OSV-2023-214 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57295 Crash type: Security exception Crash state: org.springframework.expression.spel.ast.OpPlus.getValueInternal java.base/java.util.HashMap.get org.springframework.core.convert.TypeDescriptor.valueOf...

OSV-2023-201 UNKNOWN READ in Assimp::SMDImporter::ParseNodeInfo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57218 Crash type: UNKNOWN READ Crash state: Assimp::SMDImporter::ParseNodeInfo Assimp::SMDImporter::ParseNodesSection Assimp::SMDImporter::ParseFile...

OSV-2022-1263 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54424 Crash type: Null-dereference READ Crash state: NULL...

OSV-2022-1235 Heap-buffer-overflow in _rrparse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53939 Crash type: Heap-buffer-overflow READ 16 Crash state: rrparse messageparse fuzzmdnsmessage.cc...

OSV-2022-1223 Heap-use-after-free in mbedtls_pkcs7_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53798 Crash type: Heap-use-after-free READ 8 Crash state: mbedtlspkcs7free mbedtlspkcs7parseder fuzzpkcs7.c...

OSV-2022-1212 Heap-buffer-overflow in OT::hb_ot_apply_context_t::skipping_iterator_t::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53722 Crash type: Heap-buffer-overflow READ 4 Crash state: OT::hbotapplycontextt::skippingiteratort::next bool OT::matchinput bool OT::contextapplylookup...

OSV-2022-1195 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53626 Crash type: Memcpy-param-overlap Crash state: repeat repeat pere...

OSV-2022-1194 Heap-buffer-overflow in sputs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53619 Crash type: Heap-buffer-overflow READ Crash state: sputs gxserializeIndexed pdfcolorspacenamed...

OSV-2022-1164 Heap-buffer-overflow in virtio_net_queue_enable

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53186 Crash type: Heap-buffer-overflow READ 8 Crash state: virtionetqueueenable virtioqueueenable virtiopcicommonwrite...

OSV-2022-1136 Heap-buffer-overflow in rx_ip

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53029 Crash type: Heap-buffer-overflow READ 2 Crash state: rxip miprx fuzz.c...

OSV-2022-1094 Security exception in com.google.common.hash.Hashing$ConcatenatedHashFunction.makeHash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52693 Crash type: Security exception Crash state: com.google.common.hash.Hashing$ConcatenatedHashFunction.makeHash com.google.common.hash.AbstractCompositeHashFunction$1.hash HashingFuzzer.testHash...

OSV-2022-1093 Heap-buffer-overflow in LibRaw::kodak_rgb_load_raw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52672 Crash type: Heap-buffer-overflow WRITE 2 Crash state: LibRaw::kodakrgbloadraw LibRaw::kodakthumbloader LibRaw::unpackthumb...

OSV-2022-1084 Stack-buffer-overflow in authentic_parse_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52662 Crash type: Stack-buffer-overflow READ 1 Crash state: authenticparsesize authenticgettaggeddata authenticparsecredentialdata...

OSV-2022-1063 Heap-use-after-free in xps_image_enum_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52492 Crash type: Heap-use-after-free READ 8 Crash state: xpsimageenumfinalize allocrestorestepin dorestore...

OSV-2022-1053 Heap-buffer-overflow in flb_parser_create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52414 Crash type: Heap-buffer-overflow READ 1 Crash state: flbparsercreate flbparserconffile configrandomfuzzer.c...

OSV-2022-1052 UNKNOWN READ in loadSymbol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52410 Crash type: UNKNOWN READ Crash state: loadSymbol loadMapInternal msLoadMap...

OSV-2022-1031 Memcpy-param-overlap in tsk_fs_load_file_action

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52212 Crash type: Memcpy-param-overlap Crash state: tskfsloadfileaction tskfsattrwalknonres tskfsattrwalk...

OSV-2022-952 UNKNOWN WRITE in regcomp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51778 Crash type: UNKNOWN WRITE Crash state: regcomp fileregcomp load1...

OSV-2022-899 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51390 Crash type: Heap-buffer-overflow READ 7 Crash state: std::1::basicstring, std::1::allocatorch PfxEntry::add AffixMgr::expandrootword...

OSV-2022-880 Global-buffer-overflow in _getBaseCellNeighbor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51208 Crash type: Global-buffer-overflow READ 4 Crash state: getBaseCellNeighbor localIjkToCell localIjToCell...

OSV-2022-868 Heap-buffer-overflow in AffixMgr::redundant_condition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51124 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::redundantcondition AffixMgr::parseaffix AffixMgr::parsefile...

OSV-2022-828 UNKNOWN READ in stream_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50898 Crash type: UNKNOWN READ Crash state: streamfinalize ifreeobject coswritestreamalloc...

OSV-2022-791 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50631 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal java.base/java.lang.AbstractStringBuilder.append...

OSV-2022-786 Heap-double-free in read_config

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50645 Crash type: Heap-double-free Crash state: readconfig readglob readconfig...

OSV-2022-780 Index-out-of-bounds in is_same_net6

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50599 Crash type: Index-out-of-bounds Crash state: issamenet6 dhcp6mayberelay dhcp6mayberelay...

OSV-2022-672 Heap-buffer-overflow in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49763 Crash type: Heap-buffer-overflow WRITE 4 Crash state: udiv mpzmdiv mrbbintdiv...

OSV-2022-639 Heap-buffer-overflow in _cmsWriteXYZNumber

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49505 Crash type: Heap-buffer-overflow READ 8 Crash state: cmsWriteXYZNumber TypeViewingConditionsWrite SaveTags...

OSV-2022-627 Heap-buffer-overflow in cmsMLUgetASCII

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49475 Crash type: Heap-buffer-overflow READ 2 Crash state: cmsMLUgetASCII WriteCountAndString TypeCrdInfoWrite...

OSV-2022-622 Segv on unknown address in urshift

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49429 Crash type: Segv on unknown address Crash state: urshift mpzdiv2exp mrbbintrshift...

OSV-2022-603 Heap-buffer-overflow in mrb_vm_exec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49259 Crash type: Heap-buffer-overflow WRITE 8 Crash state: mrbvmexec mrbvmrun mrbtoprun...

OSV-2022-543 Index-out-of-bounds in decode_coefs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48816 Crash type: Index-out-of-bounds Crash state: decodecoefs vp9decodeblocktokens decodeblock...

OSV-2022-489 Heap-buffer-overflow in fr_size_from_str

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48069 Crash type: Heap-buffer-overflow READ 1 Crash state: frsizefromstr frvalueboxfromsubstr frvalueboxfromstr...

OSV-2022-473 Stack-buffer-overflow in input_osc_52

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47964 Crash type: Stack-buffer-overflow READ 9 Crash state: inputosc52 inputexitosc inputparse...

OSV-2022-390 Heap-buffer-overflow in s_PFBD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47157 Crash type: Heap-buffer-overflow READ 1 Crash state: sPFBDprocess sreadbuf spgetcc...

OSV-2022-389 Global-buffer-overflow in _dwarf_pathjoinl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47150 Crash type: Global-buffer-overflow READ 1 Crash state: dwarfpathjoinl dwarfconstructlinkedtopath dwarfgnudebuglink...

OSV-2022-344 Heap-use-after-free in init_tdb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46685 Crash type: Heap-use-after-free READ 4 Crash state: inittdb loadoneldb cliloadldb...

OSV-2022-288 Segv on unknown address in flb_ra_translate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46082 Crash type: Segv on unknown address Crash state: flbratranslate recordacfuzzer.c...

OSV-2022-282 Heap-buffer-overflow in cosm_new_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46002 Crash type: Heap-buffer-overflow WRITE 1 Crash state: cosmnewfile epassNUMBERpkcs15generatekey scpkcs15initgeneratekey...

OSV-2022-257 Segv on unknown address in flb_config_map_properties_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45670 Crash type: Segv on unknown address Crash state: flbconfigmappropertiescheck configmapfuzzer.c...

OSV-2022-250 Heap-buffer-overflow in __covrec_1D46B478ANUMBER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45603 Crash type: Heap-buffer-overflow READ 1 Crash state: covrec1D46B478ANUMBER covrecF49D057CNUMBER covrec5D82FD3F85773DBDu...

OSV-2022-231 Heap-buffer-overflow in do_fileid

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45430 Crash type: Heap-buffer-overflow WRITE 2 Crash state: dofileid processcommand processblock...

OSV-2022-222 Heap-use-after-free in cb_stdout_flush

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45251 Crash type: Heap-use-after-free READ Crash state: cbstdoutflush outputprecbflush flb-it-fuzz-filterstdoutfuzzerOSSFUZZ...

OSV-2022-202 Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45036 Crash type: Heap-buffer-overflow READ 4 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c...

OSV-2022-169 Heap-buffer-overflow in ucasemap_internalUTF8ToTitle_70

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44779 Crash type: Heap-buffer-overflow READ 1 Crash state: ucasemapinternalUTF8ToTitle70 ucasemapmapUTF8 ucasemaputf8ToTitle70...

OSV-2022-151 Heap-buffer-overflow in extensionObjectOrder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44623 Crash type: Heap-buffer-overflow READ 4 Crash state: extensionObjectOrder extensionObjectOrder extensionObjectOrder...

OSV-2022-139 Heap-use-after-free in nghttp2_http_record_request_method

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44516 Crash type: Heap-use-after-free READ 4 Crash state: nghttp2httprecordrequestmethod nghttp2sessionmemsendinternal nghttp2sessionsend...

OSV-2022-102 Segv on unknown address in pdfi_array_get

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44151 Crash type: Segv on unknown address Crash state: pdfiarrayget pdfiTJ pdfiinterpretstreamoperator...

OSV-2022-91 Heap-buffer-overflow in pixCountArbInRect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44008 Crash type: Heap-buffer-overflow READ 1 Crash state: pixCountArbInRect pix3fuzzer.cc...

OSV-2022-85 UNKNOWN READ in pdfi_setcolorN

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43994 Crash type: UNKNOWN READ Crash state: pdfisetcolorN pdfiinterpretstreamoperator pdfiinterpretcontentstream...

OSV-2021-1805 Heap-buffer-overflow in ndpi_search_kerberos

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43925 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchkerberos checkndpidetectionfunc ndpicheckflowfunc...