4483 matches found
OSV-2022-1102 Security exception in com.github.javaparser.CommentsInserter.insertComments
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52783 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...
OSV-2022-908 Heap-buffer-overflow in element_end
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51480 Crash type: Heap-buffer-overflow READ 4 Crash state: elementend emitendelement gmarkupparsecontextparse...
OSV-2022-782 Security exception in java.base/java.lang.StringBuffer.append
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50600 Crash type: Security exception Crash state: java.base/java.lang.StringBuffer.append org.apache.commons.jxpath.ri.compiler.CoreFunction.toString java.base/java.lang.String.valueOf...
OSV-2022-759 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50428 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/sun.nio.cs.CESU8.updatePositions java.base/sun.nio.cs.CESU8$Encoder.encodeArrayLoop...
OSV-2022-725 Heap-buffer-overflow in jxl::N_EMU128::WriteToU8Stage::ProcessRow
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295 Crash type: Heap-buffer-overflow WRITE 1 Crash state: jxl::NEMU128::WriteToU8Stage::ProcessRow jxl::LowMemoryRenderPipeline::RenderRect jxl::LowMemoryRenderPipeline::ProcessBuffers...
OSV-2022-696 Use-of-uninitialized-value in mix_add_scale_stride
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49921 Crash type: Use-of-uninitialized-value Crash state: mixaddscalestride crasmixaddscalestride crasaudioareacopy...
OSV-2022-652 Use-of-uninitialized-value in udiv
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49542 Crash type: Use-of-uninitialized-value Crash state: udiv mrbbintmod intmod...
OSV-2022-588 Heap-use-after-free in wasmtime_runtime::externref::gc::hcbc8e23ae41614fa
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49171 Crash type: Heap-use-after-free WRITE 8 Crash state: wasmtimeruntime::externref::gc::hcbc8e23ae41614fa wasmtimefuzzing::oracles::tableops::$u7b$$u7b$closure$u7d$$u7d$::hd207e5ffb69...
OSV-2022-514 Heap-use-after-free in AK::HashTable<AK::StringView, AK::Traits<AK::StringView>, false>::try_lookup_for
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48405 Crash type: Heap-use-after-free READ 2 Crash state: AK::HashTable, false::trylookupfor JS::Parser::isprivateidentifiervalid JS::Parser::parseprimaryexpression...
OSV-2022-349 Heap-buffer-overflow in JS_CallInternal
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46701 Crash type: Heap-buffer-overflow READ 1 Crash state: JSCallInternal JSEvalFunctionInternal JSEvalInternal...
OSV-2022-343 Uncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValue
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46696 Crash type: Uncaught exception Crash state: com.alibaba.fastjson.JSONPath.getPropertyValue java.base/jdk.internal.math.FDBigInteger.multByPow52 java.base/jdk.internal.math.FloatingDecimal$ASCIIToBinaryBuffer.floatValue...
OSV-2022-309 UNKNOWN READ in decompress_smooth_data
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46349 Crash type: UNKNOWN READ Crash state: decompresssmoothdata processdatasimplemain jpegreadscanlines...
OSV-2022-281 Heap-use-after-free in jsmn_parse
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45984 Crash type: Heap-use-after-free WRITE 4 Crash state: jsmnparse flbjsontokenise flbpackjsonstate...
OSV-2022-279 Heap-double-free in flb_pack_state_reset
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45978 Crash type: Heap-double-free Crash state: flbpackstatereset inlibcollect flbinputcollectorfd...
OSV-2022-254 Heap-use-after-free in jsmn_parse
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45651 Crash type: Heap-use-after-free WRITE 4 Crash state: jsmnparse flbjsontokenise flbpackjsonstate...
OSV-2022-191 Heap-buffer-overflow in ndpi_handle_ipv6_extension_headers
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44942 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpihandleipv6extensionheaders ndpiworkflowprocesspacket fuzzndpireader.c...
OSV-2022-188 Incorrect-function-pointer-type in cv::split
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44937 Crash type: Incorrect-function-pointer-type Crash state: cv::split cv::split TestSplitAndMerge...
OSV-2022-150 Heap-buffer-overflow in coap_split_uri_sub
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44611 Crash type: Heap-buffer-overflow READ 1 Crash state: coapspliturisub coapgeturipath...
OSV-2021-1804 Heap-buffer-overflow in ndpi_workflow_process_packet
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43921 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c...
OSV-2022-77 Heap-buffer-overflow in hufDecode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43916 Crash type: Heap-buffer-overflow READ 1 Crash state: hufDecode internalhufdecompress internalexrundopiz...
OSV-2022-11 Heap-buffer-overflow in dhcp_reply
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43300 Crash type: Heap-buffer-overflow WRITE Crash state: dhcpreply dhcppacket FuzzDhcp...
OSV-2021-1759 Heap-use-after-free in zend_hash_reverse_apply
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42894 Crash type: Heap-use-after-free READ 4 Crash state: zendhashreverseapply shutdowndestructors zendcalldestructors...
OSV-2021-1758 Heap-buffer-overflow in seturl
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42892 Crash type: Heap-buffer-overflow READ Crash state: seturl parseurl curlurlset...
OSV-2021-1730 Heap-buffer-overflow in seturl
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42708 Crash type: Heap-buffer-overflow READ Crash state: seturl parseurl curlurlset...
OSV-2021-1633 Heap-buffer-overflow in mk_string_copy_substr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41448 Crash type: Heap-buffer-overflow READ Crash state: mkstringcopysubstr mkrconfread mkrconfopen...
OSV-2021-1627 Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41416 Crash type: Heap-buffer-overflow WRITE 2 Crash state: Imf31::LineCompositeTask::execute IlmThread31::NullThreadPoolProvider::addTask IlmThread31::ThreadPool::addGlobalTask...
OSV-2021-1605 Heap-use-after-free in perfetto::trace_processor::SliceTracker::GetStackHash
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41226 Crash type: Heap-use-after-free READ 8 Crash state: perfetto::traceprocessor::SliceTracker::GetStackHash perfetto::traceprocessor::SliceTracker::StartSlice perfetto::traceprocessor::SliceTracker::Scoped...
OSV-2021-1597 UNKNOWN READ in void jxl::CopyImageTo<int>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41217 Crash type: UNKNOWN READ Crash state: void jxl::CopyImageTo jxl::ModularFrameDecoder::DecodeGroup jxl::FrameDecoder::ProcessACGroup...
OSV-2021-1554 UNKNOWN READ in helper_uc_tracecode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40797 Crash type: UNKNOWN READ Crash state: helpeructracecode...
OSV-2021-1451 Heap-buffer-overflow in Imf_3_1::memstream_read
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39936 Crash type: Heap-buffer-overflow WRITE 1 Crash state: Imf31::memstreamread dispatchread readuncompresseddirect...
OSV-2021-1410 Heap-buffer-overflow in generic_unpack
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39571 Crash type: Heap-buffer-overflow WRITE 4 Crash state: genericunpack exrdecodingrun Imf31::checkCoreFile...
OSV-2021-1409 Heap-buffer-overflow in unpack_16bit_4chan_planar
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39538 Crash type: Heap-buffer-overflow WRITE 2 Crash state: unpack16bit4chanplanar exrdecodingrun Imf31::checkCoreFile...
OSV-2021-1395 Heap-buffer-overflow in Op_YCbCr_to_RGB<unsigned char>::convert_colorspace
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39373 Crash type: Heap-buffer-overflow READ Crash state: OpYCbCrtoRGB::convertcolorspace heif::ColorConversionPipeline::convertimage heif::convertcolorspace...
OSV-2021-1387 Container-overflow in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39335 Crash type: Container-overflow READ 1 Crash state: std::1::function::func, std:: std::1::function::funcLLVMFuzzerTestOneInput::$1, std::1::allocatorLL...
OSV-2021-1378 Container-overflow in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39263 Crash type: Container-overflow READ 1 Crash state: std::1::function::funcLLVMFuzzerTestOneInput::$0, std::1::allocatorLL std::1::function::funcLLVMFuzzerTestOneInput::$1, std::1::allocatorLL function.h...
OSV-2021-1338 Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38982 Crash type: Uncaught exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$18.process org.jsoup.parser.HtmlTreeBuilder.process...
OSV-2021-1275 Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char> >& std::__1::__put_cha
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38785 Crash type: Use-of-uninitialized-value Crash state: std::1::basicostream & std::1::putcha S2LogMessage::S2LogMessage S2ContainsVertexQuery::ContainsSign...
OSV-2021-1258 Bad-cast to SplashPattern from invalid vptr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38669 Crash type: Bad-cast Crash state: Bad-cast to SplashPattern from invalid vptr SplashState::SplashState Splash::restoreState...
OSV-2021-1238 UNKNOWN READ in cdf_read_property_info
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38393 Crash type: UNKNOWN READ Crash state: cdfreadpropertyinfo cdfunpacksummaryinfo cdfchecksummaryinfo...
OSV-2021-1160 Heap-buffer-overflow in pe_valid_dll_name
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37443 Crash type: Heap-buffer-overflow READ 1 Crash state: pevaliddllname peparsedelayimportdllname peparsedelayedimports...
OSV-2021-1102 Heap-use-after-free in usbredirparser_serialize
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36861 Crash type: Heap-use-after-free WRITE 4 Crash state: usbredirparserserialize tryserialize usbredirparserfuzz.cc...
OSV-2021-1083 Heap-buffer-overflow in flb_hash_get_by_id
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36718 Crash type: Heap-buffer-overflow READ Crash state: flbhashgetbyid utilsfuzzer.c...
OSV-2021-1003 Dynamic-stack-buffer-overflow in mdb_numeric_to_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36187 Crash type: Dynamic-stack-buffer-overflow WRITE 16 Crash state: mdbnumerictostring mdbxferbounddata mdbattemptbind...
OSV-2021-975 Dynamic-stack-buffer-overflow in CryptDigestUpdateInt
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36074 Crash type: Dynamic-stack-buffer-overflow WRITE 8 Crash state: CryptDigestUpdateInt ComputeCpHash CheckCommandAudit...
OSV-2021-916 Use-of-uninitialized-value in jxl::ModularFrameDecoder::DecodeAcMetadata
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35778 Crash type: Use-of-uninitialized-value Crash state: jxl::ModularFrameDecoder::DecodeAcMetadata jxl::FrameDecoder::ProcessDCGroup jxl::ThreadPool::RunCallStatejxl::Status...
OSV-2021-822 Heap-buffer-overflow in AK::Formatter<char const*, void>::format
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34863 Crash type: Heap-buffer-overflow READ 3 Crash state: AK::Formatter::format void AK::formatvalue AK::vformatimpl...
OSV-2021-765 Heap-use-after-free in LookupDict2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34298 Crash type: Heap-use-after-free READ 4 Crash state: LookupDict2 LookupDictList Lookup...
OSV-2021-702 Heap-double-free in flb_free
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33750 Crash type: Heap-double-free Crash state: flbfree flbparserjsondo flbparserdo...
OSV-2021-688 Segv on unknown address in std::__Fuzzer::basic_string<char, std::__Fuzzer::char_traits<char>, std::__Fuzze
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33682 Crash type: Segv on unknown address Crash state: std::Fuzzer::basicstring, std::Fuzze std::Fuzzer::moneypunctbyname::init...