OSV-2022-317 Heap-use-after-free in save_marker

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46421 Crash type: Heap-use-after-free WRITE 1 Crash state: savemarker readmarkers consumemarkers...

OSV-2022-315 UNKNOWN READ in start_output_pass

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46396 Crash type: UNKNOWN READ Crash state: startoutputpass prepareforoutputpass outputpasssetup...

OSV-2022-314 UNKNOWN READ in [heap]

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46395 Crash type: UNKNOWN READ Crash state: heap...

OSV-2022-313 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46432 Crash type: Heap-buffer-overflow READ 2 Crash state: genericunpack exrdecodingrun Imf31::checkCoreFile...

OSV-2022-311 Heap-use-after-free in decode_mcu

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46354 Crash type: Heap-use-after-free READ 4 Crash state: decodemcu decompressonepass processdatasimplemain...

OSV-2022-310 Heap-use-after-free in jpeg_fill_bit_buffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46343 Crash type: Heap-use-after-free WRITE 4 Crash state: jpegfillbitbuffer jpeghuffdecode decodemcu...

OSV-2022-309 UNKNOWN READ in decompress_smooth_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46349 Crash type: UNKNOWN READ Crash state: decompresssmoothdata processdatasimplemain jpegreadscanlines...

OSV-2022-308 Null-dereference READ in ubsan_GetStackTrace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46341 Crash type: Null-dereference READ Crash state: ubsanGetStackTrace...

OSV-2022-303 Heap-use-after-free in start_pass_phuff_decoder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46338 Crash type: Heap-use-after-free WRITE 4 Crash state: startpassphuffdecoder startinputpass jinitmasterdecompress...

OSV-2022-302 Heap-use-after-free in read_markers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46334 Crash type: Heap-use-after-free READ 4 Crash state: readmarkers consumemarkers jpegconsumeinput...

CVE-2022-22965: UAA affected by Spring Framework RCE via Data Binding on JDK 9+ | Cloud Foundry

Severity Critical Vendor Cloud Foundry Foundation Description In Cloud Foundry UAA, a remote code execution vulnerability is present due to an issue in the Spring Framework identified by CVE-2022-22965. A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code...

OSV-2022-296 Negative-size-param in jxl::N_SSE4::BlendingStage::ProcessPaddingRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46243 Crash type: Negative-size-param Crash state: jxl::NSSE4::BlendingStage::ProcessPaddingRow jxl::LowMemoryRenderPipeline::RenderPadding jxl::LowMemoryRenderPipeline::ProcessBuffers...

OSV-2022-295 Use-of-uninitialized-value in unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46241 Crash type: Use-of-uninitialized-value Crash state: unsigned long grk::NSSE4::vscheduler std::1::function::funcunsigned long grk::NSSE4::vschedulergrk::NSSE4:: tf::Executor::invoke...

OSS API Firewall Unveils new Feature: Blacklist for Compromised API Tokens and Cookies

Discovering and securing any API is one of the most difficult challenges for developers. The API security landscape is constantly evolving, with new threats and vulnerabilities emerging at a rapid pace. Since commercial API security solutions could be really expensive for organizations, its never...

OSV-2022-289 Heap-buffer-overflow in add_compile_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46086 Crash type: Heap-buffer-overflow READ 4 Crash state: addcompilestring compiletree compiletree...

OSV-2022-284 Heap-double-free in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46019 Crash type: Heap-double-free Crash state: readconfig readglob readconfig...

OSV-2022-282 Heap-buffer-overflow in cosm_new_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46002 Crash type: Heap-buffer-overflow WRITE 1 Crash state: cosmnewfile epassNUMBERpkcs15generatekey scpkcs15initgeneratekey...

OSV-2022-281 Heap-use-after-free in jsmn_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45984 Crash type: Heap-use-after-free WRITE 4 Crash state: jsmnparse flbjsontokenise flbpackjsonstate...

OSV-2022-280 Heap-buffer-overflow in Exiv2::getULong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45993 Crash type: Heap-buffer-overflow READ 1 Crash state: Exiv2::getULong Exiv2::Internal::isValidBoxFileType Exiv2::Jp2Image::readMetadata...

OSV-2022-279 Heap-double-free in flb_pack_state_reset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45978 Crash type: Heap-double-free Crash state: flbpackstatereset inlibcollect flbinputcollectorfd...