OSV-2024-1212 Heap-buffer-overflow in cram_encode_container

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372547397 Crash type: Heap-buffer-overflow READ 8 Crash state: cramencodecontainer cramflushcontainermt cramputbamseq...

PT-2024-40677 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, specifically a READ 8 crash type. The crash state involves functions such as xmlCopyPropInternal,...

OSV-2023-1320 Heap-use-after-free in memory_bstat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65108 Crash type: Heap-use-after-free READ 8 Crash state: memorybstat bfdgetsize bfdgetfilesize...

PT-2023-35634 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 8 crash. The crash involves several functions, including authentic emu update tokeninfo, sc pkcs15init...

OSV-2023-1267 Heap-buffer-overflow in dwg_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64829 Crash type: Heap-buffer-overflow READ 8 Crash state: dwgfreeobject dwgfree llvmfuzz.c...

OSV-2023-1099 Heap-buffer-overflow in dwg_geojson_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63761 Crash type: Heap-buffer-overflow READ 8 Crash state: dwggeojsonobject dwgwritegeojson llvmfuzz.c...

OSV-2023-990 Heap-use-after-free in __xmlRaiseError

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63092 Crash type: Heap-use-after-free READ 8 Crash state: xmlRaiseError xmlFatalErr xmlStringDecodeEntitiesInt...

OSV-2023-326 Heap-use-after-free in dynsec_clients__find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58108 Crash type: Heap-use-after-free READ 8 Crash state: dynsecclientsfind clientfreeitem dynsecclientscleanup...

OSV-2023-273 Heap-buffer-overflow in add_complete_typeobj

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57614 Crash type: Heap-buffer-overflow READ 8 Crash state: addcompletetypeobj ddsixttypeaddtypeobj ddsitypeaddtypeobj...

OSV-2023-205 Global-buffer-overflow in base_C_MessageSignFinal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57202 Crash type: Global-buffer-overflow READ 8 Crash state: baseCMessageSignFinal rpcCMessageSignFinal p11rpcserverhandle...

OSV-2023-197 Global-buffer-overflow in base_C_MessageEncryptInit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57120 Crash type: Global-buffer-overflow READ 8 Crash state: baseCMessageEncryptInit rpcCMessageEncryptInit p11rpcserverhandle...

OSV-2022-1119 Container-overflow in spvtools::opt::blockmergeutil::CanMergeWithSuccessor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52863 Crash type: Container-overflow READ 8 Crash state: spvtools::opt::blockmergeutil::CanMergeWithSuccessor std::1::function::funcspvtools::opt::BlockMergePass::Process spvtools::opt::IRContext::ProcessCallTreeFromRoots...

OSV-2022-981 Heap-buffer-overflow in SkPath::Iter::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51915 Crash type: Heap-buffer-overflow READ 8 Crash state: SkPath::Iter::next SkStroke::strokePath SkStrokeRec::applyToPath...

OSV-2022-843 Heap-buffer-overflow in _cmsMAT3per

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50956 Crash type: Heap-buffer-overflow READ 8 Crash state: cmsMAT3per OptimizeMatrixShaper cmsOptimizePipeline...

OSV-2022-605 Heap-buffer-overflow in mrb_bint_cmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49291 Crash type: Heap-buffer-overflow READ 8 Crash state: mrbbintcmp cmpnum numgt...

OSV-2022-436 Stack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstruct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47684 Crash type: Stack-buffer-overflow READ 8 Crash state: spvtools::opt::CompositeInsertToCompositeConstruct std::1::function::funcbool spvtools::opt::InstructionFolder::FoldInstructionInternal...

OSV-2022-398 Heap-buffer-overflow in json_common_entity_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47259 Crash type: Heap-buffer-overflow READ 8 Crash state: jsoncommonentitydata dwgjsonREPEAT dwgjsonobject...

OSV-2022-363 Heap-use-after-free in dwg_free_TABLEGEOMETRY_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46847 Crash type: Heap-use-after-free READ 8 Crash state: dwgfreeTABLEGEOMETRYprivate dwgfreeTABLEGEOMETRY dwgfreevariablenoclass...

OSV-2022-129 Heap-buffer-overflow in dwg_free_HATCH_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44481 Crash type: Heap-buffer-overflow READ 8 Crash state: dwgfreeHATCHprivate dwgfreeHATCH dwgfreeobject...

OSV-2021-1685 Heap-buffer-overflow in pdfi_dereference

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42327 Crash type: Heap-buffer-overflow READ 8 Crash state: pdfidereference pdfiderefloopdetect pdfidictget...