OSV-2024-48 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66178 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.util.Arrays.copyOf java.base/java.util.ArrayList.grow...

OSV-2023-1377 UNKNOWN READ in FuzzedFileProvider::seek

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65417 Crash type: UNKNOWN READ Crash state: FuzzedFileProvider::seek IOdowrite IOfilecloseit...

OSV-2023-1163 Invalid-free in sc_file_clear_acl_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64181 Crash type: Invalid-free Crash state: scfileclearaclentries scfilefree setcoscreatekey...

OSV-2023-1095 Heap-use-after-free in zend_jit_trace_execute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63725 Crash type: Heap-use-after-free READ 4 Crash state: zendjittraceexecute zendjittracehotside zendjittraceexit...

OSV-2023-747 Segv on unknown address in kh_get_ucl_hash_caseless_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61794 Crash type: Segv on unknown address Crash state: khgetuclhashcaselessnode uclhashsearch uclincludefilesingle...

OSV-2023-676 Security exception in com.github.javaparser.ast.visitor.CloneVisitor.visit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61313 Crash type: Security exception Crash state: com.github.javaparser.ast.visitor.CloneVisitor.visit com.github.javaparser.ast.type.ClassOrInterfaceType.accept com.github.javaparser.ast.visitor.CloneVisitor.cloneNode...

OSV-2023-640 Stack-buffer-overflow in initialize_encryption_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61039 Crash type: Stack-buffer-overflow READ Crash state: initializeencryptionkey cliole2extract cliscanole2...

OSV-2023-546 Invalid-free in jpeg_free_large

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60379 Crash type: Invalid-free Crash state: jpegfreelarge jpegabort jpegfinishdecompress...

OSV-2023-527 Heap-buffer-overflow in default_get_outline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60207 Crash type: Heap-buffer-overflow READ 4 Crash state: defaultgetoutline pdfifapigetglyph getfapiglyphdata...

OSV-2023-525 Security exception in jaz.Zer.reportFinding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60167 Crash type: Security exception Crash state: jaz.Zer.reportFinding jaz.Zer.reportFindingIfEnabled jaz.Zer...

OSV-2023-517 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60112 Crash type: Security exception Crash state: org.springframework.expression.spel.ast.OpPlus.getValueInternal java.base/sun.reflect.generics.reflectiveObjects.TypeVariableImpl.hashCode java.base/java.util.Arrays.hashCode...

OSV-2023-509 Heap-buffer-overflow in ndpi_search_thrift_tcp_udp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60070 Crash type: Heap-buffer-overflow WRITE Crash state: ndpisearchthrifttcpudp checkndpidetectionfunc ndpicheckflowfunc...

OSV-2023-500 Heap-buffer-overflow in stbiw__encode_png_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42525448 Crash type: Heap-buffer-overflow READ 1 Crash state: stbiwencodepngline stbiwritepngtomem Ogre::STBIImageCodec::encode...

OSV-2023-452 Heap-buffer-overflow in json_write_TF

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59523 Crash type: Heap-buffer-overflow READ Crash state: jsonwriteTF dwgjsonLTYPE jsonobjectswrite...

OSV-2023-412 UNKNOWN READ in dxf_fixup_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59089 Crash type: UNKNOWN READ Crash state: dxffixupstring dxfheaderwrite dwgwritedxf...

OSV-2023-305 UNKNOWN READ in page_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57929 Crash type: UNKNOWN READ Crash state: pagesize dnspacketnew dnsresourcerecordnewfromraw...

OSV-2023-301 UNKNOWN READ in sd_event_default

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57915 Crash type: UNKNOWN READ Crash state: sdeventdefault dummyserverinit fuzz-journald-audit.c...

OSV-2023-211 Global-buffer-overflow in xmlStrndup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57284 Crash type: Global-buffer-overflow READ 1 Crash state: xmlStrndup htmlParseSystemLiteral htmlParseDocTypeDecl...

OSV-2023-158 Heap-use-after-free in ddsi_type_unref_impl_locked

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56837 Crash type: Heap-use-after-free READ 4 Crash state: ddsitypeunrefimpllocked ddsitypeunreflocked ddsixttypefini...

OSV-2023-155 Heap-buffer-overflow in run_container_write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56710 Crash type: Heap-buffer-overflow WRITE 16 Crash state: runcontainerwrite raportableserialize roaringbitmapserialize...

OSV-2023-153 Heap-use-after-free in ucl_hash_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56716 Crash type: Heap-use-after-free READ 8 Crash state: uclhashfunc khresizeuclhashnode khputuclhashnode...

OSV-2023-11 Heap-buffer-overflow in node_from_openstep

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55146 Crash type: Heap-buffer-overflow READ 1 Crash state: nodefromopenstep nodefromopenstep plistfromopenstep...

OSV-2022-1207 Security exception in java.desktop/java.awt.image.DataBufferInt.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53708 Crash type: Security exception Crash state: java.desktop/java.awt.image.DataBufferInt. java.desktop/java.awt.image.Raster.createPackedRaster org.apache.commons.imaging.formats.jpeg.decoder.JpegDecoder.visitSOS...

OSV-2022-1169 Heap-use-after-free in output_thread

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53324 Crash type: Heap-use-after-free READ 8 Crash state: outputthread stepcallback flbtaskdestroy...

OSV-2022-1059 Heap-buffer-overflow in asn_build_unsigned_int64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52465 Crash type: Heap-buffer-overflow WRITE 1 Crash state: asnbuildunsignedint64 snmpbuildvarop snmppdubuild...

OSV-2022-1029 Heap-buffer-overflow in dprint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52204 Crash type: Heap-buffer-overflow READ 13 Crash state: dprint gethdrfield parseheaders...

OSV-2022-704 UNKNOWN READ in fp_cmp_mag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50012 Crash type: UNKNOWN READ Crash state: fpcmpmag crtmgrtrustlistlookup crtmgradd...

OSV-2022-625 Heap-buffer-overflow in WriteSeqID

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49441 Crash type: Heap-buffer-overflow READ 8 Crash state: WriteSeqID WritePositionTable TypeProfileSequenceIdWrite...

OSV-2022-571 Use-of-uninitialized-value in LZ4_compress_fast_extState_fastReset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48993 Crash type: Use-of-uninitialized-value Crash state: LZ4compressfastextStatefastReset LZ4FcompressBlock LZ4FcompressUpdateImpl...

OSV-2022-557 Heap-buffer-overflow in emit_goto

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48924 Crash type: Heap-buffer-overflow READ 4 Crash state: emitgoto jsparseforinof jsparsestatementordecl...

OSV-2022-551 Heap-buffer-overflow in fixup_pcap_pkthdr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48863 Crash type: Heap-buffer-overflow READ 1 Crash state: fixuppcappkthdr pcapnextpacket pcapofflineread...

OSV-2022-480 Heap-buffer-overflow in jxl::JxlBoxContentDecoder::Process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48029 Crash type: Heap-buffer-overflow READ Crash state: jxl::JxlBoxContentDecoder::Process HandleBoxes JxlDecoderProcessInput...

OSV-2022-423 Heap-buffer-overflow in sc_build_pin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47521 Crash type: Heap-buffer-overflow READ 4 Crash state: scbuildpin isoNUMBERbuildpinapdu isoNUMBERpincmd...

OSV-2022-396 Heap-buffer-overflow in ucl_object_free_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47206 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectfreeinternal uclparserfree uclstatemachine...

OSV-2022-376 Heap-buffer-overflow in ndpi_search_raknet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47000 Crash type: Heap-buffer-overflow READ 2 Crash state: ndpisearchraknet checkndpidetectionfunc ndpicheckflowfunc...

OSV-2022-374 Stack-use-after-scope in RefCopyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47001 Crash type: Stack-use-after-scope READ Crash state: RefCopyBytes dngstream::Put tagdataptr::Put...

OSV-2022-361 UNKNOWN READ in sc_pkcs15_decode_pubkey_ec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46852 Crash type: UNKNOWN READ Crash state: scpkcs15decodepubkeyec scpkcs15decodepubkey fuzzpkcs15decode.c...

OSV-2022-314 UNKNOWN READ in [heap]

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46395 Crash type: UNKNOWN READ Crash state: heap...

OSV-2022-255 Heap-double-free in flb_pack_state_reset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45667 Crash type: Heap-double-free Crash state: flbpackstatereset packjsonstatefuzzer.c flbpackstateinit...

OSV-2022-183 Heap-buffer-overflow in evax_bfd_print_dst

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44864 Crash type: Heap-buffer-overflow READ 1 Crash state: evaxbfdprintdst evaxbfdprintimage vmsbfdprintprivatebfddata...

OSV-2022-112 Heap-use-after-free in hb_bit_set_invertible_t::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44263 Crash type: Heap-use-after-free READ 1 Crash state: hbbitsetinvertiblet::next hbbitsetinvertiblet::intersects hbsparsesett::intersects...

OSV-2022-70 Heap-buffer-overflow in cli_sigopts_handler

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43843 Crash type: Heap-buffer-overflow READ 1 Crash state: clisigoptshandler loadoneldb cliloadldb...

OSV-2021-1756 Heap-buffer-overflow in Curl_sasl_decode_mech

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42901 Crash type: Heap-buffer-overflow READ 10 Crash state: Curlsasldecodemech Curlsaslparseurlauthoption pop3parseurloptions...

OSV-2021-1733 UNKNOWN READ in mls_semantic_level_expand

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42729 Crash type: UNKNOWN READ Crash state: mlssemanticlevelexpand policydbusercache hashtabmap...

OSV-2021-1639 Heap-use-after-free in Segment::write

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41553 Crash type: Heap-use-after-free READ 1 Crash state: Segment::write Doublewrite::writepages Doublewrite::flushtodisk...

OSV-2021-1589 Heap-buffer-overflow in inflate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41111 Crash type: Heap-buffer-overflow READ 1 Crash state: inflate uncompress2 uncompress...

OSV-2021-1521 Heap-buffer-overflow in exif_data_load_data_content

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40617 Crash type: Heap-buffer-overflow READ 4 Crash state: exifdataloaddatacontent exifdataloaddata exifloadergetdata...

OSV-2021-1505 Heap-buffer-overflow in asn_build_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40429 Crash type: Heap-buffer-overflow READ Crash state: asnbuildstring snmpv3packetbuild snmpbuild...

OSV-2021-1445 Heap-buffer-overflow in mk_rconf_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39853 Crash type: Heap-buffer-overflow READ 1 Crash state: mkrconfread mkrconfreadglob mkrconfread...

OSV-2021-1425 Heap-buffer-overflow in fr_dns_label_to_value_box

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39689 Crash type: Heap-buffer-overflow READ 1 Crash state: frdnslabeltovaluebox decodevaluetrampoline frstructfromnetwork...