6686 matches found
OSV-2022-348 Heap-buffer-overflow in doemit
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46692 Crash type: Heap-buffer-overflow WRITE 8 Crash state: doemit doinsert pere...
OSV-2022-347 Heap-buffer-overflow in cli_bcomp_freemeta
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46687 Crash type: Heap-buffer-overflow READ 8 Crash state: clibcompfreemeta clibcompaddpatt readdbparseldbsubsignature...
OSV-2022-346 Heap-buffer-overflow in cli_sigopts_handler
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46680 Crash type: Heap-buffer-overflow READ 1 Crash state: clisigoptshandler readdbparseldbsubsignature loadoneldb...
OSV-2022-345 Stack-buffer-overflow in sc_hsm_list_files
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46679 Crash type: Stack-buffer-overflow READ Crash state: schsmlistfiles sclistfiles fuzzcard.c...
OSV-2022-344 Heap-use-after-free in init_tdb
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46685 Crash type: Heap-use-after-free READ 4 Crash state: inittdb loadoneldb cliloadldb...
OSV-2022-343 Uncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValue
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46696 Crash type: Uncaught exception Crash state: com.alibaba.fastjson.JSONPath.getPropertyValue java.base/jdk.internal.math.FDBigInteger.multByPow52 java.base/jdk.internal.math.FloatingDecimal$ASCIIToBinaryBuffer.floatValue...
OSV-2022-341 Heap-buffer-overflow in krb_parse
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46670 Crash type: Heap-buffer-overflow READ 2 Crash state: krbparse ndpisearchkerberos checkndpidetectionfunc...
OSV-2022-340 Heap-buffer-overflow in cli_ac_addsig
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46646 Crash type: Heap-buffer-overflow READ 2 Crash state: cliacaddsig cliaddcontentmatchpattern readdbparseldbsubsignature...
OSV-2022-339 Heap-use-after-free in gc_trace
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46672 Crash type: Heap-use-after-free READ 2 Crash state: gctrace gsgcreclaim ireclaim...
OSV-2022-337 Heap-double-free in cli_extract_xlm_macros_and_images
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46586 Crash type: Heap-double-free Crash state: cliextractxlmmacrosandimages cliole2scantempdir climagicscan...
OSV-2022-331 Stack-buffer-overflow in void unwindstack::Symbols::BuildRemapTable<Elf64_Sym>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46546 Crash type: Stack-buffer-overflow READ Crash state: void unwindstack::Symbols::BuildRemapTable bool unwindstack::Symbols::GetName unwindstack::ElfInterfaceImpl::GetFunctionName...
OSV-2022-330 Stack-use-after-return in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46575 Crash type: Stack-use-after-return READ 1 Crash state: std::1::function::funcbool grk::WaveletReverse::decompresspartialtilei tf::Executor::invoke tf::Executor::consumetask...
OSV-2022-327 Stack-use-after-return in QSemaphore::release
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46525 The issue already existed before oss-fuzz could reproduce it. oss-fuzz found it after qdrawhelper routines were made multithreaded. There might be ways to trigger the issue before that. Crash type: Stack-use-after-return...
OSV-2022-325 Heap-buffer-overflow in ndpi_search_tinc
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46499 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchtinc checkndpidetectionfunc ndpicheckflowfunc...
OSV-2022-324 Heap-buffer-overflow in resize_packet
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46474 Crash type: Heap-buffer-overflow WRITE Crash state: resizepacket FuzzResizePacket fuzzrfc1035.c...
OSV-2022-323 Heap-buffer-overflow in ConvertRGB24ToY_SSE41
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46436 Crash type: Heap-buffer-overflow READ 1 Crash state: ConvertRGB24ToYSSE41 ImportYUVAFromRGBA Import...
OSV-2022-322 Heap-buffer-overflow in frame_get_metalayers
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46460 Crash type: Heap-buffer-overflow READ Crash state: framegetmetalayers frametoschunk blosc2schunkfrombuffer...
OSV-2022-321 Stack-use-after-scope in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<g
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46468 Crash type: Stack-use-after-scope WRITE 1 Crash state: std::1::function::funcbool grk::WaveletReverse::decompresspartialtileg tf::Executor::invoke tf::Executor::consumetask...