OSV-2022-1008 Heap-buffer-overflow in cli_js_parse_done

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52038 Crash type: Heap-buffer-overflow READ 4 Crash state: clijsparsedone clihtmlnormalise htmlnormalisemap...

GSD-2022-1006390 ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC

ALSA: pcm: oss: Fix race at SNDCTLDSPSYNC This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.68 by commit...

GSD-2022-1006357 ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC

ALSA: pcm: oss: Fix race at SNDCTLDSPSYNC This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...

PT-2022-34614 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: A race condition issue exists in the ALSA pcm oss component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.19.9,...

PT-2022-34647 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: A race condition exists in the ALSA pcm oss module. The issue is related to the SNDCTL DSP SYNC control. The actual impact and attack plausibility have not yet been proven. Recommendations:...

OSV-2022-1003 Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51965 Crash type: Index-out-of-bounds Crash state: LibRaw::ahdinterpolaterandbinrgbandconverttocielab LibRaw::ahdinterpolate LibRaw::dcrawprocess...

OSV-2022-1002 Segv on unknown address in upb_MiniTable_SetSubEnum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51950 Crash type: Segv on unknown address Crash state: upbMiniTableSetSubEnum upbMessageDefLinkMiniTable upbFileDefCreate...

OSV-2022-1001 Heap-buffer-overflow in SkRect::setBoundsCheck

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51933 Crash type: Heap-buffer-overflow READ 8 Crash state: SkRect::setBoundsCheck SkEdgeClipper::clipCubic SkEdgeClipper::ClipPath...

OSV-2022-996 Use-of-uninitialized-value in GrTriangulator::sanitizeContours

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51921 Crash type: Use-of-uninitialized-value Crash state: GrTriangulator::sanitizeContours GrTriangulator::contoursToPolys GrTriangulator::pathToPolys...

OSV-2022-994 Heap-buffer-overflow in onig_node_str_cat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51920 Crash type: Heap-buffer-overflow READ 4 Crash state: onignodestrcat parseexp parsebranch...

OSV-2022-993 Stack-use-after-return in check_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51910 Crash type: Stack-use-after-return READ 1 Crash state: checkbuffer rbingetbinpluginbybuffer rbinfilenewfrombuffer...

OSV-2022-989 Use-of-uninitialized-value in SkPathStroker::CheckCubicLinear

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51942 Crash type: Use-of-uninitialized-value Crash state: SkPathStroker::CheckCubicLinear SkPathStroker::cubicTo SkStroke::strokePath...

OSV-2022-988 Heap-buffer-overflow in onig_vsnprintf_with_pattern

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51934 Crash type: Heap-buffer-overflow READ 1 Crash state: onigvsnprintfwithpattern onigsyntaxwarn fetchtoken...

OSV-2022-987 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51941 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.stringHook...

OSV-2022-983 Heap-buffer-overflow in SkPathPriv::IsRectContour

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51909 Crash type: Heap-buffer-overflow READ 4 Crash state: SkPathPriv::IsRectContour SkPath::isRect SkCanvas::clipPath...

OSV-2022-978 Heap-buffer-overflow in SkPath::Iter::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51926 Crash type: Heap-buffer-overflow READ 8 Crash state: SkPath::Iter::next SkPath1DPathEffectImpl::next Sk1DPathEffect::onFilterPath...

PT-2022-37322 · Git +1 · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state includes functions such as onig...

OSV-2022-972 Use-of-uninitialized-value in SkFindQuadMaxCurvature

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51876 Crash type: Use-of-uninitialized-value Crash state: SkFindQuadMaxCurvature AAHairlineOp::onPrepareDraws GrMeshDrawOp::onPrepare...

OSV-2022-970 Heap-buffer-overflow in SkPath::reverseAddPath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51868 Crash type: Heap-buffer-overflow READ 4 Crash state: SkPath::reverseAddPath FuzzNicePath FuzzRegionSetPath...

OSV-2022-969 Heap-buffer-overflow in SkPath::Iter::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51875 Crash type: Heap-buffer-overflow READ 8 Crash state: SkPath::Iter::next SkRegion::setPath SkRasterClip::SkRasterClip...