OSV-2023-1208 Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64438 Crash type: Heap-buffer-overflow WRITE Crash state: ih264dformatconvert ih264ddecodepicturethread...

OSV-2023-1207 Heap-buffer-overflow in isvcd_start_of_pic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64436 Crash type: Heap-buffer-overflow WRITE Crash state: isvcdstartofpic isvcdparsedecodeslice isvcdparsenalunit...

OSV-2023-1206 Heap-buffer-overflow in ih264d_format_convert

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64432 Crash type: Heap-buffer-overflow WRITE Crash state: ih264dformatconvert isvcdvideodecode isvcdapifunction...

OSV-2023-1205 Heap-buffer-overflow in isvcd_populate_res_prms

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64431 Crash type: Heap-buffer-overflow WRITE 1 Crash state: isvcdpopulateresprms isvcdparseinterlayerresampfuncinit isvcdmarkerrsliceskip...

OSV-2023-1203 Global-buffer-overflow in dissect_zcl_read_attr_struct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64363 Crash type: Global-buffer-overflow READ 4 Crash state: dissectzclreadattrstruct dissectzbeezcl calldissectorwork...

OSV-2023-1201 Negative-size-param in pcpp::RawPacket::insertData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64418 Crash type: Negative-size-param Crash state: pcpp::RawPacket::insertData pcpp::Packet::extendLayer pcpp::BgpUpdateMessageLayer::setNetworkLayerReachabilityInfo...

OSV-2023-1195 Security exception in java.base/java.util.HashMap.resize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64367 Crash type: Security exception Crash state: java.base/java.util.HashMap.resize java.base/java.util.HashMap.putVal java.base/java.util.HashMap.put...

OSV-2023-1186 Heap-use-after-free in dxf_tables_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64318 Crash type: Heap-use-after-free READ 8 Crash state: dxftablesread dwgreaddxf llvmfuzz.c...

OSV-2023-1184 Global-buffer-overflow in dissect_zcl_read_attr_struct

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64290 Crash type: Global-buffer-overflow READ 4 Crash state: dissectzclreadattrstruct dissectzbeezcl calldissectorworkerror...

OSV-2023-1180 Heap-buffer-overflow in ih264d_sev

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64286 Crash type: Heap-buffer-overflow READ 4 Crash state: ih264dsev ih264dparsefgc ih264dparseseipayload...

OSV-2023-1179 Index-out-of-bounds in iaace_calc_sfb_dist

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64267 Crash type: Index-out-of-bounds Crash state: iaacecalcsfbdist iaaceestimatescfschan iaenhaacplusencqcmain...

OSV-2023-1177 Heap-buffer-overflow in Gfx::ICC::TextDescriptionTagData::from_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64219 Crash type: Heap-buffer-overflow READ 1 Crash state: Gfx::ICC::TextDescriptionTagData::frombytes Gfx::ICC::Profile::tryloadfromexternallyownedmemory FuzzICCProfile.cpp...

OSV-2023-1174 Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64237 Crash type: Stack-buffer-overflow READ 5 Crash state: std::1::basicstring, std::1::allocatorch pcpp::NtpLayer::getReferenceIdentifierString readParsedPacket...

OSV-2023-1173 Heap-buffer-overflow in fill_lines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64218 Crash type: Heap-buffer-overflow READ 1 Crash state: filllines rbdumpbacktracewithlines rbvmbugreport...

OSV-2023-1172 Heap-buffer-overflow in pcpp::TLVRecordReader<pcpp::TcpOption>::getTLVRecord

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64205 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::TLVRecordReader::getTLVRecord pcpp::TcpLayer::addTcpOptionAfter readParsedPacket...

OSV-2023-1171 Heap-buffer-overflow in pcpp::SomeIpSdLayer::SomeIpSdLayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64190 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::SomeIpSdLayer::SomeIpSdLayer pcpp::SomeIpLayer::parseSomeIpLayer pcpp::SomeIpLayer::parseNextLayer...

OSV-2023-1170 UNKNOWN READ in loader_log

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42530193 Crash type: UNKNOWN READ Crash state: loaderlog loaderscannedicdadd loadericdscan...

OSV-2023-1169 Heap-buffer-overflow in epassNUMBER_pkcs15_generate_key

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64215 Crash type: Heap-buffer-overflow READ Crash state: epassNUMBERpkcs15generatekey scpkcs15initgeneratekey dogeneratekey...

OSV-2023-1168 Heap-buffer-overflow in pcpp::PPP_PPTPLayer::computeCalculateFields

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64196 Crash type: Heap-buffer-overflow WRITE 2 Crash state: pcpp::PPPPPTPLayer::computeCalculateFields pcpp::Packet::computeCalculateFields FuzzTarget.cpp...

OSV-2023-1167 UNKNOWN WRITE in php_strip_url_passwd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64209 Crash type: UNKNOWN WRITE Crash state: phpstripurlpasswd phpmessagehandlerforzend zendmessagedispatcher...

OSV-2023-1166 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64176 Crash type: Memcpy-param-overlap Crash state: repeat pere pere...

OSV-2023-1164 Heap-buffer-overflow in WriteCLUT

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64166 Crash type: Heap-buffer-overflow READ 4 Crash state: WriteCLUT cmsGetPostScriptColorResource cmsGetPostScriptCRD...

OSV-2023-1163 Invalid-free in sc_file_clear_acl_entries

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64181 Crash type: Invalid-free Crash state: scfileclearaclentries scfilefree setcoscreatekey...

OSV-2023-1161 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64151 Crash type: Heap-buffer-overflow READ Crash state: std::1::basicstring, std::1::allocatorch Exiv2::QuickTimeVideo::NikonTagsDecoder Exiv2::QuickTimeVideo::userDataDecoder...

OSV-2023-1160 Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64147 Crash type: Heap-buffer-overflow READ 1 Crash state: IEC104Stats::processPacket Flow::processIEC60870Packet NetworkInterface::processPacket...

OSV-2023-1157 Security exception in org.apache.lucene.util.ArrayUtil.growExact

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64141 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.growExact org.apache.lucene.util.ArrayUtil.grow org.apache.lucene.util.BytesRefBuilder.grow...

OSV-2023-1154 Heap-buffer-overflow in pcpp::SomeIpSdEntry::SomeIpSdEntry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64127 Crash type: Heap-buffer-overflow READ 4 Crash state: pcpp::SomeIpSdEntry::SomeIpSdEntry pcpp::SomeIpSdLayer::getEntries readParsedPacket...

OSV-2023-1153 Heap-buffer-overflow in pcpp::SSLClientHelloMessage::getCipherSuite

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64124 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::SSLClientHelloMessage::getCipherSuite readParsedPacket FuzzTarget.cpp...

OSV-2023-1152 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64130 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.ByteBuffer.position java.base/sun.nio.cs.UTF8.updatePositions...

OSV-2023-1150 Heap-buffer-overflow in pcpp::computeChecksum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64122 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::computeChecksum pcpp::IPv4Layer::computeCalculateFields pcpp::Packet::computeCalculateFields...

OSV-2023-1149 Heap-buffer-overflow in bit_read_fixed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64118 Crash type: Heap-buffer-overflow READ 16 Crash state: bitreadfixed bitreadTF decodepreR13sentinel...

OSV-2023-1147 Heap-buffer-overflow in parse_by_block_type

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64114 Crash type: Heap-buffer-overflow READ Crash state: parsebyblocktype lightreadrecord lightgetnextpacket...

OSV-2023-1146 Negative-size-param in pcpp::RawPacket::insertData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64111 Crash type: Negative-size-param Crash state: pcpp::RawPacket::insertData pcpp::Packet::extendLayer pcpp::BgpUpdateMessageLayer::setNetworkLayerReachabilityInfo...

OSV-2023-1145 Heap-buffer-overflow in pcpp::GREv1Layer::computeCalculateFields

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64110 Crash type: Heap-buffer-overflow WRITE 2 Crash state: pcpp::GREv1Layer::computeCalculateFields pcpp::Packet::computeCalculateFields FuzzTarget.cpp...

OSV-2023-1140 Heap-buffer-overflow in H5MM_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64092 Crash type: Heap-buffer-overflow READ Crash state: H5MMstrdup H5Gstabgetnamebyidxcb H5Gnodebyidx...

OSV-2023-1136 Security exception in org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64051 Crash type: Security exception Crash state: org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.readRecordSID...

OSV-2023-1135 Segv on unknown address in flb_sds_cat_safe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64049 Crash type: Segv on unknown address Crash state: flbsdscatsafe flbcfkeytranslate flbcfsectionpropertyadd...

OSV-2023-1129 UNKNOWN READ in HeifPixelImage::overlay

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63990 Crash type: UNKNOWN READ Crash state: HeifPixelImage::overlay HeifContext::decodeoverlayimage HeifContext::decodeimageplanar...

OSV-2023-1126 Heap-buffer-overflow in iasecc_parse_acls

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63949 Crash type: Heap-buffer-overflow READ 1 Crash state: iaseccparseacls iaseccparsedocp iaseccsdoparsedata...

OSV-2023-1124 UNKNOWN READ in cmsIT8GetDataRowColDbl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63954 Crash type: UNKNOWN READ Crash state: cmsIT8GetDataRowColDbl cmscgatsfuzzer.c...

OSV-2023-1122 Stack-buffer-overflow in dxf_header_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63919 Crash type: Stack-buffer-overflow READ Crash state: dxfheaderread dwgreaddxf llvmfuzz.c...

OSV-2023-1121 Security exception in org.apache.poi.util.LZWDecompresser.decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63925 Crash type: Security exception Crash state: org.apache.poi.util.LZWDecompresser.decompress org.apache.poi.util.LZWDecompresser.decompress org.apache.poi.hdgf.streams.CompressedStreamStore.decompress...

OSV-2023-1119 Segv on unknown address in FunctionCompiler::compileReturn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63885 Crash type: Segv on unknown address Crash state: FunctionCompiler::compileReturn WasmEdge::AOT::Compiler::compile WasmEdge::AOT::Compiler::compile...

OSV-2023-1117 Heap-buffer-overflow in cmsMLUsetWide

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63861 Crash type: Heap-buffer-overflow READ 4 Crash state: cmsMLUsetWide TypeTextDescriptionRead cmsReadTag...

OSV-2023-1115 Use-of-uninitialized-value in fp_uninit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63867 Crash type: Use-of-uninitialized-value Crash state: fpuninit cryptofuzz::module::libecc::OpECCValidatePubkey cryptofuzz::ExecutorBase::callM...

OSV-2023-1110 Stack-buffer-overflow in dynapi_set_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63824 Crash type: Stack-buffer-overflow READ Crash state: dynapisethelper dwgdynapiheadersetvalue jsonHEADER...

OSV-2023-1104 Heap-buffer-overflow in bit_read_RC

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63814 Crash type: Heap-buffer-overflow READ 1 Crash state: bitreadRC bitreadfixed bitreadTF...

OSV-2023-1103 Heap-buffer-overflow in OpenType::be_u32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63777 Crash type: Heap-buffer-overflow READ 1 Crash state: OpenType::beu32 OpenType::Cmap::subtable OpenType::Font::tryloadfromoffset...

OSV-2023-1101 Heap-buffer-overflow in decode_preR13_entities

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63776 Crash type: Heap-buffer-overflow READ 10 Crash state: decodepreR13entities decodepreR13 dwgdecode...

OSV-2023-1099 Heap-buffer-overflow in dwg_geojson_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63761 Crash type: Heap-buffer-overflow READ 8 Crash state: dwggeojsonobject dwgwritegeojson llvmfuzz.c...