OSV-2024-80 Stack-buffer-overflow in line_join_points

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66455 Crash type: Stack-buffer-overflow WRITE 4 Crash state: linejoinpoints strokeaddcompat gxstrokepathonly...

OSV-2024-79 Heap-double-free in supported_features

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66398 Crash type: Heap-double-free Crash state: supportedfeatures handleatcommand handleatcommandfortest...

OSV-2024-77 Heap-use-after-free in xmlRemoveID

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66446 Crash type: Heap-use-after-free READ 8 Crash state: xmlRemoveID xmlFreeProp xmlFreeNodeList...

OSV-2024-74 Heap-buffer-overflow in hts_log

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66369 Crash type: Heap-buffer-overflow READ Crash state: htslog processoneread cramencodecontainer...

OSV-2024-73 Heap-buffer-overflow in pdf_finalize_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66093 Crash type: Heap-buffer-overflow READ 1 Crash state: pdffinalizestring clipdf cliscanpdf...

markdown-math-editor (>=1.1.0 <=1.1.3), mse-md2html (>=1.0.0 <=1.0.1) +1 more potentially affected by unknown CVE via remark-images-download (>=0.0.8 <=3.0.5)

remark-images-download NPM version =0.0.8, =1.1.0, =1.0.0, =2.1.8, =12.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-MF74-QQ7W-6J7V...

OSV-2024-72 UNKNOWN READ in LLVMFuzzerRunDriver

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66204 Crash type: UNKNOWN READ Crash state: LLVMFuzzerRunDriver...

OSV-2024-68 Heap-buffer-overflow in gsfdmx_probe_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66169 Crash type: Heap-buffer-overflow READ 3 Crash state: gsfdmxprobedata gffilterpidrawnew fileinprocess...

OSV-2024-66 Heap-buffer-overflow in mrb_memsearch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66209 Crash type: Heap-buffer-overflow READ 8 Crash state: mrbmemsearch strconvertrange mrbstraref...

OSV-2024-65 Heap-buffer-overflow in mrb_memsearch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66208 Crash type: Heap-buffer-overflow READ 8 Crash state: mrbmemsearch mrbstrsplitm mrbvmexec...

FreeBSD : OpenSSL -- Multiple vulnerabilities (10dee731-c069-11ee-9190-84a93843eb75)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 10dee731-c069-11ee-9190-84a93843eb75 advisory. - Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash...

OSV-2024-42 Heap-double-free in dwg_free_common_entity_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66111 Crash type: Heap-double-free Crash state: dwgfreecommonentitydata dwgfreePLANESURFACE dwgfreevariablenoclass...

OSV-2024-39 Heap-buffer-overflow in simdutf::westmere::implementation::convert_utf8_to_utf32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66063 Crash type: Heap-buffer-overflow WRITE 16 Crash state: simdutf::westmere::implementation::convertutf8toutf32 roundtrip.cc...

OSV-2024-38 Heap-buffer-overflow in json_HEADER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66046 Crash type: Heap-buffer-overflow WRITE 2 Crash state: jsonHEADER dwgreadjson llvmfuzz.c...

PT-2024-40745 · Git +1 · Simdutf

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap buffer overflow issue was identified, specifically a WRITE 16 error, which occurred in the simdutf::westmere::implementation::convert utf8 to utf3...

OSV-2024-36 Heap-use-after-free in LLVMFuzzerRunDriver

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65647 Crash type: Heap-use-after-free READ 4 Crash state: LLVMFuzzerRunDriver absl::ltsNUMBER::randominternal::InitDiscreteDistribution absl::ltsNUMBER::discretedistribution::paramtype::init...

OSV-2024-30 Heap-buffer-overflow in mrb_memsearch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66000 Crash type: Heap-buffer-overflow READ 3 Crash state: mrbmemsearch mrbstrbyteindexm mrbvmexec...

OSV-2024-28 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65930 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.util.ArrayList.grow java.base/java.util.ArrayList.grow...

OSV-2024-24 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65740 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf com.fasterxml.jackson.core.util.TextBuffer.expandCurrentSegment com.fasterxml.jackson.dataformat.cbor.CBORParser.finishShortText...

OSV-2024-22 Heap-use-after-free in ucl_hash_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65868 Crash type: Heap-use-after-free READ 8 Crash state: uclhashfunc khresizeuclhashnode khputuclhashnode...