OSV-2021-822 Heap-buffer-overflow in AK::Formatter<char const*, void>::format

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34863 Crash type: Heap-buffer-overflow READ 3 Crash state: AK::Formatter::format void AK::formatvalue AK::vformatimpl...

OSV-2021-821 Stack-buffer-overflow in jsoncons::bson::decimal128_to_chars

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34816 Crash type: Stack-buffer-overflow WRITE 6 Crash state: jsoncons::bson::decimal128tochars jsoncons::bson::basicbsonparserjsoncons::binarystreamsource, std::1::allo...

OSV-2021-814 UNKNOWN WRITE in dwg_free_BLOCK_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34766 Crash type: UNKNOWN WRITE Crash state: dwgfreeBLOCKprivate dwgfreeBLOCK dwgfreeobject...

OSV-2021-813 Use-of-uninitialized-value in StandardSecurityHandler::StandardSecurityHandler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34778 Crash type: Use-of-uninitialized-value Crash state: StandardSecurityHandler::StandardSecurityHandler SecurityHandler::make PDFDoc::checkEncryption...

OSV-2021-812 Uncaught exception in com.esotericsoftware.kryo.serializers.FieldSerializer.read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34733 Crash type: Uncaught exception Crash state: com.esotericsoftware.kryo.serializers.FieldSerializer.read com.esotericsoftware.kryo.Kryo.readObject DeserializeStringFuzzer.fuzzerTestOneInput...

OSV-2021-810 Global-buffer-overflow in SubstitutePhonemes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34747 Crash type: Global-buffer-overflow READ 2 Crash state: SubstitutePhonemes MakePhonemeList TranslateClause...

OSV-2021-808 Global-buffer-overflow in DoEmbedded2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34718 Crash type: Global-buffer-overflow READ 4 Crash state: DoEmbedded2 CalcLengths SpeakNextClause...

OSV-2021-807 Stack-buffer-overflow in DecodeSingleResponse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34713 Crash type: Stack-buffer-overflow WRITE Crash state: DecodeSingleResponse DecodeResponseData DecodeBasicOcspResponse...

OSV-2021-804 Heap-use-after-free in AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator->

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34688 Crash type: Heap-use-after-free READ 8 Crash state: AK::NonnullOwnPtr::operator- JS::IndexedProperties::arraylikesize JS::IndexedProperties::append...

OSV-2021-803 Heap-buffer-overflow in sampled_data_finish

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34675 Crash type: Heap-buffer-overflow WRITE 16 Crash state: sampleddatafinish sampleddatacontinue interp...

OSV-2021-801 UNKNOWN READ in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34665 Crash type: UNKNOWN READ Crash state: std::1::tree, std std::1::mapJson::Value::CZString, Json::Value, std::1::lessJson::Value::CZ Json::Value::begin...

OSV-2021-799 UNKNOWN READ in mrb_ary_shift_m

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34691 Crash type: UNKNOWN READ Crash state: mrbaryshiftm mrbvmexec mrbvmrun...

OSV-2021-794 Heap-buffer-overflow in mrb_format_float

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34652 Crash type: Heap-buffer-overflow WRITE 1 Crash state: mrbformatfloat fmtfloat mrbstrformat...

OSV-2021-793 Heap-use-after-free in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34584 Crash type: Heap-use-after-free WRITE 8 Crash state: AK::RefPtr ::RefPtr AK::String::String JS::abstractrelation...

OSV-2021-791 UNKNOWN READ in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34531 Crash type: UNKNOWN READ Crash state: std::1::tree, std std::1::mapJson::Value::CZString, Json::Value, std::1::lessJson::Value::CZ Json::Value::begin...

OSV-2021-789 UNKNOWN READ in [heap]

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34575 Crash type: UNKNOWN READ Crash state: heap...

OSV-2021-781 UNKNOWN READ in Json::decodePrefixedString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34484 Crash type: UNKNOWN READ Crash state: Json::decodePrefixedString Json::Value::asString perfetto::traceprocessor::json::AddJsonValueToArgs...

Apache Tapestry 5.4.0 < 5.6.3, 5.7.0 < 5.7.1 RCE Vulnerability - Active Check

Apache Tapestry is prone to a remote code execution RCE vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

OSV-2021-779 Heap-buffer-overflow in _blosc_getitem

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34458 Crash type: Heap-buffer-overflow READ 8 Crash state: bloscgetitem blosc2getitemctx blosc2getitem...

OSV-2021-777 Heap-use-after-free in xmlAddNextSibling

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34461 Crash type: Heap-use-after-free READ 4 Crash state: xmlAddNextSibling xmlXIncludeCopyRange xmlXIncludeCopyXPointer...