OSV-2022-1223 Heap-use-after-free in mbedtls_pkcs7_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53798 Crash type: Heap-use-after-free READ 8 Crash state: mbedtlspkcs7free mbedtlspkcs7parseder fuzzpkcs7.c...

OSV-2022-1217 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53767 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...

OSV-2022-1214 UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53758 Crash type: UNKNOWN READ Crash state: chunkfreeobject gxfinalDeviceN gscspacefinal...

OSV-2022-1211 Heap-buffer-overflow in bit_calc_CRC

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53750 Crash type: Heap-buffer-overflow READ 1 Crash state: bitcalcCRC decodepreR13 dwgdecode...

OSV-2022-1209 Heap-buffer-overflow in OT::hb_ot_apply_context_t::skipping_iterator_t::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53714 Crash type: Heap-buffer-overflow READ 4 Crash state: OT::hbotapplycontextt::skippingiteratort::next OT::Layout::GSUBimpl::Ligature::apply bool OT::hbacceleratesubtablescontextt::applytoOT::Layout::GSUBimpl::Liga...

OSV-2022-1208 Stack-buffer-overflow in cmap_put_ranges

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53711 Crash type: Stack-buffer-overflow READ 1 Crash state: cmapputranges psfwritecmap pdfwritecmap...

OSV-2022-1207 Security exception in java.desktop/java.awt.image.DataBufferInt.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53708 Crash type: Security exception Crash state: java.desktop/java.awt.image.DataBufferInt. java.desktop/java.awt.image.Raster.createPackedRaster org.apache.commons.imaging.formats.jpeg.decoder.JpegDecoder.visitSOS...

OSV-2022-1198 Heap-buffer-overflow in dwg_json_LTYPE

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53617 Crash type: Heap-buffer-overflow READ 8 Crash state: dwgjsonLTYPE jsonobjectswrite dwgwritejson...

OSV-2022-1196 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53627 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.lang.Module.canRead java.base/sun.invoke.util.VerifyAccess.isModuleAccessible...

OSV-2022-1195 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53626 Crash type: Memcpy-param-overlap Crash state: repeat repeat pere...

OSV-2022-1194 Heap-buffer-overflow in sputs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53619 Crash type: Heap-buffer-overflow READ Crash state: sputs gxserializeIndexed pdfcolorspacenamed...

CVE-2022-39397

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

Code injection

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

OSV-2022-1193 Heap-buffer-overflow in archive_read_has_encrypted_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53594 Crash type: Heap-buffer-overflow READ 8 Crash state: archivereadhasencryptedentries libarchivefuzzer.cc...

CVE-2022-39397

CVE-2022-39397 affects the Rust crate aliyun-oss-client (Alibaba Cloud OSS). The vulnerability causes unintentional disclosure of incoming secret data. It has been patched in version 0.8.1. If using this crate, upgrade to 0.8.1 or newer to mitigate the issue. The available connected documents con...

CVE-2022-39397 Exposure of sensitive information in aliyun-oss-client

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

CVE-2022-39397 Exposure of sensitive information in aliyun-oss-client

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

CVE-2022-39397 Exposure of sensitive information in aliyun-oss-client

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

`aliyun-oss-client` secret exposure

The aliyun-oss-client unintentionally divulges the authentication secret. This bug was fixed in this commit by limiting the concerned traits to be pub only within the crate...

OSV-2022-1181 Heap-use-after-free in template_execute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53469 Crash type: Heap-use-after-free READ 1 Crash state: templateexecute msgpackunpacknext cbstdoutflush...