OSV-2022-55 Heap-buffer-overflow in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43687 Crash type: Heap-buffer-overflow READ 1 Crash state: ndlz4decompress ndlzdecompress bloscd...

OSV-2021-1803 UNKNOWN READ in chunk_obj_alloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43680 Crash type: UNKNOWN READ Crash state: chunkobjalloc chunkallocbytes cmapendfbrangefunc...

OSV-2022-51 Negative-size-param in ndlz4_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43671 Crash type: Negative-size-param Crash state: ndlz4decompress ndlzdecompress bloscd...

OSV-2022-48 Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43664 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processTLSBlock ndpisearchtlsudp...

OSV-2021-1802 UNKNOWN READ in pdfi_count_cff_index

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43599 Crash type: UNKNOWN READ Crash state: pdficountcffindex pdfireadcfffont pdfiloadfont...

OSV-2022-42 Heap-buffer-overflow in md_decode_utf8__

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43589 Crash type: Heap-buffer-overflow READ 1 Crash state: mddecodeutf8 mdlinklabelhash mdislinkreference...

OSV-2022-41 Segv on unknown address in zero

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43538 Crash type: Segv on unknown address Crash state: zero zendexecute fuzzerdorequestfrombuffer...

OSV-2022-40 UNKNOWN READ in md_build_attribute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43587 Crash type: UNKNOWN READ Crash state: mdbuildattribute mdenterleavespana mdprocessnormalblockcontents...

OSV-2022-39 Stack-buffer-overflow in BZ2_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43564 Crash type: Stack-buffer-overflow READ 1 Crash state: BZ2decompress BZ2bzDecompress ftbzip2filefilloutput...

OSV-2022-37 Heap-buffer-overflow in stringProcess

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43535 Crash type: Heap-buffer-overflow READ 1 Crash state: stringProcess tVariantCreateExt tVariantCreate...

OSV-2022-36 Heap-buffer-overflow in void absl::BytesToHexStringInternal<std::__1::basic_string<char, std::__1::char_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43553 Crash type: Heap-buffer-overflow READ 1 Crash state: void absl::BytesToHexStringInternalstd::1::basicstringchar, std::1::char absl::BytesToHexString...

OSV-2022-34 Heap-buffer-overflow in LZ4_decompress_safe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43513 Crash type: Heap-buffer-overflow READ 16 Crash state: LZ4decompresssafe bloscd dojob...

OSV-2022-33 Heap-buffer-overflow in ndlz8_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43519 Crash type: Heap-buffer-overflow READ 8 Crash state: ndlz8decompress bloscd dojob...

OSV-2022-32 Heap-buffer-overflow in _estrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43484 Crash type: Heap-buffer-overflow READ 11 Crash state: estrdup exifprocessusercomment exifprocessIFDTAGimpl...

OSV-2022-31 Heap-buffer-overflow in md_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43473 Crash type: Heap-buffer-overflow READ 1 Crash state: mdparse mdhtml fuzz-mdhtml.c...

OSV-2022-24 Null-dereference READ in session_startup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43419 Crash type: Null-dereference READ Crash state: sessionstartup libssh2sessionhandshake ssh2clientfuzzer.cc...

OSV-2022-16 UNKNOWN READ in MqttProps_Free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43370 Crash type: UNKNOWN READ Crash state: MqttPropsFree MqttClientDecodePacket MqttClientWaitType...

OSV-2022-15 Global-buffer-overflow in ZSTD_compressBlock_opt0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43365 Crash type: Global-buffer-overflow READ 1 Crash state: ZSTDcompressBlockopt0 ZSTDcompressBlockbtopt ZSTDbuildSeqStore...

A potential Denial of Service issue in protobuf-java

Summary A potential Denial of Service issue in protobuf-java was discovered in the parsing procedure for binary data. Affected versions: All versions of Java Protobufs including Kotlin and JRuby prior to the versions listed below. Protobuf "javalite" users typically Android are not affected...

OSV-2022-13 Heap-use-after-free in read_data_compressed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43324 Crash type: Heap-use-after-free READ 4 Crash state: readdatacompressed archivereadformatrarreaddata archivereaddatablock...