OSV-2022-494 Heap-buffer-overflow in ucl_hash_search

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48156 Crash type: Heap-buffer-overflow READ 1 Crash state: uclhashsearch uclparserprocessobjectelement uclstatemachine...

Malicious code in code-oss-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a46615fdcef4247bc9a1aabc87f17e44b8ec59d86ea9c19c58db63ad82106ef3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1966 Malicious code in code-oss-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a46615fdcef4247bc9a1aabc87f17e44b8ec59d86ea9c19c58db63ad82106ef3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oss-contribution-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7742e7252a9060583a9cb32762cad21d121c9fabdae5decd191969c31e36c3fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-956 Malicious code in amazon-oss-attribution-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d6d5c9699e203a5e4de06a6c3b28c05d236e4e2bd18056e42c0119d6e161f41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lyft-oss-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53666d8b94c7d38025432fc27e383808a8ab339154481d546b6696114385e5d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4436 Malicious code in lyft-oss-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53666d8b94c7d38025432fc27e383808a8ab339154481d546b6696114385e5d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oss-site-jekyll-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96f98f5dc4b4ace55d9a664b834bbe88585350315a9dc4d24c7513b5258a63c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5135 Malicious code in oss-site-jekyll-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96f98f5dc4b4ace55d9a664b834bbe88585350315a9dc4d24c7513b5258a63c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in code-oss-dev-build1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b65930836996ae35d0c2c41c28426c97cd1b2bb8eda37b966b527b177ceea85f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1968 Malicious code in code-oss-dev-build1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b65930836996ae35d0c2c41c28426c97cd1b2bb8eda37b966b527b177ceea85f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1967 Malicious code in code-oss-dev-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 456f94eeaa17d4db11b05a4eff73593023d7da49fd6cd24c043620da98c18616 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OSV-2022-492 Heap-buffer-overflow in jxl::BitsCoder::Read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48123 Crash type: Heap-buffer-overflow READ 8 Crash state: jxl::BitsCoder::Read jxl::ReadVisitor::Bits jxl::jpeg::JPEGData::VisitFields...

OSV-2022-490 Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48060 Crash type: Stack-buffer-overflow READ 4 Crash state: spvtools::opt::CompositeInsertToCompositeConstruct std::1::function::funcbool spvtools::opt::InstructionFolder::FoldInstructionInternal...

OSV-2022-489 Heap-buffer-overflow in fr_size_from_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48069 Crash type: Heap-buffer-overflow READ 1 Crash state: frsizefromstr frvalueboxfromsubstr frvalueboxfromstr...

OSV-2022-487 Heap-use-after-free in duckdb::Planner::CreatePlan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48062 Crash type: Heap-use-after-free READ 1 Crash state: duckdb::Planner::CreatePlan duckdb::Planner::CreatePlan duckdb::ClientContext::CreatePreparedStatement...

OSV-2022-484 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48043 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::ResolveConstant...

OSV-2022-483 Heap-buffer-overflow in ndpi_search_dns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48034 Crash type: Heap-buffer-overflow READ 4 Crash state: ndpisearchdns checkndpidetectionfunc ndpicheckflowfunc...

OSV-2022-481 UNKNOWN READ in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48020 Crash type: UNKNOWN READ Crash state: ndpistrdup processndpicollectedinfo ndpiworkflowprocesspacket...

OSV-2022-480 Heap-buffer-overflow in jxl::JxlBoxContentDecoder::Process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48029 Crash type: Heap-buffer-overflow READ Crash state: jxl::JxlBoxContentDecoder::Process HandleBoxes JxlDecoderProcessInput...