OSV-2023-38 Heap-use-after-free in zend_generator_dtor_storage

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55519 Crash type: Heap-use-after-free WRITE 4 Crash state: zendgeneratordtorstorage zendobjectsstorecalldestructors shutdowndestructors...

OSV-2023-35 Heap-buffer-overflow in parse_classes_64

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55451 Crash type: Heap-buffer-overflow READ 4 Crash state: parseclasses64 classes rbinobjectsetitems...

OSV-2023-34 Heap-use-after-free in gc_trace

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55443 Crash type: Heap-use-after-free READ 2 Crash state: gctrace gsgcreclaim ireclaim...

OSV-2022-1267 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55390 Crash type: Memcpy-param-overlap Crash state: repeat pere pere...

OSV-2023-31 Heap-use-after-free in zip_source_open

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55365 Crash type: Heap-use-after-free READ 1 Crash state: zipsourceopen zipsourceopen zipopen...

OSV-2023-28 Heap-buffer-overflow in sas_read2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55308 Crash type: Heap-buffer-overflow READ 2 Crash state: sasread2 sas7bcatparseblock readstatparsesas7bcat...

OSV-2023-27 Heap-buffer-overflow in OT::Layout::GPOS_impl::PairSet<OT::Layout::MediumTypes>::apply

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55287 Crash type: Heap-buffer-overflow READ 1 Crash state: OT::Layout::GPOSimpl::PairSet::apply OT::Layout::GPOSimpl::PairPosFormat13::apply bool OT::hbacceleratesubtablescontextt::applytoOT::Layout::GPOSimpl::Pair...

OSV-2023-25 Heap-buffer-overflow in blkid_uuid_is_empty

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55318 Crash type: Heap-buffer-overflow READ 1 Crash state: blkiduuidisempty blkidprobesetuuidas probebcachefs...

OSV-2023-19 Heap-buffer-overflow in ndpi_search_bittorrent

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55218 Crash type: Heap-buffer-overflow READ Crash state: ndpisearchbittorrent checkndpidetectionfunc ndpicheckflowfunc...

OSV-2023-16 Heap-buffer-overflow in wc_AesFeedbackEncrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55174 Crash type: Heap-buffer-overflow WRITE 1 Crash state: wcAesFeedbackEncrypt wcAesOfbEncrypt evpCipherBlock...

OSV-2023-14 Stack-buffer-overflow in AffixMgr::compound_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55191 Crash type: Stack-buffer-overflow READ 1 Crash state: AffixMgr::compoundcheck SuggestMgr::checkword SuggestMgr::testsug...

OSV-2023-13 Heap-buffer-overflow in wc_AesCbcEncrypt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55161 Crash type: Heap-buffer-overflow WRITE 16 Crash state: wcAesCbcEncrypt evpCipherBlock wolfSSLEVPCipherUpdate...

OSV-2023-11 Heap-buffer-overflow in node_from_openstep

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55146 Crash type: Heap-buffer-overflow READ 1 Crash state: nodefromopenstep nodefromopenstep plistfromopenstep...

OSV-2023-6 Heap-buffer-overflow in parse_skip_ws

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55035 Crash type: Heap-buffer-overflow READ 1 Crash state: parseskipws nodefromopenstep parsedictdata...

OSV-2022-1265 Heap-buffer-overflow in BITLK_read_sb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54548 Crash type: Heap-buffer-overflow READ Crash state: BITLKreadsb cryptloadbitlk cryptload...

OSV-2022-1263 Null-dereference READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54424 Crash type: Null-dereference READ Crash state: NULL...

OSV-2022-1262 Heap-use-after-free in HEIFHandler::ensureDecoder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54246 Crash type: Heap-use-after-free READ 3 Crash state: HEIFHandler::ensureDecoder HEIFHandler::read kimgiofuzzer.cc...

OSV-2022-1261 UNKNOWN WRITE in void std::__1::allocator_traits<std::__1::allocator<wabt::interp::HandlerDesc> >

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54245 Crash type: UNKNOWN WRITE Crash state: void std::1::allocatortraits void std::1::vectorwabt::interp::HandlerDesc, std::1::allocatorwabt::inter std::1::vectorwabt::interp::HandlerDesc, std::1::allocatorwabt::interp::Ha...

OSV-2022-1260 Heap-buffer-overflow in AffixMgr::cpdcase_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54244 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::cpdcasecheck AffixMgr::compoundcheck HunspellImpl::checkword...

OSV-2022-1259 Heap-buffer-overflow in dwg_decode_INSERT_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228 Crash type: Heap-buffer-overflow READ 1 Crash state: dwgdecodeINSERTprivate dwgdecodeINSERT dwgdecodeaddobject...

OSV-2022-1258 Heap-buffer-overflow in Assimp::ObjFileImporter::createVertexArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54187 Crash type: Heap-buffer-overflow WRITE 12 Crash state: Assimp::ObjFileImporter::createVertexArray Assimp::ObjFileImporter::createTopology Assimp::ObjFileImporter::createNodes...

OSV-2022-1252 Heap-buffer-overflow in bit_read_BB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54163 Crash type: Heap-buffer-overflow READ 1 Crash state: bitreadBB bitreadBD dwgdecodeheadervariables...

OSV-2022-1251 Heap-buffer-overflow in bit_read_B

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54162 Crash type: Heap-buffer-overflow READ 1 Crash state: bitreadB dwgdecodeheadervariables decodeR13RNUMBER...

OSV-2022-1248 Object-size in wabt::BinaryReaderIR::OnCodeMetadataCount

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54092 Crash type: Object-size Crash state: wabt::BinaryReaderIR::OnCodeMetadataCount wabt::BinaryReader::ReadCodeMetadataSection wabt::BinaryReader::ReadCustomSection...

OSV-2022-1247 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54060 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2022-1246 Heap-buffer-overflow in AffixMgr::cpdpat_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54030 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::cpdpatcheck AffixMgr::compoundcheck AffixMgr::compoundcheck...

OSV-2022-1243 Security exception in com.github.javaparser.CommentsInserter.insertComments

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53980 Crash type: Security exception Crash state: com.github.javaparser.CommentsInserter.insertComments java.base/java.util.Objects.equals com.github.javaparser.Position.equals...

OSV-2022-1242 Heap-buffer-overflow in ZSTD_createDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54015 Crash type: Heap-buffer-overflow READ Crash state: ZSTDcreateDDict bloscrundecompressionwithcontext blosc2decompressctx...

OSV-2022-1235 Heap-buffer-overflow in _rrparse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53939 Crash type: Heap-buffer-overflow READ 16 Crash state: rrparse messageparse fuzzmdnsmessage.cc...

OSV-2022-1234 Heap-use-after-free in gf_odf_vvc_cfg_read_bs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53971 Crash type: Heap-use-after-free READ 1 Crash state: gfodfvvccfgreadbs vvccboxread gfisomboxread...

OSV-2022-1232 Stack-buffer-overflow in sc_pkcs15init_rmdir

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53927 Crash type: Stack-buffer-overflow WRITE 1 Crash state: scpkcs15initrmdir scpkcs15initerasecardrecursively cardoserase...

OSV-2022-1231 Heap-buffer-overflow in dv_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53919 Crash type: Heap-buffer-overflow WRITE Crash state: dvcopy bnlsh cryptofuzz::module::relicbignum::LShift1::Run...

OSV-2022-1230 Use-of-uninitialized-value in bn_trim

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53911 Crash type: Use-of-uninitialized-value Crash state: bntrim bndivdig bnsizestr...

OSV-2022-1229 UNKNOWN WRITE in gdev_mem_open_scan_lines_interleaved

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53903 Crash type: UNKNOWN WRITE Crash state: gdevmemopenscanlinesinterleaved memopen gssetdevicenoerase...

OSV-2022-1225 Heap-use-after-free in gs_font_finalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53847 Crash type: Heap-use-after-free READ 8 Crash state: gsfontfinalize gsgcreclaim ireclaim...

OSV-2022-1224 Security exception in com.fasterxml.jackson.databind.jsontype.impl.AsArrayTypeDeserializer.deserialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53822 Crash type: Security exception Crash state: com.fasterxml.jackson.databind.jsontype.impl.AsArrayTypeDeserializer.deserialize com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializerNR.deserialize...

OSV-2022-1223 Heap-use-after-free in mbedtls_pkcs7_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53798 Crash type: Heap-use-after-free READ 8 Crash state: mbedtlspkcs7free mbedtlspkcs7parseder fuzzpkcs7.c...

OSV-2022-1217 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53767 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.patternHook...

OSV-2022-1214 UNKNOWN READ in chunk_free_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53758 Crash type: UNKNOWN READ Crash state: chunkfreeobject gxfinalDeviceN gscspacefinal...

OSV-2022-1212 Heap-buffer-overflow in OT::hb_ot_apply_context_t::skipping_iterator_t::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53722 Crash type: Heap-buffer-overflow READ 4 Crash state: OT::hbotapplycontextt::skippingiteratort::next bool OT::matchinput bool OT::contextapplylookup...

OSV-2022-1211 Heap-buffer-overflow in bit_calc_CRC

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53750 Crash type: Heap-buffer-overflow READ 1 Crash state: bitcalcCRC decodepreR13 dwgdecode...

OSV-2022-1209 Heap-buffer-overflow in OT::hb_ot_apply_context_t::skipping_iterator_t::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53714 Crash type: Heap-buffer-overflow READ 4 Crash state: OT::hbotapplycontextt::skippingiteratort::next OT::Layout::GSUBimpl::Ligature::apply bool OT::hbacceleratesubtablescontextt::applytoOT::Layout::GSUBimpl::Liga...

OSV-2022-1208 Stack-buffer-overflow in cmap_put_ranges

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53711 Crash type: Stack-buffer-overflow READ 1 Crash state: cmapputranges psfwritecmap pdfwritecmap...

OSV-2022-1207 Security exception in java.desktop/java.awt.image.DataBufferInt.<init>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53708 Crash type: Security exception Crash state: java.desktop/java.awt.image.DataBufferInt. java.desktop/java.awt.image.Raster.createPackedRaster org.apache.commons.imaging.formats.jpeg.decoder.JpegDecoder.visitSOS...

OSV-2022-1201 Stack-buffer-overflow in msc_zero_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53631 Crash type: Stack-buffer-overflow WRITE Crash state: msczeroobject msccreateobject musclecreatedirectory...

OSV-2022-1199 Use-of-uninitialized-value in rawspeed::RawImageData::checkRowIsInitialized

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53618 Crash type: Use-of-uninitialized-value Crash state: rawspeed::RawImageData::checkRowIsInitialized rawspeed::RawImageData::checkMemIsInitialized rawspeed::RawDecoder::decodeRaw...

OSV-2022-1198 Heap-buffer-overflow in dwg_json_LTYPE

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53617 Crash type: Heap-buffer-overflow READ 8 Crash state: dwgjsonLTYPE jsonobjectswrite dwgwritejson...

OSV-2022-1196 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53627 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.lang.Module.canRead java.base/sun.invoke.util.VerifyAccess.isModuleAccessible...

OSV-2022-1195 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53626 Crash type: Memcpy-param-overlap Crash state: repeat repeat pere...

OSV-2022-1194 Heap-buffer-overflow in sputs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53619 Crash type: Heap-buffer-overflow READ Crash state: sputs gxserializeIndexed pdfcolorspacenamed...