4483 matches found
OSV-2024-518 Security exception in com.github.javaparser.CommentsInserter.insertComments
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69307 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...
OSV-2024-517 Segv on unknown address in od_ec_dec_init
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68774 Crash type: Segv on unknown address Crash state: odecdecinit aomreaderinit av1decodetgtilesandwrapup...
OSV-2024-504 Heap-buffer-overflow in ultrahdr::getYuv420Pixel
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69101 Crash type: Heap-buffer-overflow READ 1 Crash state: ultrahdr::getYuv420Pixel std::1::function::funcultrahdr::JpegR::applyGainMap ultrahdr::JpegR::applyGainMap...
OSV-2024-503 Heap-buffer-overflow in pdf_save_viewer_state
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69157 Crash type: Heap-buffer-overflow WRITE 8 Crash state: pdfsaveviewerstate streamtotext pdfopenpage...
OSV-2024-496 UNKNOWN READ in chunk_free_object
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68460 Crash type: UNKNOWN READ Crash state: chunkfreeobject gsmemorychunkunwrap gsjmemterm...
OSV-2024-495 UNKNOWN READ in chunk_free_object
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68497 Crash type: UNKNOWN READ Crash state: chunkfreeobject szlibfree inflateEnd...
OSV-2024-493 UNKNOWN READ in chunk_free_object
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68425 Crash type: UNKNOWN READ Crash state: chunkfreeobject streamdctfinalize chunkfreeobject...
OSV-2024-490 Security exception in com.github.javaparser.CommentsInserter.insertComments
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68929 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...
OSV-2024-477 Heap-buffer-overflow in ultrahdr::gain_map_metadata::decodeGainmapMetadata
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68933 Crash type: Heap-buffer-overflow READ 1 Crash state: ultrahdr::gainmapmetadata::decodeGainmapMetadata ultrahdr::JpegR::decodeJPEGR UltraHdrDecFuzzer::process...
OSV-2024-476 Heap-buffer-overflow in ultrahdr::getYuv420Pixel
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68946 Crash type: Heap-buffer-overflow READ 1 Crash state: ultrahdr::getYuv420Pixel std::1::function::funcultrahdr::JpegR::applyGainMap ultrahdr::JpegR::applyGainMap...
OSV-2024-473 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68940 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/sun.nio.cs.StreamEncoder.implWrite java.base/sun.nio.cs.StreamEncoder.write...
OSV-2024-471 Use-of-uninitialized-value in vpx_codec_peek_stream_info
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68912 Crash type: Use-of-uninitialized-value Crash state: vpxcodecpeekstreaminfo vpxdecfuzzer.cc vpxdecfuzzer.cc...
OSV-2024-469 Heap-buffer-overflow in check_content_type_and_change_protocol
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68932 Crash type: Heap-buffer-overflow READ Crash state: checkcontenttypeandchangeprotocol processrequest ndpicheckhttptcp...
OSV-2024-465 Security exception in com.drew.imaging.tiff.TiffReader.processIfd
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68845 Crash type: Security exception Crash state: com.drew.imaging.tiff.TiffReader.processIfd java.base/java.lang.Throwable.printStackTrace com.codeintelligence.jazzer.api.Jazzer.guideTowardsEquality...
OSV-2024-460 UNKNOWN READ in glslang::TInfoSinkBase::location
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68613 Crash type: UNKNOWN READ Crash state: glslang::TInfoSinkBase::location glslang::TParseContextBase::outputMessage glslang::TParseContextBase::error...
OSV-2024-456 Heap-buffer-overflow in ih264d_read_coeff4x4_cabac
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66989 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dreadcoeff4x4cabac ih264dparseresidual4x4cabac ih264dparseimbcabac...
OSV-2024-453 Use-of-uninitialized-value in encode_base64_differential
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68663 Crash type: Use-of-uninitialized-value Crash state: encodebase64differential fuzz-crypto.c...
OSV-2024-451 Use-of-uninitialized-value in XpackDynamicTable::_make_space
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66347 Crash type: Use-of-uninitialized-value Crash state: XpackDynamicTable::makespace XpackDynamicTable::insertentry XpackDynamicTable::insertentry...
OSV-2024-450 Use-of-uninitialized-value in ink_filepath_merge
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68468 Crash type: Use-of-uninitialized-value Crash state: inkfilepathmerge layoutrelative Layout::Layout...
OSV-2024-449 Use-of-uninitialized-value in YAML::Stream::Stream
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68461 Crash type: Use-of-uninitialized-value Crash state: YAML::Stream::Stream YAML::Scanner::Scanner YAML::Parser::Load...
OSV-2024-445 Security exception in com.github.javaparser.CommentsInserter.insertComments
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68730 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.lang.String.charAt java.base/sun.invoke.util.Wrapper.hashPrim...
OSV-2024-440 UNKNOWN READ
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66323 Crash type: UNKNOWN READ Crash state: NULL...
OSV-2024-434 Use-of-uninitialized-value in validate_bluetooth_device_address
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68420 Crash type: Use-of-uninitialized-value Crash state: validatebluetoothdeviceaddress handleonbluetoothdeviceadded fuzzeronbluetoothdeviceadded...
OSV-2024-432 Use-of-uninitialized-value in ssl_ctx_make_profiles
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68524 Crash type: Use-of-uninitialized-value Crash state: sslctxmakeprofiles std::1::function::funcLLVMFuzzerTestOneInput::$39, std::1::allocatorL function.h...
OSV-2024-431 Use-of-uninitialized-value in Lexer::ReadToken
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68581 Crash type: Use-of-uninitialized-value Crash state: Lexer::ReadToken Lexer::PeekToken ManifestParser::ParseRule...
OSV-2024-430 Use-of-uninitialized-value in ssl_str_to_group_ids
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68473 Crash type: Use-of-uninitialized-value Crash state: sslstrtogroupids SSLCTXset1groupslist std::1::function::funcLLVMFuzzerTestOneInput::$34, std::1::allocatorL...
OSV-2024-423 Use-of-uninitialized-value in Lexer::Error
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68680 Crash type: Use-of-uninitialized-value Crash state: Lexer::Error Parser::ExpectToken ManifestParser::ParseLet...
OSV-2024-422 Use-of-uninitialized-value in cdc_task
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68505 Crash type: Use-of-uninitialized-value Crash state: cdctask fuzz.cc std::1::basicstring, std::1::allocatorch...
OSV-2024-420 Use-of-uninitialized-value in Lexer::Error
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68397 Crash type: Use-of-uninitialized-value Crash state: Lexer::Error ManifestParser::ParseRule ManifestParser::Parse...
OSV-2024-417 Use-of-uninitialized-value in bssl::ssl_cipher_process_rulestr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68441 Crash type: Use-of-uninitialized-value Crash state: bssl::sslcipherprocessrulestr bssl::sslcreatecipherlist SSLCTXsetcipherlist...
OSV-2024-409 Use-of-uninitialized-value in Lexer::ReadToken
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68486 Crash type: Use-of-uninitialized-value Crash state: Lexer::ReadToken ManifestParser::Parse Parser::Load...
OSV-2024-404 Use-of-uninitialized-value in avifSequenceHeaderParse
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68568 Crash type: Use-of-uninitialized-value Crash state: avifSequenceHeaderParse avifDecoderReset avifDecoderParse...
OSV-2024-403 UNKNOWN READ in mem_planar_put_image_slow
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68566 Crash type: UNKNOWN READ Crash state: memplanarputimageslow pdf14cmykspotputimage gxupdatepdf14compositor...
OSV-2024-402 Stack-buffer-overflow in SwiftProtobuf.TextFormatScanner.
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68485 Crash type: Stack-buffer-overflow READ 1 Crash state: SwiftProtobuf.TextFormatScanner. SwiftProtobuf.TextFormatScanner. function signature specialization Arg...
OSV-2024-400 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68380 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/sun.nio.cs.UTF8.updatePositions java.base/sun.nio.cs.UTF8$Encoder.encodeArrayLoop...
OSV-2024-398 Use-of-uninitialized-value in wabt::BinaryReaderObjdump::PrintInitExpr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65975 Crash type: Use-of-uninitialized-value Crash state: wabt::BinaryReaderObjdump::PrintInitExpr wabt::BinaryReaderObjdump::EndInitExpr wabt::BinaryReaderObjdump::EndGlobalInitExpr...
OSV-2024-396 UNKNOWN READ in jvp_object_free
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65942 Crash type: UNKNOWN READ Crash state: jvpobjectfree jvfree jvequal...
OSV-2024-395 Use-of-uninitialized-value in pcapint_filter_with_aux_data
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66124 Crash type: Use-of-uninitialized-value Crash state: pcapintfilterwithauxdata pcapintfilter pcapofflinefilter...
OSV-2024-393 Heap-buffer-overflow in pcpp::BgpLayer::getHeaderLen
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67346 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::BgpLayer::getHeaderLen pcpp::Packet::shortenLayer pcpp::BgpUpdateMessageLayer::setPathAttributes...
OSV-2024-391 Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68324 Crash type: Security exception Crash state: org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII...
OSV-2024-390 Heap-buffer-overflow in H5O__cache_chk_serialize
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67889 Crash type: Heap-buffer-overflow READ Crash state: H5Ocachechkserialize H5Cgenerateimage H5Cflushsingleentry...
OSV-2024-389 Heap-buffer-overflow in JS_CallInternal
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67611 Crash type: Heap-buffer-overflow READ 1 Crash state: JSCallInternal asyncfuncresume jsasyncfunctionresume...
OSV-2024-387 Heap-buffer-overflow in H5F_addr_encode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68301 Crash type: Heap-buffer-overflow WRITE 1 Crash state: H5Faddrencode H5Ofsinfoencode H5Omsgflush...
OSV-2024-384 Heap-use-after-free in json_fixed_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67528 Crash type: Heap-use-after-free WRITE 11 Crash state: jsonfixedstring jsonRNUMBERHeader dwgreadjson...
OSV-2024-382 UNKNOWN READ in pcpp::Packet::destructPacketData
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67193 Crash type: UNKNOWN READ Crash state: pcpp::Packet::destructPacketData Packet.h...
OSV-2024-381 Heap-buffer-overflow in H5F__accum_free
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67852 Crash type: Heap-buffer-overflow READ Crash state: H5Faccumfree H5MFxfree H5MFfreeaggrs...
OSV-2024-380 Heap-use-after-free in H5FL__blk_gc_list
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67830 Crash type: Heap-use-after-free READ 8 Crash state: H5FLblkgclist H5FLblkfree H5Ofree...
OSV-2024-379 UNKNOWN READ in H5SL_first
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67923 Crash type: UNKNOWN READ Crash state: H5SLfirst H5FSsectfind H5MFfindsect...
OSV-2024-372 Security exception in java.base/java.util.Arrays.copyOf
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67413 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal java.base/java.lang.AbstractStringBuilder.append...