OSV-2024-777 Global-buffer-overflow in vte_write_debug

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68562 Crash type: Global-buffer-overflow READ 1 Crash state: vtewritedebug dotrans tsmvteinput...

OSV-2024-772 UNKNOWN READ in H5SL_search

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68989 Crash type: UNKNOWN READ Crash state: H5SLsearch H5FSsectremovereal H5FSsecttryextend...

OSV-2024-764 Use-of-uninitialized-value in _cupsStrAlloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69562 Crash type: Use-of-uninitialized-value Crash state: cupsStrAlloc ippReadIO fuzzipp.c...

OSV-2024-748 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71032 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

OSV-2024-747 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71083 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.CharBuffer.wrap java.base/sun.nio.cs.StreamEncoder.implWrite...

OSV-2024-732 Security exception in com.github.javaparser.ast.visitor.VoidVisitorAdapter.lambda$visit$19

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71009 Crash type: Security exception Crash state: com.github.javaparser.ast.visitor.VoidVisitorAdapter.lambda$visit$19 java.base/java.util.ArrayList.forEach com.github.javaparser.ast.NodeList.forEach...

OSV-2024-728 Negative-size-param in pdf_resize_resource_arrays

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70967 Crash type: Negative-size-param Crash state: pdfresizeresourcearrays processcmaptext pdftextprocess...

OSV-2024-720 Security exception in jflex.core.NFA.insertNFA

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70964 Crash type: Security exception Crash state: jflex.core.NFA.insertNFA java.base/java.lang.ClassLoader.defineClass1 java.base/java.lang.ClassLoader.defineClass...

OSV-2024-719 Heap-buffer-overflow in hevc_ref_pic_lists_modification

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70890 Crash type: Heap-buffer-overflow WRITE 4 Crash state: hevcrefpiclistsmodification gfhevcparsenalubs gfinspectdumpnaluinternal...

OSV-2024-714 Segv on unknown address in lwan_request_get_cookie

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69572 Crash type: Segv on unknown address Crash state: lwanrequestgetcookie fuzzparsehttprequest...

OSV-2024-711 Security exception in org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70826 Crash type: Security exception Crash state: org.antlr.v4.runtime.atn.PredictionContext.fromRuleContext org.antlr.v4.runtime.misc.MurmurHash.update org.antlr.v4.runtime.misc.MurmurHash.update...

OSV-2024-698 Heap-use-after-free in xmlCharEncCloseFunc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70774 Crash type: Heap-use-after-free READ 4 Crash state: xmlCharEncCloseFunc htmlSaveFileFormat parseAndPrintFile...

OSV-2024-696 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70623 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/sun.nio.cs.UTF8.updatePositions java.base/sun.nio.cs.UTF8$Encoder.encodeArrayLoop...

OSV-2024-695 Stack-buffer-overflow in gf_vvc_parse_nalu_bs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70549 Crash type: Stack-buffer-overflow WRITE 4 Crash state: gfvvcparsenalubs gfinspectdumpnaluinternal inspectprocess...

OSV-2024-680 Security exception in com.github.javaparser.GeneratedJavaParser.Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69460 Crash type: Security exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression java.base/java.lang.StringUTF16.compress java.base/java.lang.String...

OSV-2024-679 Heap-buffer-overflow in readImage4v2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70554 Crash type: Heap-buffer-overflow WRITE 1 Crash state: readImage4v2 PCXHandler::read kimgiofuzzer.cc...

OSV-2024-678 Use-of-uninitialized-value in FLAC__replaygain_synthesis__apply_gain

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70482 Crash type: Use-of-uninitialized-value Crash state: FLACreplaygainsynthesisapplygain writecallback readframe...

OSV-2024-677 Segv on unknown address in gs_gc_reclaim

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69038 Crash type: Segv on unknown address Crash state: gsgcreclaim ireclaim interpreclaim...

OSV-2024-675 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70587 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

OSV-2024-668 Security exception in jflex.core.NFA.insertNFA

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70514 Crash type: Security exception Crash state: jflex.core.NFA.insertNFA java.base/java.lang.ClassLoader.defineClass1 java.base/java.lang.ClassLoader.defineClass...

OSV-2024-664 Heap-buffer-overflow in gf_dash_group_get_template

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70342 Crash type: Heap-buffer-overflow WRITE 1 Crash state: gfdashgroupgettemplate gfdashresolveurl gfdashdownloadinitsegment...

OSV-2024-662 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70313 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

OSV-2024-661 Security exception in java.base/java.util.ArrayList.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66137 Crash type: Security exception Crash state: java.base/java.util.ArrayList. org.apache.poi.xssf.eventusermodel.ReadOnlySharedStringsTable.startElement...

OSV-2024-659 Index-out-of-bounds in gf_vvc_parse_nalu_bs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70392 Crash type: Index-out-of-bounds Crash state: gfvvcparsenalubs gfinspectdumpnaluinternal inspectprocess...

OSV-2024-655 Stack-buffer-overflow in UnrollChunkyBytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70395 Crash type: Stack-buffer-overflow READ 1 Crash state: UnrollChunkyBytes CachedXFORM cmsDoTransform...

OSV-2024-641 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70141 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.HeapCharBuffer. java.base/java.nio.CharBuffer.wrap...

OSV-2024-640 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69261 Crash type: Null-dereference READ Crash state: NULL...

OSV-2024-638 Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68807 Crash type: Heap-buffer-overflow WRITE Crash state: ih264dformatconvert ih264ddecodepicturethread...

OSV-2024-637 Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69682 Crash type: Heap-buffer-overflow WRITE Crash state: ih264dformatconvert isvcdvideodecode isvcdapifunction...

OSV-2024-636 Null-dereference READ in evp_mac_final

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69236 Crash type: Null-dereference READ Crash state: evpmacfinal kbkdfderive doevpkdf...

OSV-2024-635 Null-dereference READ in do_evp_kdf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69243 Crash type: Null-dereference READ Crash state: doevpkdf FuzzerTestOneInput...

OSV-2024-634 Heap-buffer-overflow in htmlCurrentChar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70297 Crash type: Heap-buffer-overflow READ 1 Crash state: htmlCurrentChar htmlParseCharData htmlParseContentInternal...

OSV-2024-627 Heap-buffer-overflow in gf_hevc_parse_nalu_bs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70105 Crash type: Heap-buffer-overflow READ 1 Crash state: gfhevcparsenalubs gfinspectdumpnaluinternal inspectprocess...

OSV-2024-602 Heap-buffer-overflow in ultrahdr::getYuv420Pixel

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69287 Crash type: Heap-buffer-overflow READ 1 Crash state: ultrahdr::getYuv420Pixel std::1::function::funcultrahdr::JpegR::applyGainMap ultrahdr::JpegR::applyGainMap...

OSV-2024-592 UNKNOWN READ in spvtools::disassemble::InstructionDisassembler::EmitInstruction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69804 Crash type: UNKNOWN READ Crash state: spvtools::disassemble::InstructionDisassembler::EmitInstruction spvtools::DisassembleInstruction Parser::parseInstruction...

OSV-2024-577 Heap-use-after-free in sputs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69793 Crash type: Heap-use-after-free READ Crash state: sputs xpswriteprofile xpsbegintypedimage...

OSV-2024-575 UNKNOWN READ in H5SL_remove

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69242 Crash type: UNKNOWN READ Crash state: H5SLremove H5FSsectunlinkrest H5FSsectfind...

OSV-2024-574 Heap-buffer-overflow in spvtools::disassemble::InstructionDisassembler::EmitInstruction

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69549 Crash type: Heap-buffer-overflow READ 1 Crash state: spvtools::disassemble::InstructionDisassembler::EmitInstruction spvtools::DisassembleInstruction Parser::parseModule...

OSV-2024-567 Security exception in jflex.core.NFA.insertNFA

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69587 Crash type: Security exception Crash state: jflex.core.NFA.insertNFA jflex.core.unicode.IntCharSet.indexOf jflex.core.unicode.IntCharSet.contains...

OSV-2024-555 Heap-buffer-overflow in ArduinoJson::V704HB22::detail::MsgPackDeserializer<ArduinoJson::V704HB22::detail

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69497 Crash type: Heap-buffer-overflow WRITE 1 Crash state: ArduinoJson::V704HB22::detail::MsgPackDeserializerArduinoJson::V704HB22::detail ArduinoJson::V704HB22::DeserializationError::Code ArduinoJson::V704HB22::detail:...

OSV-2024-552 UNKNOWN READ in ndpi_search_zoom

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69520 Crash type: UNKNOWN READ Crash state: ndpisearchzoom checkndpidetectionfunc ndpidetectionprocesspacket...

OSV-2024-551 Heap-buffer-overflow in mz_zip_mem_read_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69531 Crash type: Heap-buffer-overflow READ Crash state: mzzipmemreadfunc mzzipvalidatefile zipfuzzer.c...

OSV-2024-550 Heap-buffer-overflow in mz_zip_mem_read_func

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69528 Crash type: Heap-buffer-overflow READ Crash state: mzzipmemreadfunc mzzipreaderreadcentraldir mzzipreaderinitmem...

OSV-2024-548 Use-of-uninitialized-value in icalmemory_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69527 Crash type: Use-of-uninitialized-value Crash state: icalmemorystrdup icalparameternewfromvaluestring icalparseraddline...

OSV-2024-539 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69451 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

OSV-2024-538 Use-of-uninitialized-value in QUICVariableInt::size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69001 Crash type: Use-of-uninitialized-value Crash state: QUICVariableInt::size Http3SettingsFrame::Http3SettingsFrame Http3FrameFactory::create...

OSV-2024-535 Use-of-uninitialized-value in spvTextEncodeOperand

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69388 Crash type: Use-of-uninitialized-value Crash state: spvTextEncodeOperand spvTextEncodeOpcode spvTextToBinaryWithOptions...

OSV-2024-528 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69348 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel...

OSV-2024-523 Stack-buffer-overflow in findstrings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69357 Crash type: Stack-buffer-overflow WRITE 1 Crash state: findstrings searchstringsupdate cmdmeta...

OSV-2024-521 Heap-buffer-overflow in ubidi_writeReordered_76

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68624 Crash type: Heap-buffer-overflow READ 1 Crash state: ubidiwriteReordered76 ubidifuzzer.cpp...