OSV-2024-999 Stack-buffer-overflow in filter_apply_chain

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68846 Crash type: Stack-buffer-overflow READ 4 Crash state: filterapplychain filterapplychain readin...

OSV-2024-996 Use-of-uninitialized-value in cups_array_find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69548 Crash type: Use-of-uninitialized-value Crash state: cupsarrayfind cupsArrayFind cupsStrAlloc...

OSV-2024-994 Use-of-uninitialized-value in packet_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71124 Crash type: Use-of-uninitialized-value Crash state: packetparse packetget1 packetget...

OSV-2024-987 Heap-buffer-overflow in pcpp::NDPNeighborAdvertisementLayer::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66599 Crash type: Heap-buffer-overflow READ 16 Crash state: pcpp::NDPNeighborAdvertisementLayer::toString pcpp::Packet::toStringList pcpp::Packet::toString...

OSV-2024-988 UNKNOWN WRITE in SHA224Result

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68417 Crash type: UNKNOWN WRITE Crash state: SHA224Result mdmapsh224 stack...

OSV-2024-985 Heap-double-free in libssh2_default_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69362 Crash type: Heap-double-free Crash state: libssh2defaultfree sessionfree libssh2sessionfree...

OSV-2024-983 UNKNOWN READ in ireclaim

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537430 Crash type: UNKNOWN READ Crash state: ireclaim interpreclaim gsmainfinit...

OSV-2024-978 Stack-buffer-overflow in narrow_conv_backprop

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537498 Crash type: Stack-buffer-overflow WRITE 4 Crash state: narrowconvbackprop narrowconvbackprop narrowconvbackprop...

OSV-2024-969 Security exception in com.github.javaparser.GeneratedJavaParser.Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70881 Crash type: Security exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression java.base/java.lang.ClassLoader.defineClass1 java.base/java.lang.ClassLoader.defineClass...

OSV-2024-967 Heap-buffer-overflow in pcpp::byteArrayToHexString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68520 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::byteArrayToHexString pcpp::PacketTrailerLayer::toString FuzzTarget.cpp...

OSV-2024-965 Stack-buffer-overflow in FLAC__stream_encoder_init_ogg_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537419 Crash type: Stack-buffer-overflow READ 13 Crash state: FLACstreamencoderinitoggfile EncoderSessioninitencoder flacencodefile...

OSV-2024-964 Security exception in com.alibaba.fastjson2.JSONPathSegment$CycleNameSegment$MapLoop.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69767 Crash type: Security exception Crash state: com.alibaba.fastjson2.JSONPathSegment$CycleNameSegment$MapLoop.accept java.base/java.util.ArrayList.forEach java.base/java.nio.charset.CharsetEncoder...

OSV-2024-963 Heap-buffer-overflow in GfxTilingPattern::scanXObjectForBlendMode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68412 Crash type: Heap-buffer-overflow READ 1 Crash state: GfxTilingPattern::scanXObjectForBlendMode GfxTilingPattern::scanSoftMaskForBlendMode GfxTilingPattern::scanExtGStateForBlendMode...

OSV-2024-957 Heap-buffer-overflow in pcpp::computeChecksum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66025 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::computeChecksum pcpp::computePseudoHdrChecksum pcpp::TcpLayer::calculateChecksum...

OSV-2024-955 Use-of-uninitialized-value in pcpp::IPv6Address::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42536479 Crash type: Use-of-uninitialized-value Crash state: pcpp::IPv6Address::toString pcpp::NDPNeighborSolicitationLayer::toString pcpp::Packet::toStringList...

OSV-2024-954 Use-of-uninitialized-value in pcpp::MplsLayer::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68950 Crash type: Use-of-uninitialized-value Crash state: pcpp::MplsLayer::toString FuzzTarget.cpp pcpp::RawPacket::RawPacket...

OSV-2024-953 UNKNOWN READ in pcpp::PcapNgFileReaderDevice::getNextPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69036 Crash type: UNKNOWN READ Crash state: pcpp::PcapNgFileReaderDevice::getNextPacket pcpp::PcapNgFileReaderDevice::getNextPacket FuzzTarget.cpp...

OSV-2024-952 Security exception in org.bouncycastle.asn1.IndefiniteLengthInputStream.read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42536579 Crash type: Security exception Crash state: org.bouncycastle.asn1.IndefiniteLengthInputStream.read org.bouncycastle.asn1.IndefiniteLengthInputStream.checkForEof org.bouncycastle.asn1.IndefiniteLengthInputStream.read...

OSV-2024-951 Index-out-of-bounds in hevc_ref_pic_lists_modification

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71054 Crash type: Index-out-of-bounds Crash state: hevcrefpiclistsmodification gfhevcparsenalubs gfinspectdumpnaluinternal...

OSV-2024-947 Heap-buffer-overflow in pcpp::SomeIpSdEntry::SomeIpSdEntry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68654 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::SomeIpSdEntry::SomeIpSdEntry pcpp::SomeIpSdLayer::getEntries readParsedPacket...

OSV-2024-939 Security exception in org.apache.poi.util.LZWDecompresser.decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70377 Crash type: Security exception Crash state: org.apache.poi.util.LZWDecompresser.decompress org.apache.poi.util.LZWDecompresser.decompress org.apache.poi.hdgf.streams.CompressedStreamStore.decompress...

OSV-2024-930 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70893 Crash type: Security exception Crash state: org.springframework.expression.spel.ast.OpPlus.getValueInternal java.base/sun.reflect.generics.reflectiveObjects.ParameterizedTypeImpl.hashCode...

OSV-2024-925 Index-out-of-bounds in derive_collocated_motion_vectors

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537038 Crash type: Index-out-of-bounds Crash state: derivecollocatedmotionvectors derivetemporallumavectorprediction getmergecandidatelistwithoutstep9...

OSV-2024-919 Heap-buffer-overflow in validate_relpath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66547 Crash type: Heap-buffer-overflow READ 2 Crash state: validaterelpath loadmodulemeta fmodulemeta...

OSV-2024-914 UNKNOWN READ in boost::re_detail_500::basic_regex_formatter<std::__1::ostream_iterator<char, cha

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66851 Crash type: UNKNOWN READ Crash state: boost::redetail500::basicregexformatter boost::red...

OSV-2024-902 Security exception in org.json.JSONArray.writeTo

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69188 Crash type: Security exception Crash state: org.json.JSONArray.writeTo org.json.JSONStringer.value java.base/java.util.ArrayList.elementData...

OSV-2024-891 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69936 Crash type: Security exception Crash state: org.springframework.expression.spel.ast.OpPlus.getValueInternal java.base/java.util.HashMap.get org.springframework.core.convert.TypeDescriptor.valueOf...

OSV-2024-883 Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70999 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst java.base/java.util.stream.ReferencePipeline$3$1.accept...

OSV-2024-879 Security exception in java.base/java.util.Arrays.copyOf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537720 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal java.base/java.lang.AbstractStringBuilder.append...

OSV-2024-868 Use-of-uninitialized-value in evutil_inet_pton

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69173 Crash type: Use-of-uninitialized-value Crash state: evutilinetpton bracketaddrok parseauthority...

OSV-2024-867 Use-of-uninitialized-value in std::__1::ostreambuf_iterator<char, std::__1::char_traits<char>> std::__1::__pad

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68801 Crash type: Use-of-uninitialized-value Crash state: std::1::ostreambufiterator std::1::pad std::1::basicostream& std::1::putchar ostream...

OSV-2024-861 UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537801 Crash type: UNKNOWN READ Crash state: chunkfreeobject gsmemorychunkunwrap gsjmemterm...

OSV-2024-859 Heap-double-free in libssh2_default_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69726 Crash type: Heap-double-free Crash state: libssh2defaultfree diffiehellmanshaalgo kexmethoddiffiehellmangroup14keyexchange...

OSV-2024-856 Use-of-uninitialized-value in cups_fill

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69604 Crash type: Use-of-uninitialized-value Crash state: cupsfill cupsFileRead ippReadIO...

OSV-2024-853 UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537729 Crash type: UNKNOWN READ Crash state: chunkfreeobject pdfiinterpretcontentstream pdfipagerender...

OSV-2024-852 UNKNOWN READ in jvp_object_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68618 Crash type: UNKNOWN READ Crash state: jvpobjectfree jvequal jvequal...

OSV-2024-847 Null-dereference READ in _libssh2_packet_add

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69234 Crash type: Null-dereference READ Crash state: libssh2packetadd fullpacket libssh2transportread...

OSV-2024-838 Bad-cast to RDKit::AtomRDKit::ROMol::initFromOther

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68998 Crash type: Bad-cast Crash state: Bad-cast to RDKit::AtomRDKit::ROMol::initFromOther RDKit::ROMol::ROMol RDKit::RecursiveStructureQuery::copy...

OSV-2024-833 UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70998 Crash type: UNKNOWN READ Crash state: chunkfreeobject sclose sfclose...

OSV-2024-832 UNKNOWN READ in Pistache::Http::Header::Expect::parseRaw

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69151 Crash type: UNKNOWN READ Crash state: Pistache::Http::Header::Expect::parseRaw Pistache::Http::Private::HeadersStep::apply Pistache::Http::Private::ParserBase::parse...

OSV-2024-831 Heap-buffer-overflow in jv_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66929 Crash type: Heap-buffer-overflow READ 4 Crash state: jvparse ftonumber jqnext...

OSV-2024-830 UNKNOWN READ in ShadingImage::generateAxialBitmap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68375 Crash type: UNKNOWN READ Crash state: ShadingImage::generateAxialBitmap ShadingImage::generateBitmap SplashOutputDev::shadedFill...

OSV-2024-828 Use-of-uninitialized-value in packet_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71120 Crash type: Use-of-uninitialized-value Crash state: packetparse FuzzPacket.c...

OSV-2024-817 Use-of-uninitialized-value in pcapint_filter_with_aux_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68862 Crash type: Use-of-uninitialized-value Crash state: pcapintfilterwithauxdata fuzzboth.c pcapintfilterwithauxdata...

OSV-2024-816 Use-of-uninitialized-value in pcpp::SSLClientHelloMessage::ClientHelloTLSFingerprint::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69006 Crash type: Use-of-uninitialized-value Crash state: pcpp::SSLClientHelloMessage::ClientHelloTLSFingerprint::toString pcpp::SSLClientHelloMessage::ClientHelloTLSFingerprint::toStringAndMD5...

OSV-2024-812 Use-of-uninitialized-value in pcpp::PcapFileWriterDevice::writePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68839 Crash type: Use-of-uninitialized-value Crash state: pcpp::PcapFileWriterDevice::writePacket FuzzWriter.cpp...

OSV-2024-805 Use-of-uninitialized-value in pcpp::NflogLayer::parseNextLayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537198 Crash type: Use-of-uninitialized-value Crash state: pcpp::NflogLayer::parseNextLayer pcpp::Packet::setRawPacket FuzzTarget.cpp...

OSV-2024-801 UNKNOWN READ in PointerVector.h

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69391 Crash type: UNKNOWN READ Crash state: PointerVector.h...

OSV-2024-793 Heap-buffer-overflow in H5HL__fl_deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68740 Crash type: Heap-buffer-overflow READ 1 Crash state: H5HLfldeserialize H5HLcachedatablockdeserialize H5Cprotect...

OSV-2024-792 Index-out-of-bounds in AAHD::make_ahd_rb_hv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42536934 Crash type: Index-out-of-bounds Crash state: AAHD::makeahdrbhv AAHD::makeahdrb LibRaw::aahdinterpolate...