4483 matches found
OSV-2024-1062 UNKNOWN WRITE in std::__1::recursive_mutex::lock
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538230 Crash type: UNKNOWN WRITE Crash state: std::1::recursivemutex::lock Catalog::getForm Page::getAnnots...
OSV-2024-1029 Stack-buffer-overflow in gf_hevc_parse_nalu_bs
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71146 Crash type: Stack-buffer-overflow WRITE 4 Crash state: gfhevcparsenalubs gfinspectdumpnaluinternal inspectprocess...
OSV-2024-999 Stack-buffer-overflow in filter_apply_chain
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68846 Crash type: Stack-buffer-overflow READ 4 Crash state: filterapplychain filterapplychain readin...
OSV-2024-947 Heap-buffer-overflow in pcpp::SomeIpSdEntry::SomeIpSdEntry
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68654 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::SomeIpSdEntry::SomeIpSdEntry pcpp::SomeIpSdLayer::getEntries readParsedPacket...
OSV-2024-801 UNKNOWN READ in PointerVector.h
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69391 Crash type: UNKNOWN READ Crash state: PointerVector.h...
OSV-2024-777 Global-buffer-overflow in vte_write_debug
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68562 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug dotrans tsmvteinput...
OSV-2024-714 Segv on unknown address in lwan_request_get_cookie
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69572 Crash type: Segv on unknown address Crash state: lwanrequestgetcookie fuzzparsehttprequest...
OSV-2024-661 Security exception in java.base/java.util.ArrayList.<init>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66137 Crash type: Security exception Crash state: java.base/java.util.ArrayList. org.apache.poi.xssf.eventusermodel.ReadOnlySharedStringsTable.startElement...
OSV-2024-422 Use-of-uninitialized-value in cdc_task
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68505 Crash type: Use-of-uninitialized-value Crash state: cdctask fuzz.cc std::1::basicstring, std::1::allocatorch...
OSV-2024-395 Use-of-uninitialized-value in pcapint_filter_with_aux_data
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66124 Crash type: Use-of-uninitialized-value Crash state: pcapintfilterwithauxdata pcapintfilter pcapofflinefilter...
OSV-2024-189 Negative-size-param in vcf_parse_format
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67431 Crash type: Negative-size-param Crash state: vcfparseformat vcfparse bcfread...
OSV-2023-1353 Security exception in org.apache.poi.ddf.EscherContainerRecord.fillFields
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65303 Crash type: Security exception Crash state: org.apache.poi.ddf.EscherContainerRecord.fillFields org.apache.poi.hslf.record.Record.findChildRecords org.apache.poi.hslf.record.DummyPositionSensitiveRecordWithChildren...
OSV-2023-1329 Stack-buffer-overflow in decNaNs
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65130 Crash type: Stack-buffer-overflow WRITE 2 Crash state: decNaNs decCompareOp decNumberCompare...
OSV-2023-1240 UNKNOWN READ in MqttProps_Free
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64570 Crash type: UNKNOWN READ Crash state: MqttPropsFree HandleProps MqttClientDecodePacket...
OSV-2023-1221 Security exception in jaz.Zer.reportFinding
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64488 Crash type: Security exception Crash state: jaz.Zer.reportFinding jaz.Zer.reportFindingIfEnabled jaz.Zer.readObject...
OSV-2023-1180 Heap-buffer-overflow in ih264d_sev
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64286 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dsev ih264dparsefgc ih264dparseseipayload...
OSV-2023-1173 Heap-buffer-overflow in fill_lines
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64218 Crash type: Heap-buffer-overflow READ 1 Crash state: filllines rbdumpbacktracewithlines rbvmbugreport...
OSV-2023-1169 Heap-buffer-overflow in epassNUMBER_pkcs15_generate_key
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64215 Crash type: Heap-buffer-overflow READ Crash state: epassNUMBERpkcs15generatekey scpkcs15initgeneratekey dogeneratekey...
OSV-2023-1166 Memcpy-param-overlap in repeat
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64176 Crash type: Memcpy-param-overlap Crash state: repeat pere pere...
OSV-2023-1164 Heap-buffer-overflow in WriteCLUT
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64166 Crash type: Heap-buffer-overflow READ 4 Crash state: WriteCLUT cmsGetPostScriptColorResource cmsGetPostScriptCRD...
OSV-2023-1136 Security exception in org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64051 Crash type: Security exception Crash state: org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.readRecordSID...
OSV-2023-1098 Segv on unknown address in ZEND_HANDLE_EXCEPTION_SPEC_HANDLER
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63749 Crash type: Segv on unknown address Crash state: ZENDHANDLEEXCEPTIONSPECHANDLER zero zendexecute...
OSV-2023-1093 Stack-buffer-overflow in ndpi_handle_rule
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63746 Crash type: Stack-buffer-overflow WRITE Crash state: ndpihandlerule ndpiloadprotocolsfilefd fuzzfilecfgprotocols.c...
OSV-2023-1068 Heap-buffer-overflow in iasecc_parse_size
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63587 Crash type: Heap-buffer-overflow READ 1 Crash state: iaseccparsesize iaseccparsegettlv iaseccparsedocp...
OSV-2023-1050 Heap-buffer-overflow in H5D__scatter_mem
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63495 Crash type: Heap-buffer-overflow WRITE Crash state: H5Dscattermem H5Dscatgathread H5Dcontigread...
OSV-2023-1008 Heap-use-after-free in gx_image_enum_begin
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63185 Crash type: Heap-use-after-free WRITE 8 Crash state: gximageenumbegin gxbeginimage1 gxdefaultbegintypedimage...
OSV-2023-970 Heap-use-after-free in gx_device_forward_finalize
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63013 Crash type: Heap-use-after-free READ 8 Crash state: gxdeviceforwardfinalize gxdevicefinalize allocrestorestepin...
OSV-2023-905 Segv on unknown address in icu_74::UnicodeString::copyFrom
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62651 Crash type: Segv on unknown address Crash state: icu74::UnicodeString::copyFrom icu74::UnicodeString::UnicodeString icu74::number::impl::SimpleModifier::SimpleModifier...
OSV-2023-819 Heap-buffer-overflow in ucl_object_dtor_unref_single
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62167 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...
OSV-2023-775 Security exception in com.github.javaparser.CommentsInserter.insertComments
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61895 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...
OSV-2023-764 Heap-buffer-overflow in pim_pim_packet
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61854 Crash type: Heap-buffer-overflow READ 2 Crash state: pimpimpacket pimmain.c...
OSV-2023-743 Out-of-memory in QueryParserFuzzer
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61742 Crash type: Out-of-memory Crash state: QueryParserFuzzer...
OSV-2023-717 Heap-buffer-overflow in bit_TV_to_utf8_codepage
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61593 Crash type: Heap-buffer-overflow READ 1 Crash state: bitTVtoutf8codepage bitTVtoutf8 dwgdecodeLAYOUTprivate...
OSV-2023-680 Security exception in org.apache.poi.hdgf.streams.PointerContainingStream.findChildren
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61372 Crash type: Security exception Crash state: org.apache.poi.hdgf.streams.PointerContainingStream.findChildren...
OSV-2023-663 Segv on unknown address in decUnitCompare
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61235 Crash type: Segv on unknown address Crash state: decUnitCompare decCompare decCompareOp...
OSV-2023-660 Security exception in org.apache.poi.hwpf.model.StyleSheet.createPap
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61252 Crash type: Security exception Crash state: org.apache.poi.hwpf.model.StyleSheet.createPap org.apache.poi.util.BitField.getRawValue org.apache.poi.util.BitField.getValue...
OSV-2023-650 Heap-use-after-free in yr_parser_lookup_loop_variable
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61164 Crash type: Heap-use-after-free READ 1 Crash state: yrparserlookuploopvariable yarayyparse yrlexparserulesfile...
OSV-2023-634 Heap-buffer-overflow in bit_read_BB
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60993 Crash type: Heap-buffer-overflow READ 1 Crash state: bitreadBB bitreadBS dwgdecodeATTDEFprivate...
OSV-2023-631 Heap-buffer-overflow in test_verify
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60971 Crash type: Heap-buffer-overflow READ Crash state: testverify fuzzpkcs11.c...
OSV-2023-610 Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60782 Crash type: Security exception Crash state: org.apache.lucene.util.automaton.RegExp.toAutomaton java.base/java.util.BitSet.ensureCapacity java.base/java.util.BitSet.expandTo...
OSV-2023-586 Heap-buffer-overflow in setcos_create_key
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60672 Crash type: Heap-buffer-overflow READ 1 Crash state: setcoscreatekey scpkcs15initgeneratekey dogeneratekey...
OSV-2023-581 Heap-buffer-overflow in wwunpack
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60655 Crash type: Heap-buffer-overflow WRITE 1 Crash state: wwunpack cliscanpe climagicscan...
OSV-2023-495 Heap-buffer-overflow in utf8ToUtf16
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59884 Crash type: Heap-buffer-overflow WRITE 2 Crash state: utf8ToUtf16 utf8ToUtf16WithBom Lexer::getObj...
OSV-2023-480 Heap-buffer-overflow in NetworkInterface::dissectPacket
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59745 Crash type: Heap-buffer-overflow READ 2 Crash state: NetworkInterface::dissectPacket fuzzdissectpacket.cpp...
OSV-2023-462 Heap-buffer-overflow in IEC104Stats::processPacket
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59625 Crash type: Heap-buffer-overflow READ 1 Crash state: IEC104Stats::processPacket Flow::processIEC60870Packet Flow::processPacket...
OSV-2023-460 Segv on unknown address in config__bridge_cleanup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59604 Crash type: Segv on unknown address Crash state: configbridgecleanup configcleanup mosquittofuzzmain...
OSV-2023-440 Heap-double-free in dwg_free_object
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59428 Crash type: Heap-double-free Crash state: dwgfreeobject dwgfree llvmfuzz.c...
OSV-2023-415 UNKNOWN READ in dxf_fixup_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59097 Crash type: UNKNOWN READ Crash state: dxffixupstring dwgdxfLAYOUTprivate dwgdxfLAYOUT...
OSV-2023-404 Invalid-free in Assimp::FBX::Scope::Scope
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59056 Crash type: Invalid-free Crash state: Assimp::FBX::Scope::Scope Assimp::FBX::Element::Element Assimp::FBX::Scope::Scope...