OSV-2022-904 Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51406 Crash type: Heap-use-after-free READ 8 Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypegeos::geom::Coor geos::geomgraph::NodeMap::addNode geos::geomgraph::GeometryGraph::addSelfIntersectionNode...

OSV-2022-901 Heap-double-free in HashMgr::~HashMgr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51432 Crash type: Heap-double-free Crash state: HashMgr::HashMgr HunspellImpl::HunspellImpl Hunspell::Hunspell...

GSD-2022-1005387 ALSA: seq: oss: Fix data-race for max_midi_devs access

ALSA: seq: oss: Fix data-race for maxmididevs access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.66 by commit...

GSD-2022-1004955 ALSA: seq: oss: Fix data-race for max_midi_devs access

ALSA: seq: oss: Fix data-race for maxmididevs access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

animl (>=1.1.2 <=1.1.4), arekit (>=0.21.0 <=0.22.1) +183 more potentially affected by CVE-2022-36019 via tensorflow-gpu (>=1.10.1 <=2.7.0)

tensorflow-gpu PYPI version =1.10.1, =1.1.2, =0.21.0, =0.23.0, =0.9.2, =1.0.0, =0.1.0, =0.0.1, =0.0.9, =0.1.0, =0.0.1, =1.0.0, =1.0.3 - brainhance =0.0.1 and more Source cves: CVE-2022-36019 Source advisory: OSV:GHSA-9J4V-PP28-MXV7...

GHSA-P2G7-XWVR-RRW3 Helm Controller denial of service

Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK allows for specific data inputs to cause high memory consumption, which in some platforms could cause the controller to panic and stop processing reconciliations. Impact In a shared cluster multi-tenanc...

OSV-2022-899 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51390 Crash type: Heap-buffer-overflow READ 7 Crash state: std::1::basicstring, std::1::allocatorch PfxEntry::add AffixMgr::expandrootword...

OSV-2022-896 Segv on unknown address in Sass::unifyComplex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51316 Crash type: Segv on unknown address Crash state: Sass::unifyComplex Sass::Extender::extendCompound Sass::Extender::extendComplex...

OSV-2022-892 Segv on unknown address in ddsi_config_init

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51292 Crash type: Segv on unknown address Crash state: ddsiconfiginit fuzzconfiginit.c...

OSV-2022-891 Stack-buffer-overflow in flb_env_var_translate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51278 Crash type: Stack-buffer-overflow WRITE Crash state: flbenvvartranslate flbparserconffile configrandomfuzzer.c...

OSV-2022-889 Heap-use-after-free in AffixMgr::prefix_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51277 Crash type: Heap-use-after-free READ 2 Crash state: AffixMgr::prefixcheck AffixMgr::affixcheck HunspellImpl::checkword...

OSV-2022-883 Segv on unknown address in HashMgr::add_word

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51187 Crash type: Segv on unknown address Crash state: HashMgr::addword HashMgr::loadtables HashMgr::HashMgr...

OSV-2022-882 Use-of-uninitialized-value in SfxEntry::test_condition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51218 Crash type: Use-of-uninitialized-value Crash state: SfxEntry::testcondition SfxEntry::add AffixMgr::expandrootword...

OSV-2022-881 Heap-use-after-free in AcquireCodePageWithCapacity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51182 Crash type: Heap-use-after-free READ 8 Crash state: AcquireCodePageWithCapacity CompileElseBlock CompileIf...

OSV-2022-880 Global-buffer-overflow in _getBaseCellNeighbor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51208 Crash type: Global-buffer-overflow READ 4 Crash state: getBaseCellNeighbor localIjkToCell localIjToCell...

OSV-2022-874 UNKNOWN WRITE in from8to16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51128 Crash type: UNKNOWN WRITE Crash state: from8to16 cmsHandleExtraChannels CachedXFORM...

OSV-2022-868 Heap-buffer-overflow in AffixMgr::redundant_condition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51124 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::redundantcondition AffixMgr::parseaffix AffixMgr::parsefile...

OSV-2022-865 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51101 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.lang.StringUTF16.newString java.base/java.lang.String.substring...

OSV-2022-866 Stack-buffer-underflow in gs_type2_interpret

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51089 Crash type: Stack-buffer-underflow READ 4 Crash state: gstype2interpret copiedtype1glyphoutline gsdefaultglyphinfo...

OSV-2022-864 Heap-buffer-overflow in SuggestMgr::badcharkey_utf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51102 Crash type: Heap-buffer-overflow READ 2 Crash state: SuggestMgr::badcharkeyutf SuggestMgr::suggest HunspellImpl::suggestinternal...