6686 matches found
OSV-2022-1109 Security exception in java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52812 Crash type: Security exception Crash state: java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString java.base/jdk.internal.math.FloatingDecimal.parseDouble java.base/java.lang.Double.parseDouble...
OSV-2022-1108 Use-after-poison in /mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_ruby_e5a0a396033f4deba21
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52788 Crash type: Use-after-poison READ 1 Crash state: /mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-buildsrubye5a0a396033f4deba21 /mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-buildsrubye5a0a396033f4deba21...
PT-2022-36719 · Git +1 · Ruby
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported due to a use-after-poison READ 1 error. The issue was identified through an OSS-Fuzz report. No information is available about...
OSV-2022-1106 Heap-buffer-overflow in APFSJObject::add_entry
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52764 Crash type: Heap-buffer-overflow READ Crash state: APFSJObject::addentry APFSJObject::APFSJObject APFSJObject::APFSJObject...
OSV-2022-1104 Stack-buffer-overflow in LibRaw::xtrans_interpolate
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52775 Crash type: Stack-buffer-overflow WRITE 4 Crash state: LibRaw::xtransinterpolate LibRaw::dcrawprocess RAWHandler::read...
OSV-2022-1102 Security exception in com.github.javaparser.CommentsInserter.insertComments
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52783 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...
OSV-2022-1101 UNKNOWN READ in APFSBtreeNodeIterator<APFSJObjBtreeNode> APFSJObjBtreeNode::find<unsigned long,
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52740 Crash type: UNKNOWN READ Crash state: APFSBtreeNodeIterator APFSJObjBtreeNode::find, APFSBtreeNodeIteratorA APFSJObjTree::obj...
PT-2022-36711 · Git +1 · Openexr
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash state involves several functions: fasthuf initialize,...
OSV-2022-1097 Stack-use-after-return in gs_type2_interpret
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52691 Crash type: Stack-use-after-return READ 4 Crash state: gstype2interpret pdficffglyphoutline gsdefaultglyphinfo...
OSV-2022-1096 Security exception in jaz.Zer.<clinit>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52699 Crash type: Security exception Crash state: jaz.Zer. java.base/java.lang.Class.forName0 java.base/java.lang.Class.forName...
OSV-2022-1094 Security exception in com.google.common.hash.Hashing$ConcatenatedHashFunction.makeHash
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52693 Crash type: Security exception Crash state: com.google.common.hash.Hashing$ConcatenatedHashFunction.makeHash com.google.common.hash.AbstractCompositeHashFunction$1.hash HashingFuzzer.testHash...
OSV-2022-1093 Heap-buffer-overflow in LibRaw::kodak_rgb_load_raw
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52672 Crash type: Heap-buffer-overflow WRITE 2 Crash state: LibRaw::kodakrgbloadraw LibRaw::kodakthumbloader LibRaw::unpackthumb...
OSV-2022-1089 Heap-buffer-overflow in parse_subrip
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52634 Crash type: Heap-buffer-overflow READ 1 Crash state: parsesubrip parsewebvtt gstsubparsechain...
Bomber - Scans Software Bill Of Materials (SBOMs) For Security Vulnerabilities
bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...
OSV-2022-1087 Heap-buffer-overflow in parse_classes_64
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52644 Crash type: Heap-buffer-overflow READ 1 Crash state: parseclasses64 classes rbinobjectsetitems...
OSV-2022-1086 UNKNOWN READ in cli_ole2_extract
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52639 Crash type: UNKNOWN READ Crash state: cliole2extract cliscanole2 climagicscan...
OSV-2022-1085 Heap-buffer-overflow in Ins_ALIGNRP
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52664 Crash type: Heap-buffer-overflow READ 4 Crash state: InsALIGNRP RunIns InstanceReset...
OSV-2022-1079 Stack-buffer-overflow in add_ff_action
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52596 Crash type: Stack-buffer-overflow WRITE 9 Crash state: addffaction dissectieeeNUMBERpv0 dissectieeeNUMBERcommon...
OSV-2022-1078 Heap-buffer-overflow in LibRaw_buffer_datastream::read
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52579 Crash type: Heap-buffer-overflow WRITE 6 Crash state: LibRawbufferdatastream::read LibRaw::readshorts LibRaw::kodakthumbloadraw...