OSV-2023-311 Heap-double-free in cache_bclose

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57939 Crash type: Heap-double-free Crash state: cachebclose bfdclosealldone fuzzobjdump.h...

CVE-2023-29479

The Mozilla Foundation Security Advisory describes this flaw as: Certain malformed OpenPGP messages could trigger incorrect parsing of PKESK/SKESK packets due to a bug in the Ribose RNP library used by Thunderbird up to version 102.9.1, which would cause the Thunderbird user interface to hang. Th...

PT-2023-35776 · Git +1 · Systemd

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash involves the udev rule parse value function and is related to the...

OSV-2023-310 UNKNOWN READ in memdup_suffix0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57937 Crash type: UNKNOWN READ Crash state: memdupsuffix0 fuzz-efi-string.c centipede::RunOneInput...

OSV-2023-309 UNKNOWN READ in fmemopen_unlocked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57936 Crash type: UNKNOWN READ Crash state: fmemopenunlocked fuzz.h centipede::RunOneInput...

OSV-2023-308 UNKNOWN READ in memdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57933 Crash type: UNKNOWN READ Crash state: memdup fuzz-bcd.c centipede::RunOneInput...

OSV-2023-307 Heap-buffer-overflow in bit_read_BB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911 Crash type: Heap-buffer-overflow READ 1 Crash state: bitreadBB dwgdecodeentity dwgdecodeOLE2FRAMEprivate...

OSV-2023-305 UNKNOWN READ in page_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57929 Crash type: UNKNOWN READ Crash state: pagesize dnspacketnew dnsresourcerecordnewfromraw...

OSV-2023-304 UNKNOWN READ in _hashmap_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57928 Crash type: UNKNOWN READ Crash state: hashmapfree journalremoteserverdestroy fuzz-journal-remote.c...

OSV-2023-303 Heap-use-after-free in picture_copy_props

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57927 Crash type: Heap-use-after-free READ Crash state: picturecopyprops dav1dpicturealloccopy dav1dapplygrain...

OSV-2023-302 UNKNOWN READ in google_myanmar_tools::ZawgyiDetector::ZawgyiDetector

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57922 Crash type: UNKNOWN READ Crash state: googlemyanmartools::ZawgyiDetector::ZawgyiDetector zawgyidetectorfuzztarget.cpp centipede::RunOneInput...

OSV-2023-301 UNKNOWN READ in sd_event_default

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57915 Crash type: UNKNOWN READ Crash state: sdeventdefault dummyserverinit fuzz-journald-audit.c...

OSV-2023-299 UNKNOWN READ in log_set_max_level

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57912 Crash type: UNKNOWN READ Crash state: logsetmaxlevel fuzz-journal-remote.c centipede::RunOneInput...

PT-2023-35763 · Git +1 · Systemd

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash involves the log set max level function and the fuzz-journal-remote.c...

OSV-2023-298 UNKNOWN READ in active_edges

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57884 Crash type: UNKNOWN READ Crash state: activeedges intersect cairoboxesintersect...

OSV-2023-297 UNKNOWN READ in pdfi_read_cff_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57880 Crash type: UNKNOWN READ Crash state: pdfireadcfffont pdfiloadfontbuffer pdfiloadfont...

OSV-2023-292 Use-after-poison in rb_gc_writebarrier

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57782 Crash type: Use-after-poison READ 8 Crash state: rbgcwritebarrier rbsetclasspathstring rbdefineclassidunder...

OSV-2023-284 Global-buffer-overflow in dwg_codepage_dxfstr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57723 Crash type: Global-buffer-overflow READ 8 Crash state: dwgcodepagedxfstr dxfheaderwrite dwgwritedxf...

OSV-2023-282 Heap-use-after-free in mrb_gc_mark

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57703 Crash type: Heap-use-after-free READ 4 Crash state: mrbgcmark mrbgcmarkiv gcmarkchildren...

OSV-2023-281 Heap-buffer-overflow in unsigned long simdutf::haswell::convert_masked_utf8_to_utf16<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57673 Crash type: Heap-buffer-overflow WRITE 16 Crash state: unsigned long simdutf::haswell::convertmaskedutf8toutf16 simdutf::haswell::implementation::convertutf8toutf16le roundtrip.cc...