551 Crash type: Heap-double-free Crash state: xmlHashDefaultDeallocator xmlHashFree xmlFreeParserCtxt...

OSV-2023-260 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57569 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2023-257 Global-buffer-overflow in read_coding_unit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57566 Crash type: Global-buffer-overflow READ 1 Crash state: readcodingunit readcodingquadtree readcodingquadtree...

PT-2023-35743 · Git +1 · Suricata

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of...

OSV-2023-252 UNKNOWN READ in iv_put

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57495 Crash type: UNKNOWN READ Crash state: ivput mrbobjivsetforce mrbvmconstset...

OSV-2023-251 Stack-buffer-overflow in ext11_work_out_bundles

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57494 Crash type: Stack-buffer-overflow WRITE 4 Crash state: ext11workoutbundles dissectorancsection dissectoran...