OSV-2022-296 Negative-size-param in jxl::N_SSE4::BlendingStage::ProcessPaddingRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46243 Crash type: Negative-size-param Crash state: jxl::NSSE4::BlendingStage::ProcessPaddingRow jxl::LowMemoryRenderPipeline::RenderPadding jxl::LowMemoryRenderPipeline::ProcessBuffers...

OSV-2022-295 Use-of-uninitialized-value in unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46241 Crash type: Use-of-uninitialized-value Crash state: unsigned long grk::NSSE4::vscheduler std::1::function::funcunsigned long grk::NSSE4::vschedulergrk::NSSE4:: tf::Executor::invoke...

OSS API Firewall Unveils new Feature: Blacklist for Compromised API Tokens and Cookies

Discovering and securing any API is one of the most difficult challenges for developers. The API security landscape is constantly evolving, with new threats and vulnerabilities emerging at a rapid pace. Since commercial API security solutions could be really expensive for organizations, its never...

OSV-2022-289 Heap-buffer-overflow in add_compile_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46086 Crash type: Heap-buffer-overflow READ 4 Crash state: addcompilestring compiletree compiletree...

OSV-2022-284 Heap-double-free in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46019 Crash type: Heap-double-free Crash state: readconfig readglob readconfig...

OSV-2022-282 Heap-buffer-overflow in cosm_new_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46002 Crash type: Heap-buffer-overflow WRITE 1 Crash state: cosmnewfile epassNUMBERpkcs15generatekey scpkcs15initgeneratekey...

OSV-2022-281 Heap-use-after-free in jsmn_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45984 Crash type: Heap-use-after-free WRITE 4 Crash state: jsmnparse flbjsontokenise flbpackjsonstate...

OSV-2022-280 Heap-buffer-overflow in Exiv2::getULong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45993 Crash type: Heap-buffer-overflow READ 1 Crash state: Exiv2::getULong Exiv2::Internal::isValidBoxFileType Exiv2::Jp2Image::readMetadata...

OSV-2022-279 Heap-double-free in flb_pack_state_reset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45978 Crash type: Heap-double-free Crash state: flbpackstatereset inlibcollect flbinputcollectorfd...

OSV-2022-278 UNKNOWN READ in s_RLE_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45992 Crash type: UNKNOWN READ Crash state: sRLEprocess cmdputbits clistcopymono...

OSV-2022-276 Segv on unknown address in sc_file_clear_acl_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45969 Crash type: Segv on unknown address Crash state: scfileclearaclentries scfilefree scprofilefree...

OSV-2022-271 UNKNOWN READ in pdf14_buf_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45892 Crash type: UNKNOWN READ Crash state: pdf14buffree rcpdf14maskbuffree pdf14endtransparencymask...

OSV-2022-268 Stack-use-after-return in template_sanity_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45880 Crash type: Stack-use-after-return READ 1 Crash state: templatesanitycheck processtmpl processblock...

OSV-2022-265 Heap-buffer-overflow in jxl::WriteToPixelCallbackStage::ProcessRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45833 Crash type: Heap-buffer-overflow READ 4 Crash state: jxl::WriteToPixelCallbackStage::ProcessRow jxl::LowMemoryRenderPipeline::RenderRect jxl::LowMemoryRenderPipeline::ProcessBuffers...

OSV-2022-264 Heap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessRow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45822 Crash type: Heap-buffer-overflow READ 4 Crash state: jxl::NAVX2::BlendingStage::ProcessRow jxl::LowMemoryRenderPipeline::RenderRect jxl::LowMemoryRenderPipeline::ProcessBuffers...

OSV-2022-262 Heap-double-free in flb_pack_state_reset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45810 Crash type: Heap-double-free Crash state: flbpackstatereset inlibcollect flbinputcollectorfd...

OSV-2022-260 Heap-double-free in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45687 Crash type: Heap-double-free Crash state: readconfig flbcffluentbitcreate flbcfcreatefromfile...

OSV-2022-259 Heap-double-free in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45671 Crash type: Heap-double-free Crash state: readconfig readglob readconfig...

OSV-2022-257 Segv on unknown address in flb_config_map_properties_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45670 Crash type: Segv on unknown address Crash state: flbconfigmappropertiescheck configmapfuzzer.c...

OSV-2022-255 Heap-double-free in flb_pack_state_reset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45667 Crash type: Heap-double-free Crash state: flbpackstatereset packjsonstatefuzzer.c flbpackstateinit...