OSV-2022-415 UNKNOWN READ in pdfi_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47499 Crash type: UNKNOWN READ Crash state: pdfifreeobject pdficlearcontext pdfifreecontext...

OSV-2022-412 Bad-cast to const upb_tabent' (aka 'const struct _upb_tabent')insert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47464 Crash type: Bad-cast Crash state: Bad-cast to const upbtabent' aka 'const struct upbtabent'insert upbstrtableinsert createfielddef...

[SECURITY] [DLA 3010-1] ffmpeg security update

Debian LTS Advisory DLA-3010-1 [email protected] https://www.debian.org/lts/security/ Enrico Zini May 16, 2022 https://wiki.debian.org/LTS Package : ffmpeg Version : 7:3.2.18-0+deb9u1 The ffmpeg project released the new version 3.2.18 with fixes for various issues found by the OSS-Fuzz...

OSV-2022-410 Heap-buffer-overflow in Assimp::ASE::Parser::ParseLV1SoftSkinBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47392 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::ASE::Parser::ParseLV1SoftSkinBlock Assimp::ASE::Parser::Parse Assimp::ASEImporter::InternReadFile...

OSV-2022-409 Heap-buffer-overflow in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47391 Crash type: Heap-buffer-overflow READ 1 Crash state: std::1::treenodebase& std::1::treestd::1::valuetypestd: std::1::pairstd::1::treeiteratorstd::1::valuetypestd::1::basic...

CVE-2022-29328

D-Link DAP-1330OSS-firmware1.00b21 was discovered to contain a stack overflow via the function checkvalidupgrade...

Stack overflow

D-Link DAP-1330OSS-firmware1.00b21 was discovered to contain a stack overflow via the function checkvalidupgrade...

Design/Logic Flaw

D-Link DAP-1330OSS-firmware1.00b21 was discovered to contain a heap overflow via the devicename parameter in /goform/setDeviceSettings...

CVE-2022-29329

CVE-2022-29329 affects D-Link DAP-1330 OSS firmware 1.00b21. A heap overflow is triggered by the devicename parameter in /goform/setDeviceSettings. The issue is described across multiple sources (NVD/Red Hat/CVE listings) as a heap-based vulnerability in the device settings endpoint, with network...

CVE-2022-29328

CVE-2022-29328 concerns the D-Link DAP-1330 OSS firmware version 1.00b21. Multiple sources (NVD, CVE lists, Red Hat/CNNVD mirrors) describe a stack overflow in the function checkvalidupgrade that affects this device/firmware. The CVSS metrics indicate a network-accessible, low-uptime-exploit with...

CVE-2022-29329

D-Link DAP-1330OSS-firmware1.00b21 was discovered to contain a heap overflow via the devicename parameter in /goform/setDeviceSettings...

OSV-2022-406 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47339 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

A scanning tool for open-sourced software packages? Yes, please!

The Open Source Security Foundation OpenSSF, a collective of industry leaders aimed at improving the security of open-source software OSS, recently announced the release of a prototype tool that scans for malicious packages in open source repositories. This tool, conveniently called Package...

OSV-2022-403 Heap-use-after-free in dwg_add_handleref

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47319 Crash type: Heap-use-after-free READ 8 Crash state: dwgaddhandleref dwgaddSTYLE decodepreR13section...

OSV-2022-401 UNKNOWN READ in OT::gvar::subset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47281 Crash type: UNKNOWN READ Crash state: OT::gvar::subset bool trysubset hbsubsetplanexecuteorfail...

OSV-2022-400 Heap-double-free in dwg_free_XRECORD_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47300 Crash type: Heap-double-free Crash state: dwgfreeXRECORDprivate dwgfreeXRECORD dwgfreeobject...

OSV-2022-398 Heap-buffer-overflow in json_common_entity_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47259 Crash type: Heap-buffer-overflow READ 8 Crash state: jsoncommonentitydata dwgjsonREPEAT dwgjsonobject...

OSV-2022-396 Heap-buffer-overflow in ucl_object_free_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47206 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectfreeinternal uclparserfree uclstatemachine...

OSV-2022-395 Uncaught exception in com.alibaba.fastjson.JSONPath.deepScan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47192 Crash type: Uncaught exception Crash state: com.alibaba.fastjson.JSONPath.deepScan java.base/java.lang.Boolean.valueOf com.alibaba.fastjson.parser.ParserConfig$2.apply...

OSV-2022-394 Incorrect-function-pointer-type in cv::split

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47190 Crash type: Incorrect-function-pointer-type Crash state: cv::split cv::split TestSplitAndMerge...