OSV-2022-964 Use-of-uninitialized-value in cmsMLUgetASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51841 Crash type: Use-of-uninitialized-value Crash state: cmsMLUgetASCII TypeTextDescriptionWrite SaveTags...

OSV-2022-963 Security exception in org.codehaus.janino.Parser.parseConditionalExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51821 Crash type: Security exception Crash state: org.codehaus.janino.Parser.parseConditionalExpression java.base/sun.nio.cs.CESU8$Encoder.encodeLoop java.base/java.nio.charset.CharsetEncoder.encode...

OSV-2022-962 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51840 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/sun.nio.cs.CESU8.updatePositions java.base/sun.nio.cs.CESU8$Encoder.encodeArrayLoop...

OSV-2022-955 Use-of-uninitialized-value in FileWrite

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51808 Crash type: Use-of-uninitialized-value Crash state: FileWrite cmsWriteUInt16Number TypeMLUWrite...

OSV-2022-952 UNKNOWN WRITE in regcomp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51778 Crash type: UNKNOWN WRITE Crash state: regcomp fileregcomp load1...

PT-2022-37305 · Git +1 · Mongoose

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a dynamic stack buffer overflow, which was identified through an OSS-Fuzz report. The crash state includes functions such as rx...

OSV-2022-949 Heap-use-after-free in s_file_write_flush

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51745 Crash type: Heap-use-after-free READ 8 Crash state: sfilewriteflush sclose streamfinalize...

OSV-2022-945 Heap-buffer-overflow in Exiv2::MemIo::read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51707 Crash type: Heap-buffer-overflow WRITE Crash state: Exiv2::MemIo::read Exiv2::BasicIo::readOrThrow Exiv2::QuickTimeVideo::userDataDecoder...

OSV-2022-944 Stack-use-after-scope in RefCopyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51689 Crash type: Stack-use-after-scope READ Crash state: RefCopyBytes dngstream::Put tagdataptr::Put...

OSV-2022-942 Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51694 Crash type: Security exception Crash state: com.github.javaparser.ast.expr.FieldAccessExpr.accept com.github.javaparser.ast.visitor.VoidVisitorAdapter.visit java.base/java.lang.StringCoding.encode...

OSV-2022-937 Use-after-poison in rx_ip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51687 Crash type: Use-after-poison READ 1 Crash state: rxip miprx fuzz.c...

OSV-2022-934 Index-out-of-bounds in LibRaw::parse_tiff_ifd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51657 Crash type: Index-out-of-bounds Crash state: LibRaw::parsetiffifd LibRaw::parsetiff LibRaw::identify...

OSV-2022-932 Stack-buffer-overflow in ntlm_phase_3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51653 Crash type: Stack-buffer-overflow WRITE 1 Crash state: ntlmphase3 establishhttpproxypassthru fuzzproxy.c...

OSV-2022-931 Heap-buffer-overflow in file_magwarn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51674 Crash type: Heap-buffer-overflow READ Crash state: filemagwarn load1 apprenticeload...

OSV-2022-926 Heap-buffer-overflow in Ins_PUSHW

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51618 Crash type: Heap-buffer-overflow READ 1 Crash state: InsPUSHW RunIns InstanceReset...

OSV-2022-924 Heap-buffer-overflow in file_zmagic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51608 Crash type: Heap-buffer-overflow READ 1 Crash state: filezmagic filebuffer magicbuffer...

OSV-2022-916 Container-overflow in wabt::interp::BinaryReaderInterp::BeginFunctionBody

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51565 Crash type: Container-overflow WRITE 4 Crash state: wabt::interp::BinaryReaderInterp::BeginFunctionBody wabt::ReadBinary wabt::interp::ReadBinaryInterp...

OSV-2022-915 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51552 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.io.StringReader.read com.ctc.wstx.io.MergedReader.read...

OSV-2022-914 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51492 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.metamodel.BaseNodeMetaModel.getDeclaredPropertyMetaModels...

OSV-2022-908 Heap-buffer-overflow in element_end

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51480 Crash type: Heap-buffer-overflow READ 4 Crash state: elementend emitendelement gmarkupparsecontextparse...