OSV-2022-557 Heap-buffer-overflow in emit_goto

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48924 Crash type: Heap-buffer-overflow READ 4 Crash state: emitgoto jsparseforinof jsparsestatementordecl...

OSV-2022-556 UNKNOWN READ in mrb_bint_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48877 Crash type: UNKNOWN READ Crash state: mrbbintcmp cmpnum numgt...

OSV-2022-550 Heap-use-after-free in mrb_bint_new_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48873 Crash type: Heap-use-after-free READ 1 Crash state: mrbbintnewstr mrbvmexec mrbvmrun...

OSV-2022-538 Memcpy-param-overlap in FT_Stream_TryRead

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48749 Crash type: Memcpy-param-overlap Crash state: FTStreamTryRead bdfloadfont BDFFaceInit...

OSV-2022-534 Heap-buffer-overflow in json_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48736 Crash type: Heap-buffer-overflow READ 1 Crash state: jsonparse fileisjson filebuffer...

Fedora: Security Advisory for golang-github-aliyun-ossutil (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OSV-2022-533 Check failed in CheckUnwind

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48629 Crash type: Check failed Crash state: CheckUnwind vp9loopfilterdealloc vp9decoderremove...

OSV-2022-532 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48658 Crash type: Null-dereference READ Crash state: NULL...

OSV-2022-531 Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48684 Crash type: Heap-buffer-overflow WRITE 4 Crash state: perfetto::traceprocessor::TrackEventParser::ParseTrackDescriptor perfetto::traceprocessor::TrackEventModule::ParsePacket...

[SECURITY] Fedora 36 Update: golang-github-aliyun-ossutil-1.7.9-3.fc36

Alibaba Cloud Aliyun Object Storage Service OSS CLI...

OSV-2022-530 Heap-buffer-overflow in string_decoder_getc_utf_8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48589 Crash type: Heap-buffer-overflow READ 1 Crash state: stringdecodergetcutf8 textdecodergetc ReadClause...

OSV-2022-522 Heap-buffer-overflow in Interp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48526 Crash type: Heap-buffer-overflow READ 4 Crash state: Interp InsIUP RunIns...

OSV-2022-519 Stack-buffer-overflow in LookupThousands

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48470 Crash type: Stack-buffer-overflow WRITE Crash state: LookupThousands LookupNum3 TranslateNumber...

OSV-2022-515 Uncaught exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48408 Crash type: Uncaught exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.TreeMap.compare java.base/java.util.TreeMap.addEntryToEmptyMap...

OSV-2022-514 Heap-use-after-free in AK::HashTable<AK::StringView, AK::Traits<AK::StringView>, false>::try_lookup_for

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48405 Crash type: Heap-use-after-free READ 2 Crash state: AK::HashTable, false::trylookupfor JS::Parser::isprivateidentifiervalid JS::Parser::parseprimaryexpression...

OSV-2022-511 UNKNOWN READ in zfp_getcell

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48372 Crash type: UNKNOWN READ Crash state: zfpgetcell bloscd bloscgetitem...

OSV-2022-510 Heap-buffer-overflow in read_blob_signed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48329 Crash type: Heap-buffer-overflow READ 4 Crash state: readblobsigned parsesignaturetype parsesignaturetype...

OSV-2022-508 Heap-buffer-overflow in coap_split_uri_sub

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48362 Crash type: Heap-buffer-overflow READ 1 Crash state: coapspliturisub coapgeturipath...

OSV-2022-507 Heap-use-after-free in psi_device_ref_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48305 Crash type: Heap-use-after-free READ 8 Crash state: psidevicereffinalize gsgcreclaim ireclaim...

OSV-2022-501 UNKNOWN WRITE in grk::TileLengthMarkers::seek

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48224 Crash type: UNKNOWN WRITE Crash state: grk::TileLengthMarkers::seek grk::CodeStreamDecompress::skipNonScheduledTLM grk::CodeStreamDecompress::parseTileParts...