OSV-2023-280 Heap-use-after-free in mrb_str_hash_m

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57672 Crash type: Heap-use-after-free READ 1 Crash state: mrbstrhashm mrbvmexec mrbvmrun...

OSV-2023-279 Heap-use-after-free in filename_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57678 Crash type: Heap-use-after-free READ 3 Crash state: filenamecmp debugstartsource parsestab...

OSV-2023-278 Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_utf32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57670 Crash type: Heap-buffer-overflow WRITE Crash state: simdutf::haswell::implementation::convertutf8toutf32 roundtrip.cc...

OSV-2023-273 Heap-buffer-overflow in add_complete_typeobj

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57614 Crash type: Heap-buffer-overflow READ 8 Crash state: addcompletetypeobj ddsixttypeaddtypeobj ddsitypeaddtypeobj...

OSV-2023-271 Heap-buffer-overflow in bit_utf8_to_TU

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57589 Crash type: Heap-buffer-overflow READ 1 Crash state: bitutf8toTU dxfheaderread dwgreaddxf...

OSV-2023-265 Heap-double-free in xmlHashDefaultDeallocator

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57551 Crash type: Heap-double-free Crash state: xmlHashDefaultDeallocator xmlHashFree xmlFreeParserCtxt...

OSV-2023-260 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57569 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2023-257 Global-buffer-overflow in read_coding_unit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57566 Crash type: Global-buffer-overflow READ 1 Crash state: readcodingunit readcodingquadtree readcodingquadtree...

PT-2023-35743 · Git +1 · Suricata

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of...

OSV-2023-252 UNKNOWN READ in iv_put

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57495 Crash type: UNKNOWN READ Crash state: ivput mrbobjivsetforce mrbvmconstset...

OSV-2023-251 Stack-buffer-overflow in ext11_work_out_bundles

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57494 Crash type: Stack-buffer-overflow WRITE 4 Crash state: ext11workoutbundles dissectorancsection dissectoran...

OSV-2023-249 Global-buffer-overflow in xmlStrndup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57469 Crash type: Global-buffer-overflow READ 1 Crash state: xmlStrndup htmlParseSystemLiteral htmlParseDocTypeDecl...

OSV-2023-248 Heap-double-free in _dwarf_read_line_table_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57443 Crash type: Heap-double-free Crash state: dwarfreadlinetableheader dwarfinternalsrclines dwarfsrclinesb...

OSV-2023-246 Heap-double-free in _dwarf_read_line_table_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57437 Crash type: Heap-double-free Crash state: dwarfreadlinetableheader dwarfsrcfiles fuzzsrcfiles.c...

OSV-2023-243 UNKNOWN WRITE in processCertificateElements

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57448 Crash type: UNKNOWN WRITE Crash state: processCertificateElements fuzztlscertificate.c...

OSV-2023-240 Invalid-free in fuzz_die_cu_attrs.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57429 Crash type: Invalid-free Crash state: fuzzdiecuattrs.c...

PT-2023-35733 · Git +1 · Libdwarf

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to an Invalid-free crash type, as reported by OSS-Fuzz. The crash occurs in the fuzz die cu attrs.c file. No information is availabl...

OSV-2023-239 Use-of-uninitialized-value in ihevce_strm_fill_done

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57401 Crash type: Use-of-uninitialized-value Crash state: ihevcestrmfilldone ihevceentcodingthrd osalfunc...

OSV-2023-234 Use-of-uninitialized-value in ihevce_enc_frm_proc_slave_thrd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57397 Crash type: Use-of-uninitialized-value Crash state: ihevceencfrmprocslavethrd osalfunc posixmemalign...

OSV-2023-229 Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57369 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c...