OSV-2023-528 Memcpy-param-overlap in pdfi_copy_truetype_font

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60204 Crash type: Memcpy-param-overlap Crash state: pdficopytruetypefont pdfiloadfont pdfiloaddictfont...

OSV-2023-527 Heap-buffer-overflow in default_get_outline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60207 Crash type: Heap-buffer-overflow READ 4 Crash state: defaultgetoutline pdfifapigetglyph getfapiglyphdata...

OSV-2023-525 Security exception in jaz.Zer.reportFinding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60167 Crash type: Security exception Crash state: jaz.Zer.reportFinding jaz.Zer.reportFindingIfEnabled jaz.Zer...

OSV-2023-522 Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60156 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf com.codeintelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrfSocket...

OSV-2023-521 Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60179 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf com.codeintelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrfSocket...

OSV-2023-518 Security exception in com.code_intelligence.jazzer.sanitizers.XPathInjection.checkXpathExecute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60148 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.XPathInjection.checkXpathExecute org.hamcrest.xml.HasXPath.compiledXPath org.hamcrest.xml.HasXPath...

OSV-2023-517 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60112 Crash type: Security exception Crash state: org.springframework.expression.spel.ast.OpPlus.getValueInternal java.base/sun.reflect.generics.reflectiveObjects.TypeVariableImpl.hashCode java.base/java.util.Arrays.hashCode...

OSV-2023-512 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60091 Crash type: Memcpy-param-overlap Crash state: repeat pere cliregcompreal...

OSV-2022-1277 Heap-use-after-free in mk_event_timeout_destroy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60089 Crash type: Heap-use-after-free WRITE 8 Crash state: mkeventtimeoutdestroy flbscheddestroy flbconfigexit...

OSV-2023-510 Heap-buffer-overflow in uofs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60056 Crash type: Heap-buffer-overflow READ 1 Crash state: uofs pdfifindcffindex pdfireadcfffont...

OSV-2023-509 Heap-buffer-overflow in ndpi_search_thrift_tcp_udp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60070 Crash type: Heap-buffer-overflow WRITE Crash state: ndpisearchthrifttcpudp checkndpidetectionfunc ndpicheckflowfunc...

OSV-2023-508 Heap-buffer-overflow in AffixMgr::compound_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60034 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::compoundcheck AffixMgr::compoundcheck AffixMgr::compoundcheck...

OSV-2023-507 Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60037 Crash type: Heap-buffer-overflow READ 2 Crash state: IEC104Stats::processPacket Flow::processIEC60870Packet NetworkInterface::processPacket...

OSV-2023-506 Use-of-uninitialized-value in dev_io_capture

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60019 Crash type: Use-of-uninitialized-value Crash state: deviocapture deviorun audioiothread...

OSV-2023-505 UNKNOWN WRITE in regcomp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60010 Crash type: UNKNOWN WRITE Crash state: regcomp fileregcomp load1...

OSV-2023-504 Heap-buffer-overflow in ndpi_search_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60003 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpisearchline checkndpidetectionfunc ndpicheckflowfunc...

OSV-2023-501 UNKNOWN READ in _dwarf_exec_frame_instr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59950 Crash type: UNKNOWN READ Crash state: dwarfexecframeinstr dwarfgetfdeinfoforapcrow dwarfgetfdeinfoforallregs3...

OSV-2023-500 Heap-buffer-overflow in stbiw__encode_png_line

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42525448 Crash type: Heap-buffer-overflow READ 1 Crash state: stbiwencodepngline stbiwritepngtomem Ogre::STBIImageCodec::encode...

OSV-2023-499 Heap-use-after-free in obj_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59931 Crash type: Heap-use-after-free READ 4 Crash state: objfree incrementalgc mrbincrementalgc...

OSV-2023-497 Stack-buffer-overflow in parse_regex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59907 Crash type: Stack-buffer-overflow READ 1 Crash state: parseregex parseregex parseregex...

OSV-2023-495 Heap-buffer-overflow in utf8ToUtf16

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59884 Crash type: Heap-buffer-overflow WRITE 2 Crash state: utf8ToUtf16 utf8ToUtf16WithBom Lexer::getObj...

OSV-2023-490 UNKNOWN READ in pcpp::SSHIdentificationMessage::tryParse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59833 Crash type: UNKNOWN READ Crash state: pcpp::SSHIdentificationMessage::tryParse pcpp::SSHLayer::createSSHMessage pcpp::SSHLayer::parseNextLayer...

OSV-2022-1276 Stack-buffer-overflow in ntlm_phase_3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59818 Crash type: Stack-buffer-overflow WRITE 1 Crash state: ntlmphase3 establishhttpproxypassthru fuzzproxy.c...

OSV-2023-483 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59786 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

OSV-2023-480 Heap-buffer-overflow in NetworkInterface::dissectPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59745 Crash type: Heap-buffer-overflow READ 2 Crash state: NetworkInterface::dissectPacket fuzzdissectpacket.cpp...

OSV-2023-477 Global-buffer-overflow in htmlParseHTMLAttribute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59718 Crash type: Global-buffer-overflow READ 1 Crash state: htmlParseHTMLAttribute htmlParseStartTag htmlParseContentInternal...

OSV-2023-474 Global-buffer-overflow in xmlDictLookup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59701 Crash type: Global-buffer-overflow READ 1 Crash state: xmlDictLookup xmlParseNCName xmlParseQName...

OSV-2023-472 Heap-buffer-overflow in TestFuzzCommonAssistanceParseFileBuffer.c

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59682 Crash type: Heap-buffer-overflow WRITE Crash state: TestFuzzCommonAssistanceParseFileBuffer.c...

OSV-2023-471 Heap-buffer-overflow in H5FS__sinfo_serialize_node_cb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59695 Crash type: Heap-buffer-overflow WRITE 1 Crash state: H5FSsinfoserializenodecb H5SLiterate H5FScachesinfoserialize...

OSV-2023-470 Heap-use-after-free in psi_device_ref_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59661 Crash type: Heap-use-after-free READ 8 Crash state: psidevicereffinalize gsgcreclaim ireclaim...

OSV-2023-467 Stack-buffer-overflow in SetPitchGradient

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59636 Crash type: Stack-buffer-overflow WRITE 1 Crash state: SetPitchGradient calcpitches CalcPitches...

OSV-2023-462 Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59625 Crash type: Heap-buffer-overflow READ 1 Crash state: IEC104Stats::processPacket Flow::processIEC60870Packet Flow::processPacket...

OSV-2023-460 Segv on unknown address in config__bridge_cleanup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59604 Crash type: Segv on unknown address Crash state: configbridgecleanup configcleanup mosquittofuzzmain...

OSV-2023-458 Invalid-free in hb_free_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59592 Crash type: Invalid-free Crash state: hbfreeimpl OT::glyf::freecompiledsubsetglyphs OT::glyf::subset...

OSV-2023-455 Heap-buffer-overflow in bit_TV_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59571 Crash type: Heap-buffer-overflow WRITE 1 Crash state: bitTVtoutf8 jsoncquote dwggeojsonfeature...

OSV-2023-453 UNKNOWN READ in ih264e_cabac_put_byte

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59543 Crash type: UNKNOWN READ Crash state: ih264ecabacputbyte ih264ecabacencodebin ih264ewritepslicembcabac...

OSV-2023-452 Heap-buffer-overflow in json_write_TF

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59523 Crash type: Heap-buffer-overflow READ Crash state: jsonwriteTF dwgjsonLTYPE jsonobjectswrite...

OSV-2023-451 Heap-buffer-overflow in BundlePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59498 Crash type: Heap-buffer-overflow WRITE 9 Crash state: BundlePacket SendChannelExit wolfSSHshutdown...

OSV-2023-445 Heap-buffer-overflow in LossyDctDecoder_execute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59457 Crash type: Heap-buffer-overflow READ 2 Crash state: LossyDctDecoderexecute DwaCompressoruncompress internalexrundodwaa...

OSV-2023-444 Heap-buffer-overflow in opj_jp2_apply_pclr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59450 Crash type: Heap-buffer-overflow READ 4 Crash state: opjjp2applypclr opjjp2decode cv::detail::Jpeg2KOpjDecoderBase::readData...

OSV-2023-443 Use-after-poison in file_is_simh

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59438 Crash type: Use-after-poison READ 4 Crash state: fileissimh filebuffer magicbuffer...

OSV-2023-440 Heap-double-free in dwg_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59428 Crash type: Heap-double-free Crash state: dwgfreeobject dwgfree llvmfuzz.c...

OSV-2023-437 Heap-buffer-overflow in internal_huf_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59382 Crash type: Heap-buffer-overflow READ 1 Crash state: internalhufdecompress DwaCompressoruncompress internalexrundodwaa...

OSV-2023-436 Heap-buffer-overflow in ndpi_check_punycode_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59393 Crash type: Heap-buffer-overflow READ 1 Crash state: ndpicheckpunycodestring ndpimatchhostsubprotocol checkcontenttypeandchangeprotocol...

OSV-2022-1275 Security exception in java.desktop/java.awt.image.DataBufferInt.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59354 Crash type: Security exception Crash state: java.desktop/java.awt.image.DataBufferInt. java.desktop/java.awt.image.Raster.createPackedRaster java.desktop/java.awt.image.DirectColorModel.createCompatibleWritableRaster...

OSV-2023-430 Heap-buffer-overflow in H5MM_xstrdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59295 Crash type: Heap-buffer-overflow READ 5 Crash state: H5MMxstrdup H5Genttolink H5Gstablookupcb...

OSV-2023-426 Heap-buffer-overflow in libdeflate_zlib_decompress_ex

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59267 Crash type: Heap-buffer-overflow READ 2 Crash state: libdeflatezlibdecompressex exruncompressbuffer DwaCompressoruncompress...

OSV-2023-425 Heap-buffer-overflow in ICMPinfo::dissectICMP

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59217 Crash type: Heap-buffer-overflow READ 1 Crash state: ICMPinfo::dissectICMP NetworkInterface::processPacket NetworkInterface::dissectPacket...

OSV-2023-423 Heap-buffer-overflow in NetworkInterface::dissectPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59216 Crash type: Heap-buffer-overflow READ 4 Crash state: NetworkInterface::dissectPacket fuzzdissectpacket.cpp...

OSV-2023-422 Heap-use-after-free in wmem_memdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59167 Crash type: Heap-use-after-free READ 6 Crash state: wmemmemdup copyaddress fragmentaddressespersistentkey...