OSV-2023-319 Heap-buffer-overflow in ZSTD_decompressSequencesLong_bmi2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035 Crash type: Heap-buffer-overflow READ 8 Crash state: ZSTDdecompressSequencesLongbmi2 ZSTDdecompressSequencesLong ZSTDdecompressBlockinternal...

OSV-2023-309 UNKNOWN READ in fmemopen_unlocked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57936 Crash type: UNKNOWN READ Crash state: fmemopenunlocked fuzz.h centipede::RunOneInput...

OSV-2023-260 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57569 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2023-181 Heap-double-free in xsltCompileStepPattern

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57061 Crash type: Heap-double-free Crash state: xsltCompileStepPattern xsltCompileRelativePathPattern xsltCompilePatternInternal...

OSV-2023-106 UNKNOWN WRITE in sudo_lbuf_append_quoted_v1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56278 Crash type: UNKNOWN WRITE Crash state: sudolbufappendquotedv1 sudoersformatmemberint sudoersformatmemberint...

OSV-2023-98 Heap-buffer-overflow in sc_hsm_write_ef

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56213 Crash type: Heap-buffer-overflow READ Crash state: schsmwriteef schsmupdatebinary scupdatebinary...

OSV-2023-67 Heap-use-after-free in config__cleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56009 Crash type: Heap-use-after-free READ 8 Crash state: configcleanup mosquittofuzzmain runbroker...

OSV-2023-25 Heap-buffer-overflow in blkid_uuid_is_empty

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55318 Crash type: Heap-buffer-overflow READ 1 Crash state: blkiduuidisempty blkidprobesetuuidas probebcachefs...

OSV-2022-1224 Security exception in com.fasterxml.jackson.databind.jsontype.impl.AsArrayTypeDeserializer.deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53822 Crash type: Security exception Crash state: com.fasterxml.jackson.databind.jsontype.impl.AsArrayTypeDeserializer.deserialize com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializerNR.deserialize...

OSV-2022-1201 Stack-buffer-overflow in msc_zero_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53631 Crash type: Stack-buffer-overflow WRITE Crash state: msczeroobject msccreateobject musclecreatedirectory...

OSV-2022-1093 Heap-buffer-overflow in LibRaw::kodak_rgb_load_raw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52672 Crash type: Heap-buffer-overflow WRITE 2 Crash state: LibRaw::kodakrgbloadraw LibRaw::kodakthumbloader LibRaw::unpackthumb...

OSV-2022-1032 Stack-buffer-overflow in check_content_type_and_change_protocol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52229 Crash type: Stack-buffer-overflow READ Crash state: checkcontenttypeandchangeprotocol checkcontenttypeandchangeprotocol ndpisearchhttptcp...

OSV-2022-1017 Null-dereference READ in AlertJson

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52128 Crash type: Null-dereference READ Crash state: AlertJson JsonAlertLogger OutputPacketLog...

OSV-2022-1008 Heap-buffer-overflow in cli_js_parse_done

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52038 Crash type: Heap-buffer-overflow READ 4 Crash state: clijsparsedone clihtmlnormalise htmlnormalisemap...

OSV-2022-931 Heap-buffer-overflow in file_magwarn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51674 Crash type: Heap-buffer-overflow READ Crash state: filemagwarn load1 apprenticeload...

OSV-2022-923 Heap-buffer-overflow in file_magwarn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51603 Crash type: Heap-buffer-overflow READ Crash state: filemagwarn parsestrength load1...

OSV-2022-859 UNKNOWN READ in write_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51081 Crash type: UNKNOWN READ Crash state: writekey textfileput fuzztextfile.c...

OSV-2022-726 Heap-use-after-free in gx_device_forward_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50307 Crash type: Heap-use-after-free READ 8 Crash state: gxdeviceforwardfinalize gxdevicefinalize allocrestorestepin...

OSV-2022-615 Heap-buffer-overflow in TetrahedralInterp16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49386 Crash type: Heap-buffer-overflow READ 2 Crash state: TetrahedralInterp16 cmsPipelineEval16 FixWhiteMisalignment...

OSV-2022-607 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49289 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2022-594 Container-overflow in STOFFStarMathToMMLConverterInternal::Parser::convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49164 Crash type: Container-overflow READ 1 Crash state: STOFFStarMathToMMLConverterInternal::Parser::convert STOFFStarMathToMMLConverterInternal::Parser::parse STOFFStarMathToMMLConverter::convertStarMath...

OSV-2022-578 Heap-buffer-overflow in mrb_bint_to_s

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49045 Crash type: Heap-buffer-overflow WRITE 1 Crash state: mrbbinttos inttos mrbvmexec...

OSV-2022-481 UNKNOWN READ in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48020 Crash type: UNKNOWN READ Crash state: ndpistrdup processndpicollectedinfo ndpiworkflowprocesspacket...

OSV-2022-475 Heap-double-free in nft_set_context_free_many

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47973 Crash type: Heap-double-free Crash state: nftsetcontextfreemany networkunref networkloadone...

OSV-2022-451 Heap-buffer-overflow in myeid_create_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47769 Crash type: Heap-buffer-overflow WRITE Crash state: myeidcreatekey scpkcs15initstoresecretkey dostoresecretkey...

OSV-2022-434 Segv on unknown address in sc_aux_data_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47655 Crash type: Segv on unknown address Crash state: scauxdatafree scpkcs15freeprkeyinfo scpkcs15freeobject...

OSV-2022-427 Stack-use-after-scope in RefCopyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47560 Crash type: Stack-use-after-scope READ Crash state: RefCopyBytes DoCopyBytes dngstream::Put...

OSV-2022-395 Uncaught exception in com.alibaba.fastjson.JSONPath.deepScan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47192 Crash type: Uncaught exception Crash state: com.alibaba.fastjson.JSONPath.deepScan java.base/java.lang.Boolean.valueOf com.alibaba.fastjson.parser.ParserConfig$2.apply...

OSV-2022-346 Heap-buffer-overflow in cli_sigopts_handler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46680 Crash type: Heap-buffer-overflow READ 1 Crash state: clisigoptshandler readdbparseldbsubsignature loadoneldb...

OSV-2022-340 Heap-buffer-overflow in cli_ac_addsig

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46646 Crash type: Heap-buffer-overflow READ 2 Crash state: cliacaddsig cliaddcontentmatchpattern readdbparseldbsubsignature...

OSV-2022-226 Heap-buffer-overflow in vips_rect_intersectrect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45353 Crash type: Heap-buffer-overflow READ 4 Crash state: vipsrectintersectrect vipsforeignloadpdfgenerate vipsregionpreparetogenerate...

OSV-2022-214 Heap-buffer-overflow in cli_bcomp_freemeta

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45194 Crash type: Heap-buffer-overflow READ 8 Crash state: clibcompfreemeta clibcompaddpatt readdbparseldbsubsignature...

OSV-2022-179 Heap-buffer-overflow in row_mt_worker_hook

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44856 Crash type: Heap-buffer-overflow WRITE 4 Crash state: rowmtworkerhook execute av1decodetgtilesandwrapup...

OSV-2022-146 Stack-use-after-scope in tag_cfa_pattern::Put

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44590 Crash type: Stack-use-after-scope READ 1 Crash state: tagcfapattern::Put dngtiffdirectory::Put dngimagewriter::WriteTIFFWithProfile...

OSV-2022-85 UNKNOWN READ in pdfi_setcolorN

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43994 Crash type: UNKNOWN READ Crash state: pdfisetcolorN pdfiinterpretstreamoperator pdfiinterpretcontentstream...

OSV-2022-66 Heap-buffer-overflow in cli_ac_addsig

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43832 Crash type: Heap-buffer-overflow READ 2 Crash state: cliacaddsig cliparseadd clisigoptshandler...

OSV-2021-1706 Segv on unknown address in gx_adjust_color_Pattern

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42453 Crash type: Segv on unknown address Crash state: gxadjustcolorPattern gssetcolor pdfisetfillcolor...

OSV-2021-1687 Segv on unknown address in cs_adjust_counts_icc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42290 Crash type: Segv on unknown address Crash state: csadjustcountsicc gstateclonecore gsgsave...

OSV-2020-2324 Heap-buffer-overflow in archive_read_format_cpio_read_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21048 Crash type: Heap-buffer-overflow READ Crash state: archivereadformatcpioreadheader archivereadnextheader2 archivereadnextheader...

OSV-2020-2320 UNKNOWN WRITE in cpu_arm_exec_arm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20220 Crash type: UNKNOWN WRITE Crash state: cpuarmexecarm tcgexecallarm qemutcgcpuloop...

OSV-2021-1625 Heap-buffer-overflow in junkscan

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41390 Crash type: Heap-buffer-overflow READ 16 Crash state: junkscan seturl parseurl...

OSV-2021-1564 Heap-buffer-overflow in bfd_getl32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40908 Crash type: Heap-buffer-overflow READ 1 Crash state: bfdgetl32 bfdmipselfsectionfromshdr bfdsectionfromshdr...

OSV-2021-1473 Global-buffer-overflow in fr_unix_time_from_tm

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40118 Crash type: Global-buffer-overflow READ 2 Crash state: frunixtimefromtm frunixtimefromstr frvalueboxfromstr...

OSV-2021-1457 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39996 Crash type: Heap-buffer-overflow READ 4 Crash state: genericunpack exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1381 Heap-buffer-overflow in OT::MathValueRecord::copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39225 Crash type: Heap-buffer-overflow READ 4 Crash state: OT::MathValueRecord::copy OT::MathGlyphAssembly::subset OT::MathGlyphConstruction::subset...

OSV-2021-1340 Heap-buffer-overflow in mrb_vm_exec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38989 Crash type: Heap-buffer-overflow READ 1 Crash state: mrbvmexec mrbvmrun mrbtoprun...

OSV-2021-1301 Use-of-uninitialized-value in std::__1::__hash_iterator<std::__1::__hash_node<std::__1::__hash_value_type<std:

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38823 Crash type: Use-of-uninitialized-value Crash state: std::1::hashiteratorstd::1::hashnodestd::1::hashvaluetypestd: opencensus::tags::TagKeyRegistry::Register opencensus::tags::TagKey::Register...

OSV-2021-1239 Heap-buffer-overflow in stbi__load_and_postprocess_8bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38394 Crash type: Heap-buffer-overflow READ 2 Crash state: stbiloadandpostprocess8bit stbimage.h...

OSV-2021-1168 Heap-buffer-overflow in exif_get_slong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37570 Crash type: Heap-buffer-overflow READ 1 Crash state: exifgetslong exifgetlong exifgetrational...

OSV-2021-1127 Heap-use-after-free in zebra_nhg_hash_equal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37164 Crash type: Heap-use-after-free READ 4 Crash state: zebranhghashequal hashget hashlookup...