OSV-2023-1402 Global-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=384343083 Crash type: Global-buffer-overflow READ Crash state: std::1::basicstring, std::1::allocatorch XYWriteParser::createTable XYWriteParser::parseTextZone...

OSV-2024-1382 Security exception in jflex.core.NFA.insertNFA

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=383999281 Crash type: Security exception Crash state: jflex.core.NFA.insertNFA java.base/java.util.zip.ZipFile$Source.getEntryPos java.base/java.util.zip.ZipFile.getEntry...

OSV-2024-1380 Index-out-of-bounds in ndpi_search_dns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=383911300 Crash type: Index-out-of-bounds Crash state: ndpisearchdns searchdnsagain ndpidetectionprocesspacket...

OSV-2024-1375 Index-out-of-bounds in dwg_decode_eed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=383814052 Crash type: Index-out-of-bounds Crash state: dwgdecodeeed dwgdecodeentity dwgdecodeRAYprivate...

OSV-2024-1372 Bad-cast to Assimp::LogStream from Assimp::OptimizeMeshesProcess

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=383595860 Crash type: Bad-cast Crash state: Bad-cast to Assimp::LogStream from Assimp::OptimizeMeshesProcess CallbackToLogRedirector Assimp::DefaultLogger::WriteToStreams...

OSV-2024-1356 Heap-buffer-overflow in ChunkAssignData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382816119 Crash type: Heap-buffer-overflow READ 1 Crash state: ChunkAssignData WebPMuxCreateInternal MuxDemuxApiTest...

OSV-2024-1355 UNKNOWN READ in glslang::TInfoSinkBase::location

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382922237 Crash type: UNKNOWN READ Crash state: glslang::TInfoSinkBase::location glslang::TParseContextBase::outputMessage glslang::TParseContextBase::error...

OSV-2024-1351 Use-of-uninitialized-value in Archive::UnexpEndArcMsg

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382526743 Crash type: Use-of-uninitialized-value Crash state: Archive::UnexpEndArcMsg Archive::ReadHeader50 Archive::ReadHeader...

OSV-2024-1348 Heap-buffer-overflow in glslang::HlslGrammar::acceptDeclaration

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382721848 Crash type: Heap-buffer-overflow READ 1 Crash state: glslang::HlslGrammar::acceptDeclaration glslang::HlslGrammar::acceptCompilationUnit glslang::HlslParseContext::parseShaderStrings...

OSV-2024-1346 UNKNOWN READ in glslang::HlslTokenStream::advanceToken

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382547706 Crash type: UNKNOWN READ Crash state: glslang::HlslTokenStream::advanceToken glslang::HlslGrammar::acceptLiteral glslang::HlslGrammar::acceptPostfixExpression...

OSV-2024-1343 Container-overflow in glslang::HlslParseContext::decomposeIntrinsic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=380569852 Crash type: Container-overflow READ 8 Crash state: glslang::HlslParseContext::decomposeIntrinsic glslang::HlslParseContext::handleFunctionCall glslang::HlslGrammar::acceptFunctionCall...

OSV-2024-1336 Security exception in org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategories

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=380409697 Crash type: Security exception Crash state: org.checkerframework.checker.formatter.util.FormatUtil.formatParameterCategories UtilCheckerFuzzer.fuzzChecker UtilCheckerFuzzer.fuzzerTestOneInput...

OSV-2024-1332 Negative-size-param in extract_mr_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379768247 Crash type: Negative-size-param Crash state: extractmrdata parsemrstring readstatparsesav...

OSV-2024-1330 Heap-buffer-overflow in zoom_search_again

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379072455 Crash type: Heap-buffer-overflow READ 1 Crash state: zoomsearchagain ndpidetectionprocesspacket ndpiworkflowprocesspacket...

OSV-2024-1326 Heap-buffer-overflow in ndpi_search_mikrotik

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180960 Crash type: Heap-buffer-overflow READ 16 Crash state: ndpisearchmikrotik checkndpidetectionfunc ndpidetectionprocesspacket...

OSV-2024-1324 Heap-buffer-overflow in Assimp::FBXExporter::WriteObjects

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379418968 Crash type: Heap-buffer-overflow READ 4 Crash state: Assimp::FBXExporter::WriteObjects Assimp::FBXExporter::ExportBinary Assimp::ExportSceneFBX...

OSV-2024-1322 Security exception in com.alibaba.fastjson2.JSONReader.readObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379180973 Crash type: Security exception Crash state: com.alibaba.fastjson2.JSONReader.readObject java.base/java.nio.charset.CharsetEncoder.replaceWith java.base/java.nio.charset.CharsetEncoder...

OSV-2024-1320 Heap-buffer-overflow in process_page_

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379254072 Crash type: Heap-buffer-overflow READ 4 Crash state: processpage FLACoggdecoderaspectskiplink FLACstreamdecoderseekabsolute...

OSV-2024-1313 Security exception in org.apache.commons.codec.language.bm.Rule$Phoneme.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=379008019 Crash type: Security exception Crash state: org.apache.commons.codec.language.bm.Rule$Phoneme. org.apache.commons.codec.language.bm.Rule$Phoneme. org.apache.commons.codec.language.bm.PhoneticEngine$PhonemeBuilder.app...

OSV-2024-1312 Heap-buffer-overflow in jv_string_vfmt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=378836890 Crash type: Heap-buffer-overflow READ 13 Crash state: jvstringvfmt jvstringfmt jvparsesizedcustomflags...

OSV-2024-1311 Security exception in java.base/java.util.Arrays.copyOfRange

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=378836879 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange java.base/java.lang.StringUTF16.newString java.base/java.lang.StringBuilder.toString...

OSV-2024-1310 Use-of-uninitialized-value in decompress_yuv.cc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=378750938 Crash type: Use-of-uninitialized-value Crash state: decompressyuv.cc...

OSV-2024-1297 Heap-buffer-overflow in rijndaelSetupEncrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=377977949 Crash type: Heap-buffer-overflow READ 1 Crash state: rijndaelSetupEncrypt rijndaelSetupDecrypt AESPDFnative::AESPDFnative...

OSV-2024-1293 Use-of-uninitialized-value in k5_hashtab_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=377530685 Crash type: Use-of-uninitialized-value Crash state: k5hashtabadd insertentry fuzzkdc.c...

OSV-2024-1282 Segv on unknown address in udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=368729572 Crash type: Segv on unknown address Crash state: udiv mpzmdiv mrbbintdiv...

OSV-2024-1279 Heap-buffer-overflow in opj_j2k_read_tile_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538309 Crash type: Heap-buffer-overflow WRITE 8 Crash state: opjj2kreadtileheader opjj2kdecodetiles opjj2kdecode...

OSV-2024-1274 Segv on unknown address in yara_yyparse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515523 Crash type: Segv on unknown address Crash state: yarayyparse yrlexparserulesfile cliloadyara...

OSV-2024-1272 Segv on unknown address in std::__1::ios_base::~ios_base

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371292576 Crash type: Segv on unknown address Crash state: std::1::iosbase::iosbase Poco::Net::MultipartReader::nextPart Poco::Net::MailMessage::readMultipart...

OSV-2022-1288 Stack-buffer-overflow in bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376787368 Crash type: Stack-buffer-overflow READ 1 Crash state: bool SmilesParseOps::parser::parseatomprops bool SmilesParseOps::parser::parseit SmilesParseOps::parseCXExtensions...

OSV-2024-1266 UNKNOWN READ in llama_output_reserve

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376770771 Crash type: UNKNOWN READ Crash state: llamaoutputreserve llamadecode fuzztokenizer.cpp...

OSV-2024-1261 Stack-buffer-overflow in _pcre2_compile_class_not_nested_16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515526 Crash type: Stack-buffer-overflow WRITE 2 Crash state: pcre2compileclassnotnested16 compileclassoperand pcre2compileclassnested16...

OSV-2024-1254 Security exception in org.apache.lucene.util.ArrayUtil.growExact

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376504918 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.growExact org.apache.lucene.util.ArrayUtil.grow org.apache.lucene.util.BytesRefBuilder.grow...

OSV-2024-1253 Segv on unknown address in llama_output_reserve

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376331508 Crash type: Segv on unknown address Crash state: llamaoutputreserve llamadecode fuzztokenizer.cpp...

OSV-2023-1398 Heap-buffer-overflow in load_1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515517 Crash type: Heap-buffer-overflow READ 1 Crash state: load1 apprenticeload fileapprentice...

OSV-2024-1251 UNKNOWN WRITE in s_DCTD_process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376394519 Crash type: UNKNOWN WRITE Crash state: sDCTDprocess sreadbuf spgetcc...

OSV-2024-1249 Heap-buffer-overflow in extract_ice_option

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376100377 Crash type: Heap-buffer-overflow READ 1 Crash state: extracticeoption parsesdpsession parsesdp...

OSV-2024-1244 Heap-buffer-overflow in extract_fmtp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=375237153 Crash type: Heap-buffer-overflow READ 6 Crash state: extractfmtp parsesdpsession parsemixedcontent...

OSV-2024-1241 Heap-buffer-overflow in polygonToCellsExperimental

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=375220555 Crash type: Heap-buffer-overflow WRITE 8 Crash state: polygonToCellsExperimental fuzzerPolygonToCellsExperimentalNoHoles.c...

OSV-2024-1239 Heap-buffer-overflow in convsamp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=371659888 Crash type: Heap-buffer-overflow READ 1 Crash state: convsamp forwardDCT compressdata...

OSV-2024-1237 Use-of-uninitialized-value in jit_compile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=374218978 Crash type: Use-of-uninitialized-value Crash state: jitcompile pcre2jitcompile8 pcre2fuzzsupport.c...

OSV-2024-1232 Segv on unknown address in cranelift_filetests::function_runner::Trampoline::call::hb2e77cf3a13ebaf4

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=373522467 Crash type: Segv on unknown address Crash state: craneliftfiletests::functionrunner::Trampoline::call::hb2e77cf3a13ebaf4 craneliftfuzzgen::::run::hdb2f75e19950661f...

OSV-2024-1230 Heap-buffer-overflow in extract_rtpmap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=373736682 Crash type: Heap-buffer-overflow READ 4 Crash state: extractrtpmap parsesdpsession parsesdp...

OSV-2024-1220 UNKNOWN READ in Assimp::NDOImporter::InternReadFile

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372765427 Crash type: UNKNOWN READ Crash state: Assimp::NDOImporter::InternReadFile Assimp::BaseImporter::ReadFile Assimp::Importer::ReadFile...

OSV-2024-1218 UNKNOWN READ in Poco::UTF16Encoding::queryConvert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372765426 Crash type: UNKNOWN READ Crash state: Poco::UTF16Encoding::queryConvert Poco::TextConverter::convert Poco::Net::NTLMCredentials::parseChallengeMessage...

OSV-2024-1216 Use-of-uninitialized-value in Poco::Net::NTLMCredentials::parseChallengeMessage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372764172 Crash type: Use-of-uninitialized-value Crash state: Poco::Net::NTLMCredentials::parseChallengeMessage Poco::Net::HTTPNTLMCredentials::createNTLMMessage Poco::Net::HTTPNTLMCredentials::authenticate...

OSV-2024-1212 Heap-buffer-overflow in cram_encode_container

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372547397 Crash type: Heap-buffer-overflow READ 8 Crash state: cramencodecontainer cramflushcontainermt cramputbamseq...

OSV-2024-1210 Heap-buffer-overflow in parse_mixed_content

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372510377 Crash type: Heap-buffer-overflow READ 1 Crash state: parsemixedcontent parsesdp fuzzparsemsg.c...

OSV-2024-1209 Heap-use-after-free in xmlValidateOneElement

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372547409 Crash type: Heap-use-after-free READ 4 Crash state: xmlValidateOneElement xmlValidateElement api.c...

OSV-2024-1207 Security exception in org.apache.poi.hdgf.streams.CompressedStreamStore.decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372515093 Crash type: Security exception Crash state: org.apache.poi.hdgf.streams.CompressedStreamStore.decompress org.apache.poi.hdgf.streams.CompressedStreamStore. org.apache.poi.hdgf.streams.Stream.createStream...

OSV-2024-1206 Heap-buffer-overflow in extract_sendrecv_mode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372515090 Crash type: Heap-buffer-overflow READ 6 Crash state: extractsendrecvmode parsesdpsession parsemixedcontent...